Data Processing Agreement

Last updated: 12/2/2025

This Data Processing Agreement (“DPA”) applies when a school, co-op or group (“Controller”) uses EduSim (“Processor”) for educational purposes. It forms part of our Terms & Conditions.

1. Purpose

EduSim processes personal data solely to provide the platform, including account management, authentication and progress tracking.

2. Processor Obligations

Follow documented instructions from the Controller.
Use appropriate technical and organisational security measures.
Notify Controller of data breaches without undue delay.
Assist with subject access requests.

3. Subprocessors

EduSim uses the following subprocessor:

Firebase (Google) — authentication & data storage

All subprocessors comply with UK GDPR safeguards.

4. Data Retention

Data is retained while accounts remain active. On deletion, data is removed within 30 days unless legally required otherwise.