Trellis — AI-Powered K-12 Tutoring Platform
trellislearn.com
Trellis is operated by Clario Technologies Ltd (company number 17097330), registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
We provide AI-powered tutoring services for students aged 5 to 18. Our platform helps students learn through interactive conversations with an AI tutor, covering their school curriculum across Study, Test, and Practice modes.
For data protection purposes, Clario Technologies Ltd is the data controller. This means we are responsible for deciding how we hold and use personal information about you and your child. This policy complies with the UK GDPR, the Data Protection Act 2018, and the EU General Data Protection Regulation (GDPR) for users located in the European Economic Area.
Contact details:
Email: hello@trellislearn.com
Website: trellislearn.com
We collect and process the following information:
We do not collect:
We use your data for the following purposes, each with a lawful basis under UK GDPR:
Legal basis: Performance of a contract (your agreement to use Trellis)
Legal basis: Legitimate interests (ensuring service quality and security)
Legal basis: Performance of a contract / Legitimate interests
Legal basis: Legal obligation
Legal basis: Consent
Trellis is designed for students aged 5 to 18. We take children's privacy seriously and comply with UK GDPR requirements for processing children's data.
When you create a Trellis account using your Google account, you (the parent or legal guardian) are the account holder. The account and all data associated with it are under your control.
Under UK GDPR (Article 8, as applied in the UK under the Data Protection Act 2018), children under 13 require verifiable parental consent for online services that process their personal data. Since you create the account as the parent using your own Google account, you are providing this consent.
We follow the UK Information Commissioner's Office (ICO) Age Appropriate Design Code principles:
To provide Trellis, we work with carefully selected third-party services. Some of these are located outside the UK, which means your data may be transferred internationally. We ensure appropriate safeguards are in place.
What they process: Student messages, uploaded images (as base64-encoded data), and conversation history to generate AI tutoring responses, analyse images, and provide text-to-speech audio.
Safeguards: OpenAI is certified under the UK Extension to the EU-US Data Privacy Framework (also known as the UK-US Data Bridge). OpenAI's API terms explicitly state they do not use customer data to train their models.
Data location: United States
What they process: Authentication via Google OAuth (Google provides your email, name, and Google user ID).
Safeguards: Google complies with UK GDPR and uses Standard Contractual Clauses for international transfers.
Data location: Global infrastructure (varies by service)
What they process: Stores uploaded student files (photos of textbooks, homework, notes).
Safeguards: Cloudflare complies with UK GDPR and offers UK/EU data residency options. Data is encrypted at rest and in transit.
Data location: Global infrastructure with UK/EU options
What they process: Search queries (e.g., "solar system diagram") to fetch educational images from Google Image Search. No student personal data is sent.
Data location: Varies
What they process: Hosts our backend application infrastructure.
Safeguards: Covered by UK-US Data Bridge (UK Extension to EU-US Data Privacy Framework).
Data location: United States
What they process: Error logs and diagnostic information (only if you consent). Configured to not automatically capture personally identifiable information.
Safeguards: Covered by UK-US Data Bridge and Standard Contractual Clauses.
Data location: United States
What they process: Payment processing. Stripe processes payment card details directly — Trellis never sees or stores your card number.
Safeguards: Stripe is PCI-DSS Level 1 certified and complies with UK GDPR.
Data location: Global infrastructure
The UK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge) is a mechanism approved by the UK government that allows UK organisations to transfer personal data to certified US companies with adequate protections. This ensures your data transferred to the United States receives protections equivalent to UK GDPR.
We take data security seriously and implement appropriate technical and organisational measures:
Your data is stored across multiple services (listed in Section 5). We use cloud infrastructure with redundancy and backup systems to prevent data loss.
Access to your data is restricted to:
While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your data using industry best practices.
We retain your data for as long as necessary to provide the service and comply with legal obligations:
When you request deletion of your account (see Section 8), we will delete:
Deletion is completed within 30 days of a verified deletion request.
We may retain certain data for longer periods if required by law (e.g., financial records for tax purposes, or data subject to legal hold).
We may retain anonymised or aggregated data (data that cannot identify you or your child) indefinitely for research and service improvement purposes.
Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data and your child's data:
You can request a copy of all personal data we hold about you and your child. This is commonly known as a "subject access request."
You can ask us to correct any personal data that is inaccurate or incomplete. You can also update most information directly through your Trellis account settings.
You can request that we delete your personal data and your child's data. We will comply unless we have a legal obligation to retain certain information.
You can ask us to temporarily restrict how we use your data in certain circumstances (e.g., while we verify the accuracy of data you've challenged).
You can request a copy of your data in a structured, commonly used, machine-readable format (e.g., JSON, CSV) so you can transfer it to another service.
You can object to processing of your data where we rely on legitimate interests as the legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
While Trellis uses AI to generate educational content and tutoring responses, we do not use automated decision-making that produces legal effects or similarly significant effects on you or your child (such as automated grading that determines school progression, university admission, or employment). The AI tutor is an educational tool to support learning, not to make consequential decisions about your child.
However, if you have concerns about how AI is used in your child's learning, you have the right to request human review and explanation.
Where we process data based on your consent (e.g., optional error tracking), you can withdraw your consent at any time. This will not affect the lawfulness of processing before you withdrew consent.
To exercise any of these rights, email us at: hello@trellislearn.com
We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this by up to two additional months, and we'll let you know.
We may need to verify your identity before fulfilling your request. We will not charge a fee unless your request is clearly unfounded, excessive, or repetitive.
If you believe we have not handled your data properly, you have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Trellis does not use traditional cookies for authentication or tracking.
We use browser localStorage to store your authentication token (JWT) after you sign in. This token:
Some third-party services we use (such as Google for authentication) may set their own cookies. These are governed by their respective privacy policies:
We use Google Analytics on our marketing website (trellislearn.com) to understand how visitors find and use the site. Google Analytics uses cookies to collect anonymised usage data (pages visited, time on site, referral source). This data does not identify you personally. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Google's privacy policy: policies.google.com/privacy
The localStorage token is essential for the service to function — without it, you cannot stay signed in. Google Analytics cookies on the marketing website are optional and do not affect the tutoring service.
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
By continuing to use Trellis after changes to this policy take effect, you accept the revised policy. If you do not agree with the changes, you should stop using the service and request deletion of your data.
Previous versions of this policy are available upon request. Email hello@trellislearn.com if you would like to review an earlier version.
Clario Technologies Ltd
Company number: 17097330
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
United Kingdom
For any questions about this privacy policy, or to exercise your data rights, contact us at:
Email: hello@trellislearn.com
To help us process your request quickly, please include:
We aim to respond to all privacy-related enquiries within one month. For complex requests, we may extend this by up to two additional months and will inform you of the extension.
Clario Technologies Ltd is registered with the UK Information Commissioner's Office (ICO). Our registration details are available on the ICO's public register at ico.org.uk/ESDWebPages/Search.
This privacy policy is effective as of the date listed at the top of this page. It applies to all users of Trellis, regardless of when they created their account.