Sukrat handles student learning data because the product needs it to personalise teaching. Not for advertising, resale, or model training.
Student data is used to personalise learning and show progress. It is not sold to advertisers or data brokers.
Student data is not used to train third-party AI models. This is enforced in architecture and in vendor agreements.
Personally identifiable information is stripped before any external model call. Providers receive curriculum context and anonymised session content only.
Practice and feedback are grounded in retrieved exam materials, not pulled from random internet searches. Off-topic prompts are blocked.
Row-level security means each student sees only their data, teachers see only their cohort, and schools see only their institution.
Student data is stored in the EU region. Encryption at rest and in transit across application and pipeline layers.
Sukrat teaches to the weak topic, not to the answer. Feedback traces to the specific criterion a student missed. The system scaffolds understanding through follow-up questions, enforced at the system level rather than as a prompt afterthought.
Student services are intended for users aged 13+. Guardrails screen inputs and outputs before they reach students. Generated school content is teacher-reviewable before students see it.
| Category | Approach |
|---|---|
| Learning data | Answers, mastery scores, session history, and topic maps. Used only to personalise teaching and show progress. |
| Account data | Name, email, school affiliation, and role. Used for authentication and access control. |
| Retention | Active accounts keep data for the life of the account. Deletion requests are processed within 30 days, and backups are purged on standard rotation. |
| Storage region | Primary student data in EU-region infrastructure. Encryption at rest and in transit. |
All vendors are bound by data-processing terms. Personal data is stripped before external AI calls.
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, row-level security |
| Vercel | Web application hosting |
| DigitalOcean | Backend API and ML pipeline |
| AI model providers | Content generation with anonymised curriculum context only. No personal data, and no training on student data. |
Full subprocessor list and data-processing terms are provided during school procurement. Request: sahmad@sukrat.ai
For procurement, parent review, or implementation teams.
What we collect, why, retention, and your rights.
Account use, subscriptions, and service terms.
How cookies and analytics are used on sukrat.ai.
Data Processing Agreement, pilot structure, success criteria, and rollout support for school buyers.
Questions: sahmad@sukrat.ai for schools and DPA, or zayad.malik@sukrat.ai for technical.
Explore the product, read the policies, or talk to us about school deployment.