Two roles, in plain terms. C3NTR is made by andBeyond.digital Ltd. For some data we decide why and how it is used, which makes us the controller: visitors to this website, the early-access and roadmap forms, a school's billing contact, support and feedback you send us, and the records we keep to run and secure the service. For everything inside the C3NTR app and web portal we act on your school's instructions, which makes us the processor and your school the controller. If you are a member of a school, your school is the controller — ask them first; we help them answer you. Section 2 is for school members and staff; section 3 is for website visitors and school leaders.
1. Who we are
C3NTR is a knowledge and curriculum platform for schools and organisations that teach a discipline. It is operated by andBeyond.digital Ltd (registered as ANDBEYOND.DIGITAL LTD; "C3NTR", "we", "us"), registered in England and Wales, company number 17260951, with our registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. Our registration with the Information Commissioner's Office (ICO) is ZC172279.
This policy is written under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For anything about your personal data, write to info@c3ntr.app. For billing questions, write to support@c3ntr.app.
2. If you are a member or staff of a school
This section applies when you use the C3NTR app or web portal because your school enrolled you, or because you teach or help run a school. Your school decides what it holds about you, who in the school can see it, and when it goes. We process that data on the school's behalf under a Data Processing Agreement. There is no advertising, we do not sell your data, we do not profile you, and no decision about you is made automatically. There is no messaging, chat, comments or forums: only school staff publish, and only to their own school.
The table lists what the app and portal hold about you, who can see it, and the retention rule that is true today. We have not written down any period the software does not yet enforce. Where something is not yet deleted automatically, we say so, and we delete it when you or your school ask. "C3NTR" in the table means the small number of andBeyond.digital staff who run the service and answer support requests.
| What we hold | Who can see it | How long we keep it |
|---|---|---|
| Account and sign-in. Your mobile phone number (the identity you sign in with in the app); your email address, only if you linked one for portal access or were invited to the portal by email; when your account was created and last signed in; which version of the app's terms and this policy you accepted, and when. In the portal a session cookie keeps you signed in. | You; your school's leaders and administrators; C3NTR. | Kept until you delete your account, or you or your school ask us to delete it. If you have not signed in for 21 months we warn you by push notification; at 24 months without a sign-in the account, and everything listed below, is deleted automatically. |
| Profile. Your name, an optional nickname and an optional photo. Your photo can be loaded only by you, by staff of a school you belong to, and by C3NTR. A file's direct address contains an unguessable key; anyone holding that exact link can open it until the file is deleted. | You; your school's leaders and administrators; C3NTR. Other members see your name only where the school shows it (for example a public attendance list, if turned on). | Deleted with your account. You can change or remove your photo at any time. |
| Age band and guardian. The age band your school set when it invited or approved you (under 13, 13 to 17, or 18 or over). For anyone under 13, the name and a phone number or email address of a parent or guardian the school entered, and whether the school has recorded telling that person about C3NTR. We never contact the parent or guardian ourselves. | Your school's leaders and administrators; C3NTR. Not shown to other members. | Kept with your membership of that school and deleted with it, or with your account. On an invitation that is never used, deleted with the invitation after 12 months. |
| School membership. Your role, status (pending or active), grade level, join date, any expiry date your school sets, and the venues you prefer. | You; your school's leaders and administrators; C3NTR. Other members do not see these. | Removed when you delete your account, including any join request that was never approved. |
| Grading path and grade history. Which steps on your grading path you have completed, when, and which instructor confirmed them; each time your grade was raised (new grade, date, who raised it); and any note the member of staff wrote at the time. | You; your school's instructors, leaders and administrators; C3NTR. | Removed when you delete your account. |
