Your learning privacy

Classroom pilot notice · 14 November 2026

Parent or guardian setup

A parent or authorised guardian must set up and supervise a child's account. We use a chosen username, a password stored as a salted one-way hash, the child's nickname and grade, subject and learning preferences, and a dated record of the consent boxes. Do not use surnames, school names, addresses or contact details in nicknames or schoolwork. Guardian status is self-declared; this is not identity verification.

What is saved

Signed-in learning records include lesson activity, self-check results, written practice attempts, saved whiteboards and last page activity. They are held in Cloudflare storage. The linked guardian can view their own child's activity counts. Written practice is self-marked, not an exam grade. Thabiso's private founder page can show learner nickname, grade and last page signal only. It does not show private conversations, answers, drawings or passwords. A page signal is not attendance or proof that a child is watching.

AI, camera and voice

Live AI is unavailable unless its free-only route and privacy checks are enabled. When available, a maths question is processed by Cloudflare AI. YFC does not save full AI conversations or raw camera photos on its servers. The question and generated reply are visible during the current page session. AI can be wrong. Children are not silently sent to another AI company. The allowance is two AI requests per learner per South African calendar day, subject to shared capacity. An attempted provider call can use an allowance even if no reply arrives.

Camera capture starts only when requested. Crop out personal details. Photo analysis needs separate, current guardian camera consent and enabled service checks. Live microphone input is unavailable. Optional device read-aloud depends on the device's speech service; if you are unsure how that service handles text, leave read-aloud off.

This phone and offline work

This browser keeps preferences, progress, written attempts and drawings to support refresh and offline work. Cached lessons and explicitly downloaded videos may remain on the device. Do not share a signed-in browser with another learner. Sign out when finished. Unsynced work stays on this device until it reconnects to the same account. Clearing browser storage removes device-only and unsynced work, but does not delete a server account.

Control and deletion

The signed-in guardian can turn camera consent off and delete the linked family account using the parent password. Deletion removes the current parent and child records; it is not a promise about Cloudflare's underlying backup retention. Ask Thabiso through your existing contact if you need help correcting or deleting an account. YFC sends no automatic progress email from this build. No advertising or analytics trackers are included.

This new classroom has a separate account store. Accounts on the earlier workers.dev classroom are not moved or erased by opening this site.