InquiryCycle
Safe By Design

Zero-PII Radical Data Minimization.

Designed for primary and elementary schools (ages 5–12), InquiryCycle treats child safety not as an optional filter layer, but as an immutable infrastructure constraint.

The Three-Tier Defense Perimeter

1Generation & Planning (Teacher View)

  • Strict Gemini Safety Settings: Locked at BLOCK_LOW_AND_ABOVE across all 4 harm categories.
  • System Instruction Guardrails: Prohibiting mature, violent, or culturally biased provocations.
  • Vision Pre-screening: Gemini 2.5 Flash Vision evaluates teacher-uploaded diagrams before presentation.

2Real-Time Classroom Input (Student View)

  • Local Client-Side Trie: 0ms block on slurs and profanity before hitting the network (always active).
  • Target Language Lock: Optional Hard Lock (0ms client-side block on wrong language) or Soft Lock (automatically flagged for teacher review in Cockpit).
  • Automatic PII Scrub: AI sweeps for self-identifying markers (e.g., "By Leo", emails) and replaces them with deterministic pseudonyms.
  • Optimistic Cockpit Desk: Submissions require teacher batch-approval. Veto is default.
  • Teacher Emergency Freeze: Immediate Stage blackout via the Esc hotkey.

3Data Retention & Legal Compliance

  • Zero Data Retention (ZDR): Google Gen AI SDK ensures student payloads are never used to train commercial models.
  • Automated 24-Hour TTL Hard Purge: pg_cron drops all ephemeral rooms and drawing payloads hourly.
  • Zero Cookies: Strictly compliant with COPPA and FERPA. Zero commercial tracking.

GDPR Article 8 & UK GDPR

Under Recital 38 and Article 8, children require specific protection. InquiryCycle does not process child personal data; the platform operates on deterministic ephemeral pseudonyms.

Schools deploy InquiryCycle under the lawful basis of Public Task / Legitimate Educational Interest.

FERPA & COPPA

InquiryCycle acts as a "School Official" with legitimate educational interests under FERPA regulations (34 CFR § 99.31(a)(1)).

We comply fully with COPPA: zero personal contact data is collected, and participation is never conditioned on disclosing personal information.