Built for classrooms. Secured for kids.
Llamaroo is a gamification platform where children learn, so we treat trust as a product feature, not a checkbox. Here is exactly how we protect your school, your teachers, and your students.
Our commitments
Minimal data collection
Students join with a display name and a class PIN. No emails, no passwords, no personal devices tracked. We collect only what a lesson needs to work.
Zero ads, zero tracking
We do not show advertising, sell data, or use third-party trackers. Llamaroo is funded by school subscriptions, not attention harvesting.
Teacher-controlled access
Every classroom is gated by a teacher-created PIN. Students cannot browse, message, or interact outside their assigned course path.
AI with guardrails
AI-generated course content should always be reviewed by a teacher before publishing and before any student sees it. Students never interact with a raw language model.
UK and EU data residency
User data is stored within jurisdictions that meet GDPR and UK GDPR requirements. We use Supabase (AWS eu-west) and Clerk for authentication.
Transparent roadmap
Our compliance plan is public. We are working toward Cyber Essentials, ICO registration, and DfE data standards so schools can adopt Llamaroo with confidence.
Policies and legal
Privacy Policy
How we collect, store, and protect data for teachers and organizations that use Llamaroo.
Read policyChildren's Privacy
Our specific commitments to protecting children's data under GDPR, UK GDPR, and AADC.
Read policyCookie Policy
The cookies and local storage Llamaroo uses, and why. No tracking cookies, no surprises.
Read policyTerms of Service
The legal agreement for schools, teachers, and organizations using the Llamaroo platform.
Read policyData Processing Agreement
Our DPA for schools and organisations, covering how Llamaroo processes data as a processor on your behalf.
Read policyCompliance roadmap
We are actively working toward these certifications and standards. This list will grow as we do.
- ICO registration (UK Data Protection Act 2018)
- Cyber Essentials certification
- DfE data standards alignment
- DPIA (Data Protection Impact Assessment) publication
- SOC 2 Type I readiness
- Age-appropriate design code (AADC) self-assessment