{"course":{"slug":"ai-for-students","title":"AI for Students","url":"https://addaly.com/learn/ai-for-students","level":"beginner","track":"work"},"lesson":{"slug":"what-happens-to-what-you-type","title":"What happens to what you type","url":"https://addaly.com/learn/ai-for-students/what-happens-to-what-you-type","position":64,"of":73,"minutes":8,"answer":"Storage, training and human review are three separate questions with different answers: the training toggle is usually yours to set, an institutional account is a work account with logs.","keyIdea":"Storage, training and human review are three separate questions with different answers: the training toggle is usually yours to set, an institutional account is a work account with logs, and the only content safe from every future is content you did not type."},"body":{"format":"markdown","text":"## Three different questions\n\nStudents collapse three separate things into one worry. Separating them makes each answerable.\n\n**Is it stored?** Almost always yes, for some period. Providers retain conversations for abuse monitoring and service operation even when you delete them from your view. Retention periods are stated in the privacy policy and typically run to some number of days after deletion.\n\n**Is it used for training?** This is the one you can usually control. Consumer free tiers commonly train on input by default with an opt-out; paid business, enterprise and education tiers commonly do not, by contract. The setting is in data controls and is worth finding once.\n\n**Can a human read it?** Sometimes, in limited circumstances: samples reviewed for safety, investigations of abuse, legal process. Not routinely, and not casually.\n\n## Your institution's account\n\nIf your university provides a tool, the contract usually prohibits training on your input and places the data under an agreement the institution has assessed. That is a real advantage and it is often a paid tier at no cost to you.\n\nThe trade-off: logs exist and are accessible to the institution under its own procedures. Administrators are not reading your conversations for entertainment, and in an investigation the records may be available. Treat an institutional account as a work account, because that is what it is.\n\n## What a school or university can see anyway\n\nBroader than most students assume, and worth knowing accurately rather than fearing vaguely:\n\n- **On their network**, traffic to and from your device is visible in outline, and on a managed device more than that.\n- **On a managed laptop or Chromebook** issued by the institution, potentially a great deal, including installed monitoring.\n- **In their systems** (the virtual learning environment, submission platform, email) everything, and it is retained.\n- **Submission platforms** store your work and compare it against their databases, which is what they exist for.\n\nOn your own device on your own connection, they see essentially nothing.\n\n## Age, and school students\n\nIf you are under 18, additional protections apply and additional restrictions come with them. Most providers set minimum ages, often 13 with parental consent up to 18, and school-provided tools usually run under stricter configurations with filtering and logging. Data protection law in many countries (GDPR in Europe and the UK, COPPA in the United States, and equivalents elsewhere) treats children's data more restrictively.\n\nThe practical version for a school student: use the tool your school provides if there is one, assume anything typed into a school account is visible to the school, and do not put personal details about yourself or your friends into any of it.\n\n## Your own data, and the settings pass\n\nOnce per tool, ten minutes:\n\n1. **Data controls.** Find the training toggle. Decide.\n2. **History and retention.** Learn what deleting does and how long anything persists.\n3. **Memory.** Read what it has stored about you. People are regularly surprised, and it is editable.\n4. **Connected apps and integrations.** Anything with access to your email, files or calendar: check what you granted and remove what you do not use.\n5. **Export.** Most providers let you download everything they hold. Doing it once is instructive.\n\n## Rights you have\n\nIn many jurisdictions, data protection law gives you rights over your personal data: access to what is held, correction, deletion in some circumstances, and portability. The GDPR versions apply across the EU and UK; several other countries have similar regimes, India's data protection legislation among them, and the details differ.\n\nThe practical point is that these are real and usable (a subject access request is a formal thing you can make of a provider or your institution) and that the specifics vary by country enough that this course is not going to summarise them into advice. Look up your own jurisdiction's regime if you need to use it, and none of this is legal advice.\n\n## The habit that makes all of this simpler\n\nThe rule from Module 2, restated because it is the whole of the practical answer:\n\n> Would I mind if this appeared in a public archive with my name on it?