User information and privacy
We never receive or see personal information from your Moodle site. It stays in Moodle, where we cannot access it, and is not sent to third parties. The only exception is the optional MCP integration. When it is enabled, Moodle can send information directly to a connected AI provider.
The plugin supports Moodle's privacy API for data requests and deletion. It can occasionally send us anonymised usage information, such as the site URL, software versions, and aggregate feature usage.
AI agents and MCP
XP+ includes an optional MCP integration for external AI agents. If a Moodle administrator enables this integration, users with the required permissions can connect a compatible AI client. When a user asks the AI agent to use an XP tool, Moodle sends the tool result directly to the AI client. The information does not pass through our systems.
The information sent depends on the selected MCP tools and the permissions of the connected Moodle user. It can include course content, XP configuration, learner identity information, points, leaderboard information and XP logs. The AI provider handles this information under the terms that apply to the user's account or workspace.
For configuration and data controls, see the AI and MCP administrator guide.