How it is built
The software decides.
Pip only talks.
Rules decide what comes next, not the AI
In Unit 1, the first unit built this way, a fixed set of rules we wrote and test decides what a student sees next: a six-question placement check, a shorter path through lessons a student already knows, and a fresh version of a problem after a miss. The AI never makes that choice. Pip only talks.
Pip speaks up after a miss
When a student gets a problem wrong, Pip opens with a question matched to the mistake, taken word for word from our teacher notes. It is handed the problem and the student’s answer. It is never handed the right answer.
Every reply is checked before a student sees it
A reply that gives away the answer, or uses a number that is not on the page, is held back, and the student sees a fixed message instead.
Four exchanges, then back to the problem
After four messages the app ends the conversation and sends the student back to work the problem. Pip does not keep a student talking.
What we commit to
What it will
and will not do.
It says it is an AI
The tutor is called Pip, after the mascot on our books, and every screen where it speaks says Pip is an AI, not a person.
It stays on the lessons
Pip is a name, not a character. It does not play one, keep up a friendship, remember anything beyond a student’s lessons and work, or chat about anything else. On a personal or safety topic it stops and points the student to a trusted adult at school.
Adults can read every conversation
The school’s sponsor and our staff can review what Pip said to any student, at any time.
The least data that works
Students sign in with the account their school district gave them; we never hold a password. We do not collect phone numbers, home addresses or personal email addresses.
Nothing sold, nothing trained
No ads. Student work is never sold, and never used to train an AI model.
Nobody starts without signatures
No student logs in until the district has signed a data privacy agreement and a parent or guardian has signed a consent form.
We put these in writing for every host district. The data privacy agreement each district signs, not this page, binds us. We name the AI provider in every district data agreement, and to any parent who asks.
Not yet known
Tested by adults.
Not yet by
a student.
So far all of this has been tested only by our own scripts and by adults in the preview. No student has used Pip. The first pilot is where we find out what breaks, and the plan for measuring it, including how often replies were held back, goes public before the first lesson.
No student logs in until two things are signed: a student data privacy agreement between us and the school district, and a consent form from the student’s parent or guardian. We ask every family for consent, not only families of children under 13.
What we keep about a student, and for how long · How the first pilot will be measured