Privacy Policy & Student Data Protection
🛡️ Strict Separation of Security Perimeters & Student Privilege
The Prevention-AI platform is purpose-built for educational systems, counseling services, and youth welfare organizations with privacy-by-design principles. Student and minor personal health and counseling data never leave the local environment: individual session logs and case files are stored exclusively inside a local encrypted vault on the specialist's PC. Cloud layers receive only anonymized, aggregated statistical metrics.
1. Overview and Scope
1.1. This Privacy Policy governs the collection, processing, storage, and protection of information by the Prevention-AI platform across https://prevention.school/ and associated terminal applications.
1.2. Prevention-AI operates as a technical infrastructure provider, delivering isolated digital workplaces for educational psychologists, counselors, and school administrators.
1.3. Contact email for inquiries regarding data protection and privacy: admin@prevention-ai.ru.
2. Data Categories and Processing Boundaries
2.1. Student and Counseling Data (Strictly Local)
- Student names, dates of birth, class assignments, and family contacts;
- Consultation transcripts, psychological evaluation reports, and diagnostic test results;
- Individual Preventive Support (IPS) plans and case history records.
Storage guarantee: These records are encrypted locally with SQLCipher (AES-256) and reside solely on the specialist's hardware. Prevention-AI cloud servers do not store or process identifiable student records.
2.2. Professional and Institutional Users
- Specialist name, professional institutional email, and role;
- School name, district, and municipal jurisdiction;
- Technical session cookies and license activation tokens.
2.3. AI Processing and De-identification
When utilizing optional generative AI tools (such as case structuring or report drafting), all personally identifying information (PII) is automatically stripped on the local client before transmission. The AI models process purely depersonalized methodological context and do not retain prompts for model training.
3. Security Standards and Safeguards
- Zero-Knowledge Architecture: Neither Prevention-AI staff nor cloud providers have decryption keys for local student repositories.
- Encrypted Transport: All network exchanges utilize TLS 1.3 encryption.
- Role-Based Access: Administrative dashboards provide aggregate macro-statistics without exposing confidential student records to school management.
- Full Offline Autonomy: The desktop terminal remains fully operational without active internet connection.
4. User Rights and Data Control
Participating institutions and users retain complete ownership over their data. Specialists can export their records to standard Microsoft Word (.docx) or structured JSON formats at any time, or permanently delete local databases directly from disk.
5. Contact & Institutional Inquiries
For privacy audits, institutional compliance inquiries, or Data Processing Agreements (DPA), please reach out to our privacy compliance team at admin@prevention-ai.ru.