Privacy Notice
Last updated: 5 October 2026
This notice explains how we collect, use and protect personal data when you use Madlen Teacher, our teacher platform and mobile app (the “Platform”) and the madlen.io website (the “Website”), together the “Services”. It is written to meet the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
Madlen in the UK is a service for teachers and school staff. Pupils do not have accounts and the Services are not intended for anyone under 18.
Choose a tab below to see only the sections that apply to you. Sections shared by everyone appear on every tab.
Who we are
- Company: [Madlen Teknoloji A.Ş.] (“Madlen”, “we”, “us”)
- Registered address: [registered address]
- Company number: [company number]
- ICO registration number: [ICO registration number]
- Contact for privacy questions: privacy@madlen.io
Our role: controller or processor
Applies to: Madlen Teacher
If you use Madlen on your own account (for example the Free or Pro plan), we are the controller of your personal data and this notice explains how we use it.
If you use Madlen through your school or trust (a school plan), your school or trust is the controller. We act as its processor: we process the data only on its documented instructions and only to provide the Services. Your school's own privacy notice applies, and this notice tells you what happens on our side.
Pupil data
Applies to: Madlen Teacher
The UK Services are designed for teachers. Please do not enter pupils' names, contact details, identification numbers or special category data (such as health or SEND information) into the Platform or its AI tools.
If you do need to work with information about a pupil, follow your school's data protection policy and share only what is necessary. Any pupil information you enter on a school plan is processed on your school's behalf.
Personal data we collect: Platform
Applies to: Madlen Teacher
| Category | Examples |
|---|---|
| Identity | First name, last name |
| Contact | Email address; phone number if you give it to us |
| Professional | School or trust, subject, year groups and key stages you teach |
| Account and sign-in | User ID, sign-in method (email, Google, Microsoft), session information, sign-in attempts, and account information from Google or Microsoft if you sign in that way |
| Content | Materials, assessments and files you create or upload; prompts you write in AI tools and the outputs they produce |
| Classes and marking | Your classes, the tasks you set and your feedback on work |
| Integrations | Files and information you choose to bring in from services you connect, such as Google Drive or Microsoft Teams |
| Billing | If you buy a paid plan: billing details and a record of the payment. Card details are handled by our payment provider. |
| Support and communications | Support requests, feedback, event and training sign-ups |
| Device and usage | Device type, browser, IP address and how you use the Platform |
| Detailed usage | Clicks, time spent, error and console logs, and recordings of some sessions, linked to your account, used for troubleshooting and improving the product |
| Stored on your device | A device identifier, your last sign-in method, recently used tools and interface preferences such as theme and language. These are cleared when you log out. |
We do not normally collect special category data, such as information about health, ethnic origin or religious beliefs. Please do not enter it into the Platform.
Personal data we collect: Website
Applies to: Website (madlen.io)
| Where | Data |
|---|---|
| Contact form | Name, email, phone number and your message |
| Demo requests and school enquiries | Name, email, role, school or trust, and anything else you tell us in the form |
| Downloads, certificates and surveys | Name, email and the answers you give |
| Newsletter | Email address and a record of your consent |
| Booking a call | Details you give in the booking screen shown after a school enquiry |
| Cookies and similar technologies | Your cookie choice; if you accept analytics cookies, page views, interactions, IP address and device information |
Details of the cookies we use are in our Cookie Policy.
How we use personal data and our lawful bases
Madlen TeacherWhere we are the controller, we rely on the following lawful bases under Article 6 UK GDPR. On a school plan, your school decides the lawful basis for its own processing.
