Privacy notice

Depth is a classroom tool for learning Python. Schools use it in lessons: a teacher sets one question, pupils write code in the browser, and the teacher sees how far each pupil has got. This notice explains what Depth stores, why, where, and for how long.

Who is responsible

The school is the data controller for its pupils’ and staff’s information. Depth processes it on the school’s behalf, only to run lessons. For questions, contact your school’s data protection lead.

What we store

• Sign-in: people sign in with their school Google (or Microsoft) account. Sign-in is refused for accounts that aren’t from a school using Depth.
• Pupils: first name and last initial (e.g. “Ada L”), and which classes they’ve joined. No email address, date of birth or full name is stored for pupils.
• Teachers and admins: their school email address, so the school can say who is a teacher.
• Lesson work: each pupil’s code, the results of the tests on it, how many times they ran it, and any feedback from their teacher or from the AI.

We don’t use advertising, tracking cookies or analytics, and we don’t sell or share data.

AI

Depth uses Google Gemini on Google Cloud’s Vertex AI, in London, to suggest questions, give pupils hints, and write reports when a teacher asks. The AI is sent code, tests and results only, never names or account details. Google does not use this data to train its models. A school admin can switch AI off.

Where it is stored

Depth runs on Google Cloud and Firebase. Lesson data is stored in Google’s London region (europe-west2). Pupils’ code runs inside their own browser, not on our servers.

How long we keep it

Lesson work is temporary. When a lesson finishes, Depth saves each pupil’s code and feedback into the school’s own Google Drive (if the school has connected one), and then deletes its copy after the number of days the school has chosen (14 by default, at most 90). If the school hasn’t connected Drive, lesson work is still deleted after that time. Lessons left unfinished are closed automatically after a day.

Google Drive

If a school admin connects Google Drive, Depth asks only for permission to create and manage the files it makes itself (the “drive.file” permission). It cannot see anything else in that Drive. The permission can be removed at any time from the school’s settings page in Depth, or from the Google account’s security settings.

Your rights

You can ask to see, correct or delete information about you. Because the school is the data controller, please ask the school first; they can ask us to act on it.