| Reading progress and favourites. Which items you have opened, how far you got, whether you finished, when you last viewed each one, and your favourites. This is what powers "continue reading". | You and C3NTR. Staff do not see your reading list. They see anonymous school-wide figures (such as the most-read articles) and whether you have completed a reading step on your grading path. | Deleted with your account. |
| Attendance responses. Your answer to an event (going, maybe or can't go), the date it relates to, when you answered and your display name. | You; your school's leaders and administrators; C3NTR. Other members see your answer and name only if your school turns on the public attendance list (off by default). Everyone sees the number going. | Removed when you delete your account. |
| Notifications and devices. Whether notifications are on, which kinds, your quiet hours, when you last read announcements, and a push token that lets Apple or Google reach your device. Pushes carry only the school and item they relate to. | You; your school's leaders and administrators (preferences only); C3NTR. | Preferences are removed with your membership. The push token for a device is removed when you sign out on it or delete your account. |
| Search terms. Search runs on your device (section 6). The words you search for are sent in batches and counted for your school without your name or account id. | Your school's leaders and administrators see the most common terms and the searches that found nothing, as totals. We do not store who searched for what. | Not linked to you, so deleting your account does not change it. Kept until your school asks us to delete it. |
| Feedback and template requests. What you wrote, any screenshots, and the app context (school, role, screen, app version, platform, language). A contact email you enter is used only if you tick the box allowing a reply. A copy is emailed to our support inbox with your name; it never carries your phone number, and carries an email address only if you ticked that box. Template requests are emailed the same way, with your name only. | You; C3NTR. | Removed when you delete your account, and deleted automatically 24 months after you sent it. |
| A data download you asked for. When you use Download my data (section 8), the file is placed in our storage so that it can be downloaded. | Whoever holds the download link, which is given only to you and works for one hour. | Deleted within one day, and sooner if you ask for a new one or delete your account. |
| Crash reports. If the app crashes, a report goes to Firebase Crashlytics with the device model, operating system and app version and the technical trace. We do not attach your account id. Reporting is on by default. You can switch it off in the app under Privacy & data, then Your data, and it is always off for an account a school has marked as under 18. | C3NTR. | Held by Google for Crashlytics' default retention period; we have not set a custom one. |
| Invitations. Before you join, your school may have added your name, phone number, intended role, grade and venues to its invitation list so the app recognises you when you sign in. A leader may have picked your details from the contacts on their own phone; only the contacts they select are uploaded, never the whole address book. Until you join, you have no relationship with C3NTR, and it is the school's responsibility to tell you it has added you. | The leaders and administrators of that school; C3NTR. | Kept for 30 days after you join (marked inactive), then deleted automatically; deleted at once if you delete your account. An invitation that is never used is deleted after 12 months. Your school can remove one sooner. |
| Content and media you publish (staff). The articles, terms, announcements, events, venues and media you create, with your account id on each. Photos, video and audio may show members, including children; your school is responsible for having permission to publish them. | All active members of your school. School logos, covers, images, video and audio can be loaded only by active members of your school (and, for starter templates, by any signed-in user). A file's direct address contains an unguessable key; anyone holding that exact link can open it until the file is deleted. | Kept with the school's content until the school deletes it. Your account id is removed from it when you delete your account. |
| On your device. An offline copy of your school's content, your recent searches and recently viewed items, your settings, and (for staff) a local history of drafts. None of this is sent to us. | Whoever can unlock your device. | Until you clear it in the app's cache settings or delete the app. Not cleared on sign-out. |
School-wide figures. Once a day we calculate counts for your school's leaders: members at each grade, how many signed in during the last 30 days, the most-read articles and how many people opened each announcement. Members can also read their school's own record, which includes the school's billing email address and website.
Lawful basis. Your school, as controller, decides the lawful basis for processing your data and is responsible for telling you about it.