\n\nSettings are promises about handling. Companies change, are acquired, are breached, and are subject to legal process. The only content safe from all of that is content you did not type. So paste generously from published and your own material, keep other people's information out entirely, and do the settings pass once so that the remaining risk is one you chose rather than one you never looked at."},"check":{"question":"A student turns off the training setting on their account. What does this change, and what does it not?","options":[{"text":"It stops storage entirely, so conversations are no longer retained after deletion.","correct":false,"tempting":"Conflates training with retention; conversations are typically kept for a period for abuse monitoring regardless of the toggle."},{"text":"It stops human review, since review exists to support training data quality.","correct":false,"tempting":"Misattributes the purpose of review, which is largely safety and abuse monitoring rather than training curation."},{"text":"It stops their input improving the model, but the content is still stored and can still be reviewed in limited circumstances.","correct":true},{"text":"It applies retroactively as well as prospectively, so material already used in training is removed from the model at the next update.","correct":false,"tempting":"Assumes a capability that does not exist; weights already trained cannot be selectively unlearned on request, which is why the timing of the setting matters."}]},"prev":{"slug":"accessibility-and-fairness","title":"Accessibility, fairness and who these rules fall on","url":"https://addaly.com/learn/ai-for-students/accessibility-and-fairness"},"next":{"slug":"exam-hall","title":"Revision That Survives The Exam Hall","url":"https://addaly.com/learn/ai-for-students/exam-hall"},"authorship":"Founder and series editor: Dr Mustafa Mun. Written by AI models to a written standard. Exam keys checked blind by a second model: 3,665 of 3,666 agreed. Academic review invited.","review":{"status":"Draft, open for academic review"},"cite":"Addaly (2026) 'What happens to what you type', in AI for Students. Edited by M. Mun. Addaly. Available at: https://addaly.com/learn/ai-for-students/what-happens-to-what-you-type (Accessed: 13 October 2026).","licence":{"name":"CC BY-NC-SA 4.0","url":"https://creativecommons.org/licenses/by-nc-sa/4.0/"},"reader":{"schema":1,"title":"What happens to what you type","courseTitle":"AI for Students","module":{"index":7,"slug":"rules-honesty-record","title":"Rules, honesty and the record"},"answer":null,"keyIdea":"Storage, training and human review are three separate questions with different answers: the training toggle is usually yours to set, an institutional account is a work account with logs, and the only content safe from every future is content you did not type.","hero":{"kind":"plate","image":null,"alt":null,"caption":null},"blocks":[{"t":"h2","id":"three-different-questions","runs":[{"text":"Three different questions"}]},{"t":"p","runs":[{"text":"Students collapse three separate things into one worry. Separating them makes each answerable."}]},{"t":"p","runs":[{"text":"Is it stored?","b":true},{"text":" Almost always yes, for some period. Providers retain conversations for abuse monitoring and service operation even when you delete them from your view. Retention periods are stated in the privacy policy and typically run to some number of days after deletion."}]},{"t":"p","runs":[{"text":"Is it used for training?","b":true},{"text":" This is the one you can usually control. Consumer free tiers commonly train on input by default with an opt-out; paid business, enterprise and education tiers commonly do not, by contract. The setting is in data controls and is worth finding once."}]},{"t":"p","runs":[{"text":"Can a human read it?","b":true},{"text":" Sometimes, in limited circumstances: samples reviewed for safety, investigations of abuse, legal process. Not routinely, and not casually."}]},{"t":"h2","id":"your-institution-s-account","runs":[{"text":"Your institution’s account"}]},{"t":"p","runs":[{"text":"If your university provides a tool, the contract usually prohibits training on your input and places the data under an agreement the institution has assessed. That is a real advantage and it is often a paid tier at no cost to you."}]},{"t":"p","runs":[{"text":"The trade-off: logs exist and are accessible to the institution under its own procedures. Administrators are not reading your conversations for entertainment, and in an investigation the records may be available. Treat an institutional account as a work account, because that is what it is."}]},{"t":"h2","id":"what-a-school-or-university-can-see-anyway","runs":[{"text":"What a school or university can see anyway"}]},{"t":"p","runs":[{"text":"Broader than most students assume, and worth knowing accurately rather than fearing vaguely:"}]},{"t":"ul","items":[[{"text":"On their network","b":true},{"text":", traffic to and from your device is visible in outline, and on a managed device more than that."