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, providing the Platform and its AI features | Contract |
| Billing and managing paid plans | Contract; legal obligation for tax and accounting records |
| Answering support requests | Contract, or legitimate interests where you are not our customer |
| Keeping the Services secure, preventing misuse, fixing errors | Legitimate interests |
| Measuring and improving how the Platform is used, including product analytics and session recordings | Legitimate interests |
| Sending service updates about your account and the Platform | Legitimate interests |
| Purpose | Lawful basis |
|---|---|
| Responding to contact, demo and school enquiries | Legitimate interests, or steps before entering into a contract |
| Website analytics | Consent, given through the cookie banner |
| Purpose | Lawful basis |
|---|---|
| Sending newsletters and product news | Consent; for work email addresses we may rely on legitimate interests. You can unsubscribe at any time. |
| Complying with the law and responding to lawful requests | Legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests |
We do not sell personal data, we do not show advertising in the Services, and we never share your data for anyone else's advertising or marketing.
How AI features use your data
Applies to: Madlen Teacher
- When you use an AI feature, the prompt you write and any file you upload are sent to AI service providers so that they can generate a response.
- Some of these providers are located, or process data, outside the UK.
- We do not use your prompts, uploads or outputs to train AI models.
- AI outputs can be inaccurate, incomplete or unsuitable. Review them before you use them with pupils.
- We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
- We do not use your data to make decisions about pupils' placement, discipline or eligibility.
International transfers
Our main database and file storage are hosted in the European Union, which the UK recognises as providing adequate protection.
Some of our service providers, and our group company in Turkey, process personal data outside the UK and the European Union. Where they do, we protect the transfer with appropriate safeguards, such as the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or rely on UK adequacy regulations such as the UK Extension to the EU–US Data Privacy Framework. You can ask for more information about these safeguards at privacy@madlen.io.
How long we keep personal data
- Account data is kept while your account is open.
- When you ask us to delete your data, we do so within 30 days of receiving the request. On a school plan, we pass the request to your school and act on its instructions.
- If an individual account is inactive for 12 months, we email you that it will be deleted in 6 months and remind you during that time. Unless you log back in, the account and its data are deleted at 18 months of inactivity.
- Content you generate is kept according to your plan: 90 days on Free, and your full history on Pro and Studio, as set out in our Terms of Service.
- Data stored on your device, and your analytics identity, are cleared when you log out.
- When a school agreement ends, the school's data is deleted or returned as the agreement sets out.
- Enquiries and meeting requests are kept for as long as needed to deal with them and any follow-up.
- Newsletter data is kept until you unsubscribe.
- Records we must keep by law, such as invoices and accounting records, are kept for the period the law requires.
- Deleted data is removed from backups within the normal backup cycle.
How we protect personal data
- Your data is encrypted in transit with TLS and at rest with AES-256.
- Our systems undergo independent penetration testing, and the findings are remediated.
- Access to personal data is limited to authorised staff who need it for their role.
- If a personal data breach is likely to result in a high risk to you, we will tell you without undue delay. We report breaches to the ICO where the law requires.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict how we use your data
- receive your data in a portable format
- object to processing based on legitimate interests, and to object at any time to direct marketing
- withdraw consent at any time, where we rely on consent
- not be subject to decisions based solely on automated processing that have legal or similarly significant effects
To use any of these rights, email privacy@madlen.io. We will respond within one month and we do not charge for this. We may ask you to confirm your identity first.
Madlen TeacherIf you use Madlen through a school plan, you can also contact your school, which is the controller.
Complaints
If you are unhappy with how we have handled your personal data, please contact us first at privacy@madlen.io. We will acknowledge your complaint within 30 days and respond without undue delay.
You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Children
The UK Services are intended for adults working in education. We do not knowingly create accounts for, or collect personal data directly from, anyone under 18. If you think we have, contact privacy@madlen.io and we will delete it.
Third-party services and links
Madlen TeacherWhen you sign in with Google or Microsoft, or connect a service such as Google Drive or Microsoft Teams, only the information you choose to share reaches Madlen, and the other service's own terms and privacy notice apply.
Website (madlen.io)The Website contains links to other sites and embedded content such as YouTube videos. We are not responsible for their privacy practices.
Changes to this notice
We may update this notice. The current version is always on this page, with the date it was last updated at the top.