3. If you visit this website or lead a school
For the data in this section we are the controller: we hold it to answer you, bill a school, and keep the service secure.
| What we hold | Why, and who receives it | How long we keep it |
|---|---|---|
| Early-access form. Your name and phone number, when you sent it and which page it came from. | To contact you about C3NTR and your request. Stored in Google Cloud (London) and emailed to our inbox. Lawful basis: legitimate interest. You can tell us to stop at any time. | Deleted automatically 24 months after you sent the form, or sooner on request. |
| Roadmap ideas. The title, category and description you submit, plus the IP address the form was sent from. | To read and consider your idea. The IP address is kept to limit abuse of the form and is not emailed. Lawful basis: legitimate interest. | Deleted automatically 24 months after you sent the form; the IP address is removed after 30 days. Sooner on request. |
| Buying a plan from the website. If you start a purchase before creating a school: your phone number, the school name, discipline and plan, and the Stripe ids once payment completes. | To connect your payment to the school you then create. Your phone number is passed to Stripe as a reference on the checkout. Lawful basis: steps towards a contract with you. | Removed once the school is created. If you do not finish the purchase, the record is deleted automatically after 90 days. |
| Billing contact. The school's billing email, the school name, the plan and its status, and Stripe customer and subscription ids. | To bill the school and answer billing questions. Stripe receives the billing email, school name and a school reference. Card details are entered on Stripe's own pages and never reach us. Lawful basis: our contract with the school. | Kept while the school has an account, then as long as accounting law requires. No automatic deletion today — deleted on request where the law allows. |
| Portal invitations. The email address, name and school of a leader invited to the web portal. | To sign that person in by magic link and attach them to the right school. Lawful basis: contract. | Deleted 30 days after it is used, or 12 months after it was sent if never used; sooner if the invited person deletes their account. |
| Support and feedback emails. Whatever you send to info@c3ntr.app or support@c3ntr.app, and feedback sent from the app (section 2). | To answer you. Our email runs on Google Workspace (Gmail). Lawful basis: legitimate interest. | Kept in our mailbox. Deleted on request. |
| Server logs and form protection. Your IP address, browser, operating system and the pages you request, recorded by Google Cloud. Our two public forms use Cloudflare Turnstile, which receives your IP address to tell people from bots. We also count form submissions per IP address to limit abuse. | To keep the site running and secure. Lawful basis: legitimate interest. | Google Cloud logs: Google's default retention period (30 days for standard logs). The per-address rate-limit counter is deleted automatically after 7 days. |
| Service administration. An audit log of administrative actions we take (for example changing a phone number at your request) with the account ids, phone numbers or emails involved; server logs, which can include a phone number or email when the action concerned one; and platform-wide counts per school with no personal identifiers. | To keep an audit trail, investigate problems and understand how the platform is used. Lawful basis: legitimate interest and our duty to keep the service secure. | Audit log entries are deleted automatically after 12 months. Server logs follow Google's default retention (30 days). |
Where we rely on legitimate interest we have weighed it against your rights and kept the data to the minimum the purpose needs. Where the law requires us to keep or hand over data, we rely on that legal obligation. Where something needs your consent, such as the reply email in feedback or any future optional cookie, we ask first and you can withdraw it at any time. We do not sell personal data or use it for automated decisions or profiling.
4. Children
This section is written for parents and guardians. Many schools on C3NTR teach children, and a school may have enrolled your child.
How your child gets an account. You must be 18 or over to create or run a school on C3NTR. A school adds a member by name and phone number, and the member signs in with a code sent to that phone, which may be the child's own or yours. When a school enrols someone under 18 it confirms to us that it has the authority of a parent or guardian to do so, and that it has given the privacy information that members and their parents or guardians need. If you have a question about why your child is on C3NTR, or what the school has entered, the school is the right first call. We will help it answer you.
What C3NTR holds about a child. Exactly what section 2 describes and nothing more. We do not collect a date of birth. The school sets an age band (under 13, 13 to 17, or 18 or over) on every invitation or approval, and for anyone under 13 it must record a parent or guardian's name and a phone number or email address before the account can be approved. The school can also record that it has told that parent or guardian. We hold those details with the child's membership; we do not use them to contact anyone.
