The code is written by Make Day AI, an AI model we use through our provider's business service. Children are told on screen, before they start and while they build, that Make Day AI is a computer program and not a person, that it can make mistakes, and that they should tell a grown-up if anything seems wrong.

There is no chat: children can't have a conversation with the AI. They send an idea (words, a photo of their drawing, or both) and get back a creation.

• Checked before building. Every idea and photo is screened by an automatic AI check before anything is built. It blocks photos of people, personal details (surnames, schools, addresses, contact details), unkind, adult or frightening requests, content aimed at real people, and attempts to misuse the tool. If the check can't run, nothing is built.
• Looking out for children. If what a child writes suggests they may be at risk (for example hurting themselves, not eating, or someone hurting them), the lab doesn't build it. It gently suggests they talk to a grown-up they trust or call Childline (0800 1111), and Teacher controls flags their tablet so an adult can check in. Their words aren't kept.
• Child-safety rules for the builder. The AI follows written rules for every creation: friendly, age-appropriate content only; no personal information; no fields that ask for it; no chat, accounts, contact forms, adverts, links to other websites or real-money purchases; original characters instead of copied ones.
• Locked-down creations. Every creation runs in a sandbox with no internet access, no storage, and no camera, microphone or location.
• The class Arcade. Every creation goes to the class Arcade, where classmates can play and remix it, once an automatic check has reviewed its words. Anything the check flags waits for an adult, and adults can hide any creation.
• Adults stay in control. The organiser can pause every tablet at once, watch a live activity feed, hide anything, limit each group to particular labs with class codes, and wipe all data.
• Limits. Each tablet has a daily allowance of builds and changes, and the whole event has a spending cap.

No automatic check is perfect, which is why the activity is designed for adult supervision.

• No accounts and no names. The only thing we ask a child is their age (a number from 5 to 16), so the AI can pitch the words, the difficulty and the coding lessons. It stays on the tablet, is sent to our AI provider with each request, is not stored by Make Day Lab, and is cleared when the next session starts. We never ask for names, emails or anything else. Each tablet gets a random ID and a made-up nickname such as "Speedy Otter".
• Playing with friends. A child can invite classmates to play their creation together on their own tablets, using a 4-letter code that only works with the class code, for up to 8 players. Only moves pass between tablets (positions, scores, votes, notes, button presses), never typed text or freehand drawing: there is no chat, and games close after 2 hours.
• Photos aren't kept. A photo of a drawing is sent to our AI provider so the AI can read it, and is not stored by Make Day Lab. Our provider deletes it within 30 days and doesn't train its models on it; see the privacy notice.
• What we store (on Cloudflare, which hosts the site): every creation a child makes (the code, any drawings they cut out of their photo, its title and the nickname), for the class Arcade and so the organisers can keep a copy of everything made on the day, and an activity log for the adults' dashboard and the spending cap (time, tablet ID, lab, what was asked for, and usage). What children typed is removed from the log after 7 days; when a request is blocked, only the reason is logged, not what was typed. The organiser can wipe everything at any time.
• Showing it off. A child can make a link, shown as a QR code, to play one of their creations at home. Before a link is made, the words inside the creation are checked automatically; anyone with the link can play that one creation, which has no names in it, and links stop working after 30 days. Every creation in the class Arcade also has its own link (with a QR code there) that plays its latest version, until the organiser hides it or wipes the Arcade. The organiser can remove any link, or all of them with Wipe everything. A child can also save a creation as a file on the device.
• No tracking. No cookies, adverts or analytics. The tablet's own browser remembers the class code, the random ID and the child's latest creation, which is also kept on the site like everything else they make.

Make Day Lab is built to follow our AI provider's usage policy and its guidelines for organisations whose products are used by people under 18: it tells children they are using AI, adds its own safety measures on top of the provider's, keeps adults in control, and collects as little data as possible.

Organisers are responsible for the event itself: getting parents' or guardians' agreement for children to use an AI tool and to photograph their drawings, making sure an adult supervises, following local child-safety and data-protection rules (in the UK, UK GDPR and the ICO Children's Code), and pressing Wipe everything on the adult dashboard after the event.

Questions or concerns? Please speak to the event organiser.