Last Updated: 10 February 2026
GIOS (www.gioschool.com) is an AI-powered educational technology platform that delivers gamified, adaptive mathematics learning experiences for K–12 students. It combines short-form interactive lessons, and personalized learning paths, empowering schools, teachers, and families to improve learning outcomes at scale.
We are committed to data privacy, transparency, and compliance with applicable laws, including:
This Privacy Policy applies to all personal and non-personal data collected through our platforms, products, apps, services, or interactions, including data processed by AI-driven features.
The GIOS platform may be accessed by different categories of users:
User access levels and responsibilities are defined within contractual agreements and platform permissions.
We process your data based on the following legal grounds:
Under the EU AI Act, we have assessed our AI components and classified them as:
Within GIOS, limited-risk AI systems are used to enhance adaptive learning pathways, generate interactive educational content, and support intelligent feedback inside the platform.
These AI components power features such as:
Minimal Risk Systems (e.g., recommendation algorithms for classroom content or gamified learning tools).
We do not deploy AI systems classified as unacceptable risk or high-risk (e.g., biometric surveillance, social scoring, automated grading, or recruitment AI).
GIOS does not engage in automated decision-making that produces legal or similarly significant effects on users within the meaning of Article 22 GDPR.
We may collect:
We do not collect:
GIOS (Global Innovative Online School) relies on consent in connection with Personal Information collections or uses (if required to use GIOS services and/or receive information and/or communication from GIOS via email subscription) that are necessary to enhance the user experience, to enable optional services or features, or to communicate with you.
GIOS believes that we are only entitled to access or use your Personal Information if we have your consent to do so. Whenever we rely on your consent, you will always be able to withdraw that consent.
If the user requests that his/her personal information kept with GIOS be erased/deleted, the same will be obliged through us. Upon verified deletion requests, personal data will be permanently removed from active systems and scheduled backups in accordance with our data retention and backup policies.
GIOS does not sell personal data and does not share personal data with advertisers or marketing networks. We may share personal data only with contracted service providers (such as cloud hosting, analytics, or technical infrastructure providers) strictly for the purpose of delivering our services and under binding data protection agreements.
GIOS platform collects and stores personal data from registered clients to enable work storage on the website for further user(s) reference.
Pupils: GIOS processes limited student data necessary to provide educational services. This may include pseudonymised learning progress, task completion data, and performance indicators. Students are not subject to biometric identification, social scoring, or behavioural advertising profiling. Data minimisation principles are applied at all times.
GIOS does not perform device-level tracking to identify how many individuals use a single device. Student identification is based solely on account-level credentials where applicable.
Teacher/school staff: Name, email, registration group/classes only via GIOS platform.
Parent/guardian: Name, email, registration group/classes only via GIOS platform.
Where it is necessary to access client data (for example, to investigate a support case), only approved GIOS support and technical staff can access it.
GIOS staff are vetted and are subject to contractual data access policies and confidentiality clauses.
User data is obtained from the user who registers to use the software from GIOS (i.e., registers as account administrator). Account administrators can correct user data generated within GIOS platform.
Support and assistance is available from our support team: hello@gioschool.com
Where Subject Access Requests and/or Right to be Forgotten are applicable to client data in a GIOS product, we provide means for authorised client users to carry out activities directly.
Support and assistance is available from our support team: hello@gioschool.com
GIOS stores platform and client data on secure, compliant cloud infrastructure located within the European Economic Area (EEA). This ensures that personal data is processed and retained in accordance with applicable European data protection regulations.
Where personal data is transferred outside the EEA, such transfers are protected through appropriate safeguards, including Standard Contractual Clauses (SCCs) or equivalent legal mechanisms in accordance with GDPR requirements.
We apply multiple technical and organisational safeguards to protect personal data, including:
These layered security measures are designed to maintain the confidentiality, integrity, and availability of personal data at all times.
Pursuant to Section III of the GDPR, the person concerned shall be entitled to exercise their right to:
You may contact us via email at hello@gioschool.com to assert your rights, including confirmation of the existence and origin of data, purposes of processing, rectification, deletion, anonymisation, or blocking of unlawful processing, and updates or integrations of data. You may also object at any time to the possible profiling of your personal data.
We strictly follow COPPA and FERPA:
Because some of our users may be interested in it, we have included some information below related to COPPA and FERPA.
Data collected by GIOS may include personally identifiable information from education records that are subject to FERPA (“FERPA Records”). When processing FERPA-covered educational records under institutional agreements, GIOS acts as a “School Official” under the direct control of the educational institution.
COPPA requires that online service providers obtain parental consent before they knowingly collect personally identifiable information online from children under 13. Therefore, GIOS only collects personal information through the Services from a student under 13 where their school, district, and/or teacher has agreed in order to obtain parental consent to use the Services and disclose personal information to us for the use and benefit of the learning environment. Such consent shall not be deemed as consent pursuant to Art. 6(1)(a) GDPR.
If we become aware that personal data has been collected from a child without appropriate consent, such data will be deleted without undue delay.
Schools acting as Data Controllers are responsible for obtaining and documenting parental consent where required by applicable law.
If you believe that a student under 13 may have provided us personal information in violation of this paragraph, please contact us at hello@gioschool.com.
We use data to:
We do not sell personal data or use it for profiling beyond platform improvements.
GIOS does not:
Student data is used strictly to provide and improve educational services.
We only share data with:
We do not share data with advertisers or third-party marketing platforms without explicit consent.
A list of subprocessors may be provided to institutional partners upon request.
All subprocessors are subject to data processing agreements (DPAs) and confidentiality obligations in accordance with GDPR requirements.
In accordance with the AI Act:
GIOS does not use identifiable student data to train, retrain, or fine-tune external foundation models. Any internal model optimisation relies on anonymised or synthetic datasets.
Where AI service providers are engaged, only pseudonymised or minimal necessary data is processed under strict contractual safeguards. Where student responses or learning data are processed by third-party AI providers, such processing is based on contractual necessity (Art. 6(1)(b) GDPR) or legitimate interest (Art. 6(1)(f) GDPR), depending on the service context.
We ensure that training datasets used for internal model optimisation do not contain directly identifiable personal data.
Data protection methods:
Third-party AI providers are contractually prohibited from using submitted data to train or improve their foundation models.
Internal AI optimisation relies exclusively on:
No publicly scraped personal data or student-generated identifiable content is used for model training.
You have the right to:
Accounts inactive for more than 24 months may be anonymised or deleted, unless contractual or legal obligations require continued retention.
We conduct periodic security reviews and vendor risk assessments to ensure compliance with contractual and regulatory requirements. Where appropriate, external security testing or vulnerability assessments may be performed.
GIOS maintains internal procedures for detecting, investigating, and responding to potential security incidents.
In the event of a personal data breach, we will assess the level of risk and notify affected institutions and relevant supervisory authorities in accordance with applicable data protection laws, including GDPR requirements where applicable (such as the 72-hour notification rule).
We maintain logging, monitoring, access controls, and internal escalation procedures to ensure timely detection, containment, and remediation of incidents.
If you are outside the EU, we process your data in compliance with applicable local laws. The AI Act’s provisions may apply if you are interacting from the EU, regardless of our country of origin (extraterritorial scope).
We update this policy to comply with new legal requirements, such as the AI Act, and reflect changes in our services. Users will be notified of major changes via email or platform notification.
If your school would like further information on GDPR compliance in GIOS products then please contact our support team at hello@gioschool.com.
Continue with Google