UK GDPR compliant. Your school's data is stored in the UK.
C3NTR is built around UK data protection law from the ground up. This page is what a school's governors, parents or DPO can take to a procurement review.
What we do, in plain language
UK GDPR + DPA 2018
Subject access requests answered within one calendar month. Built around UK GDPR Article 6 lawful bases. No automated decision-making or profiling of students.
Stored in the UK
Your school's database, files and Cloud Functions run in Google Cloud's London region (europe-west2). The web portal is served from Google's Netherlands region (europe-west4), and Cloudflare Turnstile protects this website's forms. If a school leader turns on the optional AI writing assistant, the notes they choose to send go to Anthropic or OpenAI in the United States under the UK International Data Transfer Addendum.
Encrypted in transit
All traffic between the app, the web portal and our servers uses TLS. Access to personal data is restricted to personnel with a clear business need.
Account deletion in the app
Any member can delete their account from the app at any time. A school leader can ask us to delete the school. We confirm every deletion in writing.
Your school's data belongs to your school.
We are clear about what we collect, why, and how you remove it.
All curriculum, student records, and school materials remain yours. Download a copy of your own data, or your school's, from the app at any time, and delete your account there too.
Usage data is aggregated at school level, which articles are most read, not which student read them. Individual behaviour is never tracked.
Your school's data is held in Google Cloud's London region (europe-west2) and handled under UK GDPR and the Data Protection Act 2018. The web portal is served from Google's Netherlands region. Every provider we use is listed at /subprocessors.
C3NTR runs on subscriptions, not advertising. Your data is never sold, rented, or shared with any third party.
Semantic search is processed locally on the phone by a model bundled in the app; your curriculum is not sent anywhere to be searched. The optional AI writing assistant is a separate, leader-only tool, described below.
After cancellation we delete your school's data on request and confirm in writing. No minimum contract.
AI features you control.
C3NTR's search runs entirely on your device; your curriculum never leaves the phone to be searched. AI writing is optional and off by default: a school leader brings their own Anthropic or OpenAI key, chooses what to send, and reviews every draft. The notes they send travel, with their key, straight from their device to the provider they chose. Nothing passes through C3NTR.
-
Unified search, on your device
Search across articles, glossary terms, and explore content by meaning or keyword. Grade filtering, recents, and related suggestions, all powered by a model bundled in the app. Nothing leaves your phone.
-
AI writing assistant
Connect your own Claude or ChatGPT key. Generate draft articles from notes or bullet points, you review before anything is published. When you use it, the notes you type are sent, with your key, straight from your device to the provider you chose (Anthropic or OpenAI, in the United States). Nothing passes through C3NTR, and no student data is involved.
-
Always opt-in
C3NTR will never profile your students or share data with third parties. AI features are always opt-in, search works without any external service, and writing tools only connect when you explicitly choose to use them with your own key.
UK GDPR + Data Protection Act 2018
C3NTR processes personal data under the UK General Data Protection Regulation and the Data Protection Act 2018. Lawful bases under Article 6 apply to every category of data we hold. We answer subject access requests within one calendar month, as required by UK GDPR Article 12. We do not use student data for automated decision-making or profiling under Article 22.
Sub-processors
We use a small set of trusted providers to host and operate C3NTR. Each handles a defined slice of the service and is bound by its own data-protection terms:
- Google LLC / Firebase, primary platform (auth, database, storage, hosting). europe-west2 (London).
- Stripe, payment processing for subscriptions. PCI-DSS certified.
- Pexels, stock imagery for templates (we proxy via a Cloud Function; no school data sent).
- Cloudflare, Turnstile bot protection on web forms only.
The full list is maintained on the sub-processors page. A Data Processing Agreement (DPA) is available, useful if your school requires one for procurement. See also the trust centre for every legal document in one place.
Your rights under UK GDPR
You can ask to access, correct, delete, port, or object to the processing of any personal data we hold about you or your school. To exercise any right, email info@c3ntr.app. We respond within one calendar month.
You can also lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters, at ico.org.uk.
For security disclosures, please email info@c3ntr.app with the subject line Security disclosure.
Ready to give your students a knowledge home?
Free for the first 10 students. No credit card. A working library in under an hour.
Start free for your school