Higher-privacy defaults. When a school marks a member as under 18, the app switches to higher-privacy defaults for that account: the words they type into search are not kept or sent to the school's search list, crash reports are switched off, and no profile photo can be added. Every member, whatever their age, accepts the app's terms and this policy on first sign-in, and again whenever they change; we record which version was accepted and when. App builds released before 28 September 2026 still show a minimum age of 13 in their in-app terms; this policy prevails.
What C3NTR does not do. There is no advertising. We do not profile children, track them across other apps or sites, or make automated decisions about them. There is no messaging, chat or comment feature, so no one can contact your child through C3NTR. Only the school's staff can publish, and only to the school's own members. We do not sell data.
Photos and video. A school may publish photos, video or audio of classes. It is responsible for having your permission before publishing anything that shows your child. If it has published something you did not agree to, ask the school to remove it; if that does not work, write to us and we will act with the school.
Deleting a child's data. Ask the school first; it can remove the membership and ask us to delete what remains. Your child (or you, using their device) can also delete the account inside the app, which removes what section 8 lists. For anything not yet removed automatically, or if you cannot reach the school, write to info@c3ntr.app. We will check with the school that you are entitled to ask, then delete and confirm in writing.
5. Where your data is stored and who else receives it
The app and portal store their data in Google Cloud. The database, file storage and server functions run in London (europe-west2); the web portal is served from the Netherlands (europe-west4). Transactional email goes through Google Workspace. Cloudflare Turnstile, which protects the two forms on this website, runs from Cloudflare's edge in the EU and United States. If a leader uses the optional writing assistant (section 6), their notes pass through our London server to the AI provider they picked, in the United States.
Where a provider handles data outside the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on an adequacy decision. The full, current list of companies that process data for us, with their locations and what they do, is at c3ntr.app/subprocessors. We give 30 days' notice of any change on that page and by email to school leaders (an email subscription on the page is planned).
Some services are contacted by your own device, not by us, and see your IP address as any website would:
- YouTube and Vimeo, when you play a video a school has embedded from them.
- Pexels, when staff choose a stock image or clip. The search goes through our servers with no personal identifiers; the file is downloaded by the device.
- Google Fonts, loaded by the app and portal at runtime.
- Websites a school imports from (section 7), fetched by the device.
- Apple and Google platform services: App Attest, DeviceCheck and Play Integrity to prove the app is genuine, and their push services for notifications.
We do not share personal data with anyone else unless the law requires it.
6. AI features
C3NTR has two features that use AI.
- On-device search. The app bundles a small language model, and matching runs on your phone. Your query is not sent anywhere to produce results. Separately, as section 2 explains, the words searched for are counted for your school without your identity.
- Writing assistant (optional, off by default; school leaders in the web portal). A school leader may bring their own API key from Anthropic or OpenAI to draft articles and glossary terms. In the web portal the key is stored in the browser's local storage. The app's own version is for C3NTR staff only and keeps the key in the device's secure storage. When the leader asks for a draft, the notes they typed and their key go straight from their browser or device to the provider they chose, in the United States. Nothing passes through C3NTR: we never receive, store or log the key or the notes. No member data is sent; the assistant sees only what the leader types.
No AI feature profiles members, makes decisions about them, or sends personal data to an AI provider without a school leader deliberately asking it to.
7. Content import and the branding fetch
Importing content. Staff can bring curriculum content in from a web page, a document or a file shared to the app. The page or file is read on the staff member's own device: text is extracted there and any chosen images are uploaded to the school's own storage. Our servers do not fetch or cache the source page. A source line with the original address is added to the end of an imported article. The school must have the right to use what it imports.
Finding your school's branding. When a leader enters their school's website address during setup, one of our servers fetches that page (identifying itself as C3NTR) to look for the school's logo, colours and a hero image, and saves the candidate images in the school's storage for the leader to choose from. We fetch only the address the leader gives us, and the leader must have the right to use what is fetched. Images that do not make the shortlist are deleted straight away; shortlisted images stay with the school's files until the school deletes them.