}],[{"text":"On a managed laptop or Chromebook","b":true},{"text":" issued by the institution, potentially a great deal, including installed monitoring."}],[{"text":"In their systems","b":true},{"text":" (the virtual learning environment, submission platform, email) everything, and it is retained."}],[{"text":"Submission platforms","b":true},{"text":" store your work and compare it against their databases, which is what they exist for."}]]},{"t":"p","runs":[{"text":"On your own device on your own connection, they see essentially nothing."}]},{"t":"h2","id":"age-and-school-students","runs":[{"text":"Age, and school students"}]},{"t":"p","runs":[{"text":"If you are under 18, additional protections apply and additional restrictions come with them. Most providers set minimum ages, often 13 with parental consent up to 18, and school-provided tools usually run under stricter configurations with filtering and logging. Data protection law in many countries (GDPR in Europe and the UK, COPPA in the United States, and equivalents elsewhere) treats children’s data more restrictively."}]},{"t":"p","runs":[{"text":"The practical version for a school student: use the tool your school provides if there is one, assume anything typed into a school account is visible to the school, and do not put personal details about yourself or your friends into any of it."}]},{"t":"h2","id":"your-own-data-and-the-settings-pass","runs":[{"text":"Your own data, and the settings pass"}]},{"t":"p","runs":[{"text":"Once per tool, ten minutes:"}]},{"t":"ol","start":1,"items":[[{"text":"Data controls.","b":true},{"text":" Find the training toggle. Decide."}],[{"text":"History and retention.","b":true},{"text":" Learn what deleting does and how long anything persists."}],[{"text":"Memory.","b":true},{"text":" Read what it has stored about you. People are regularly surprised, and it is editable."}],[{"text":"Connected apps and integrations.","b":true},{"text":" Anything with access to your email, files or calendar: check what you granted and remove what you do not use."}],[{"text":"Export.","b":true},{"text":" Most providers let you download everything they hold. Doing it once is instructive."}]]},{"t":"h2","id":"rights-you-have","runs":[{"text":"Rights you have"}]},{"t":"p","runs":[{"text":"In many jurisdictions, data protection law gives you rights over your personal data: access to what is held, correction, deletion in some circumstances, and portability. The GDPR versions apply across the EU and UK; several other countries have similar regimes, India’s data protection legislation among them, and the details differ."}]},{"t":"p","runs":[{"text":"The practical point is that these are real and usable (a subject access request is a formal thing you can make of a provider or your institution) and that the specifics vary by country enough that this course is not going to summarise them into advice. Look up your own jurisdiction’s regime if you need to use it, and none of this is legal advice."}]},{"t":"h2","id":"the-habit-that-makes-all-of-this-simpler","runs":[{"text":"The habit that makes all of this simpler"}]},{"t":"p","runs":[{"text":"The rule from Module 2, restated because it is the whole of the practical answer:"}]},{"t":"quote","runs":[{"text":"Would I mind if this appeared in a public archive with my name on it?"}]},{"t":"p","runs":[{"text":"Settings are promises about handling. Companies change, are acquired, are breached, and are subject to legal process. The only content safe from all of that is content you did not type. So paste generously from published and your own material, keep other people’s information out entirely, and do the settings pass once so that the remaining risk is one you chose rather than one you never looked at."}]}],"check":{"question":[{"text":"A student turns off the training setting on their account. What does this change, and what does it not?"}],"options":[{"text":[{"text":"It stops storage entirely, so conversations are no longer retained after deletion."}],"correct":false,"tempting":[{"text":"Conflates training with retention; conversations are typically kept for a period for abuse monitoring regardless of the toggle."}]},{"text":[{"text":"It stops human review, since review exists to support training data quality."}],"correct":false,"tempting":[{"text":"Misattributes the purpose of review, which is largely safety and abuse monitoring rather than training curation."}]},{"text":[{"text":"It stops their input improving the model, but the content is still stored and can still be reviewed in limited circumstances."}],"correct":true,"tempting":null},{"text":[{"text":"It applies retroactively as well as prospectively, so material already used in training is removed from the model at the next update."}],"correct":false,"tempting":[{"text":"Assumes a capability that does not exist; weights already trained cannot be selectively unlearned on request, which is why the timing of the setting matters."}]}],"order":[3,1,2,0],"why":null},"prev":{"slug":"accessibility-and-fairness","title":"Accessibility, fairness and who these rules fall on","minutes":8},"next":{"slug":"exam-hall","title":"Revision That Survives The Exam Hall","minutes":8}}}