Skip to content
UK GDPR · DPA 2018

UK GDPR compliant. Data stays in London.

C3NTR is built around UK data protection law from the ground up. This page is what a school's governors, parents or DPO can take to a procurement review.

What we do, in plain language

UK GDPR + DPA 2018

Subject access requests answered within one calendar month. Built around UK GDPR Article 6 lawful bases. No automated decision-making or profiling of students.

Hosted in London

Your school's data sits on Google Cloud (europe-west2, London). No transfer outside the UK/EEA is required for core operation. Form submissions are handled by a Cloud Function in the same region.

Encrypted in transit

All traffic between the app, the web portal and our servers uses TLS. Access to personal data is restricted to personnel with a clear business need.

Account deletion on request

A school or member can request deletion of their personal data and all content at any time, in-app or in writing. We complete deletion within 30 days and confirm in writing.

Your school's data belongs to your school.

We are clear about what we collect, why, and how you remove it.

Your data, always

All curriculum, student records, and school materials remain yours. Export or delete everything at any time from your dashboard.

Aggregated analytics only

Usage data is aggregated at school level, which articles are most read, not which student read them. Individual behaviour is never tracked.

Stored in Europe

Data is hosted in Google Cloud's European data centres, handled under UK GDPR and the Data Protection Act 2018.

Never sold or shared

C3NTR runs on subscriptions, not advertising. Your data is never sold, rented, or shared with any third party.

AI runs on-device

Semantic search and AI features are processed locally on the phone. Your curriculum is never sent to a cloud AI API, not ours, not anyone else's.

After cancellation, data is retained for 30 days then permanently deleted. No minimum contract.

AI ON YOUR TERMS

AI features you control.

C3NTR's search runs entirely on your device, your curriculum never leaves the phone. AI writing is optional: you bring your own API key, you choose what to send, and your key is stored only on your device. C3NTR never collects, stores, or forwards your content to AI providers.

  • Unified search, on your device

    Search across articles, glossary terms, and explore content by meaning or keyword. Grade filtering, recents, and related suggestions, all powered by a model bundled in the app. Nothing leaves your phone.

  • AI writing assistant

    Connect your own Claude or ChatGPT key. Generate draft articles from notes or bullet points, you review before anything is published. When you use it, your content is sent directly to the provider you choose using your key. C3NTR never sees, stores, or intermediates this data.

  • Always opt-in

    C3NTR will never profile your students or share data with third parties. AI features are always opt-in, search works without any external service, and writing tools only connect when you explicitly choose to use them with your own key.

UK GDPR + Data Protection Act 2018

C3NTR processes personal data under the UK General Data Protection Regulation and the Data Protection Act 2018. Lawful bases under Article 6 apply to every category of data we hold. We answer subject access requests within one calendar month, as required by UK GDPR Article 12. We do not use student data for automated decision-making or profiling under Article 22.

Read the full privacy policy →

Sub-processors

We use a small set of trusted providers to host and operate C3NTR. Each handles a defined slice of the service and is bound by its own data-protection terms:

  • Google LLC / Firebase, primary platform (auth, database, storage, hosting). europe-west2 (London).
  • Stripe, payment processing for subscriptions. PCI-DSS certified.
  • Pexels, stock imagery for templates (we proxy via a Cloud Function; no school data sent).
  • Cloudflare, Turnstile bot protection on web forms only.

The full list is maintained on the sub-processors page. A Data Processing Agreement (DPA) is available, useful if your school requires one for procurement. See also the trust centre for every legal document in one place.

Your rights under UK GDPR

You can ask to access, correct, delete, port, or object to the processing of any personal data we hold about you or your school. To exercise any right, email info@c3ntr.app. We respond within one calendar month.

You can also lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters, at ico.org.uk.

For security disclosures, please email info@c3ntr.app with the subject line Security disclosure.

Ready to give your students a knowledge home?

Free for the first 30 students. No credit card. A working library in under an hour.

Start free for your school