Privacy Policy

Last updated: February 2026

Introduction

AI Academy ("we," "us," or "our") is committed to protecting the privacy of our users, particularly children. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our educational platform. We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

1. Information We Collect

We collect the following types of information:

  • Student Information: First name, year level, PIN (for authentication), learning progress, exercise completion history, answer history, and performance data.
  • Parent/Guardian Information: Name, email address (optional), password (encrypted), and parent code for linking accounts.
  • Usage Data: Time spent on exercises, hint requests, skill proficiency levels, diagnostic test results, and engagement metrics.

2. How We Use Information

We use collected information to:

  • Personalise Learning: Adapt content difficulty, recommend exercises, and track individual progress to optimise each student's learning path.
  • Generate Reports: Provide parents and educators with insights into student performance, strengths, and areas for improvement.
  • Improve Our Service: Analyse usage patterns to enhance platform features, content quality, and user experience.
  • Provide Support: Respond to inquiries, troubleshoot technical issues, and deliver customer assistance.

3. Children's Privacy

AI Academy is designed for students aged 8-12 years (Years 3-6). We take children's privacy seriously:

  • Parental Consent: We encourage parents to create accounts and link their children's profiles using a parent code. While students can register independently for basic access, parents retain control over their children's data.
  • Minimal Data Collection: We only collect information necessary for educational purposes. We do not collect personal identifiers beyond first names.
  • No Third-Party Marketing: We never sell, rent, or share children's personal information with third parties for marketing purposes.
  • Age-Appropriate Content: All platform content is curated for the target age group.

4. Data Storage and Security

Your data is stored securely on Australia-based servers. We implement industry-standard security measures:

  • Encryption: All sensitive data, including passwords and personal information, is encrypted at rest and in transit using modern encryption protocols.
  • Access Controls: Only authorised personnel have access to user data, and access is logged and monitored.
  • Regular Backups: We maintain regular backups to prevent data loss.
  • SQLite Database: Student data is stored in a secure SQLite database with restricted access permissions.

5. Third-Party Services

We use the following third-party service:

  • Anthropic API (Claude): Used to generate personalised learning hints. When students request hints, we send only the exercise question and context—no student personally identifiable information (PII) such as names, emails, or account details is transmitted to Anthropic. All hint requests are anonymised.

We do not use cookies, tracking pixels, or analytics services that collect personal information.

6. Data Retention

We retain user data as follows:

  • Active Accounts: Data is retained while accounts remain active to support ongoing learning and progress tracking.
  • Deletion Requests: Upon request, we will permanently delete user data within 30 days, except where retention is required by law.
  • Inactive Accounts: Accounts inactive for more than 2 years may be archived or deleted, with prior notice sent to registered email addresses where available.

7. Your Rights (Australian Privacy Act 1988)

Under the Australian Privacy Act 1988 and Australian Privacy Principles, you have the right to:

  • Access: Request a copy of the personal information we hold about you or your child.
  • Correction: Request corrections to inaccurate or outdated information.
  • Deletion: Request deletion of your or your child's account and associated data.
  • Withdraw Consent: Parents may withdraw consent for their child's data processing at any time.
  • Complain: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your personal information.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify users via email (where available) or through a prominent notice on our platform. Continued use of AI Academy after such changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]

AI Academy is operated by Tiny Ore Pty Ltd, based in South Australia, Australia. We are committed to protecting your privacy and complying with all applicable Australian privacy laws.