8. Your rights
Under UK GDPR you can access the personal data held about you and get a copy; correct what is wrong; delete it, subject to anything the law requires us to keep; restrict its use in certain situations; take it with you in a structured, machine-readable form; object to processing based on legitimate interest, including any direct marketing; and withdraw consent where consent is the basis.
If you are a member of a school, your school is the controller. Ask them first. If you would rather write to us, or the school does not respond, write to info@c3ntr.app and we will handle it with the school. We answer within one calendar month and do not charge for most requests.
Deleting your account in the app. Delete account is in Edit profile. You confirm with a code sent to your phone. It removes your account, profile and photo, favourites, reading progress, school memberships (including join requests that were never approved), the invitation entries your school made for you, feedback and screenshots you sent, your event attendance responses, your grading history and the push registration for your device, and removes you from sign-in. Content you published as staff stays with the school with your account id removed. If you are the only leader of a school that still has members or a plan, the app asks you to hand the school to another leader or delete it first; a school with neither is deleted with your account. A school leader can delete the whole school from School details in the app: every member loses access at once, everything under the school is deleted, and any plan on it ends that day. Stripe keeps the school's billing records for as long as accounting law requires.
Getting a copy of your data. In the app, open Privacy & data, then Your data, and choose Download my data. We send a code to your phone to check it is you, and the app then opens a download link for a file in a structured format (JSON) with your profile, school memberships and grades, favourites, reading progress, event attendance responses, the invitation entries your school made for you and any feedback you sent. The link works for one hour. The file is held in our storage only so that it can be downloaded: it is deleted within a day, and sooner if you make a new one or delete your account. A school leader can download the school's content, roster and records in the same way from School details. If you cannot use the app, write to info@c3ntr.app and we will provide a copy within one month (the DPA gives schools 30 days for a whole-school export).
Two things to know. Crash reports go to Google's Crashlytics without your account id unless you switch them off. Members' search words are counted for their school with no identity attached. Both are described in section 2.
Complaints. We would like the chance to put things right first, but you can complain at any time to the Information Commissioner's Office: ico.org.uk, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, SK9 5AF.
9. Security
Data is encrypted in transit (TLS) and at rest by Google Cloud. There are no passwords to leak: the app signs you in with a one-time code sent to your phone, the web portal with a one-time link sent to your email. Every request must prove it comes from a genuine copy of the app or portal (Firebase App Check), sign-in attempts are rate-limited, and what each person can read or change is checked on the server against their role in the school. When a school removes a staff member, their elevated access is revoked as soon as their current session token expires, within the hour. Administrative access to our cloud infrastructure is restricted to named andBeyond.digital staff accounts.
No system is perfectly secure. This policy is open about the gaps we are still closing.
10. Personal-data breaches
If a personal-data breach happens that puts people at risk, we will notify the affected school's leader (the email associated with the schoolLeader account in the C3NTR portal) without undue delay, and in any event within 72 hours of becoming aware of the breach, as required by UK GDPR Articles 33–34. We will say what happened, whose data and roughly how many records were affected (as far as we know), what it could mean for them, and what we have done about it.
School leaders are responsible for passing on breach notice to affected members of their school. We will also notify the Information Commissioner's Office (ICO) where the law requires.
Telling you about a breach is not an admission that we were at fault.
11. Cookies
This website uses only strictly necessary cookies (set by Cloudflare Turnstile when you use one of our forms). We do not currently set analytics, advertising or social-media cookies. If we introduce optional analytics cookies, we will ask for your consent first and update this policy and our Cookie Policy, which lists every cookie in use and how to manage them.
12. Changes to this policy
The version number and effective date are at the top of this page. Before a material change takes effect we will email every school leader and ask them to tell their members; the new version also appears in the app. Previous versions are archived and available on request from info@c3ntr.app, so a school can always see the version it accepted.
13. Contact
For anything about your personal data, a rights request, or a complaint: info@c3ntr.app. For billing and refunds: support@c3ntr.app. By post: andBeyond.digital Ltd, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ.