Privacy Policy

Requires Australian legal review before publication. This candidate text is provided for release review.

1. Who handles your information

Pi Leo Academy (ABN 63 507 739 363) is responsible for handling information collected through this online learning service. Contact pileoacademy6683@gmail.com about privacy, access, correction, account deletion or a complaint.

2. Information we collect

• Parent accounts: your name, email address, password hash and account settings. You do not need to provide a mobile number or card to create a free account.
• Learning profiles: a student's name or nickname, year level and learning activity, including answers, writing drafts, quiz attempts, scores, progress, notes and achievements. A first name or nickname is sufficient for family practice. Optional profile fields may include school and learning goals; avoid sensitive information and unnecessary identifying details.
• School workspaces: authorised schools and educators may manage student rosters, classes, staff memberships, guardian links, assignments and reports. Information available to a school user depends on their authorised role.
• Trial verification: if you request an eligible trial, we collect and verify a mobile number using a one-time code delivered through Twilio. Keyed identifiers derived from mobile numbers and IP addresses help limit abuse and enforce one lifetime trial per verified mobile.
• Billing: Stripe collects payment details in its hosted checkout. The application stores provider identifiers, subscription status, billing dates and limited card metadata, such as brand, last four digits and expiry, rather than full card numbers or CVCs.
• Contact and check-up forms: the details you submit, requested results, consent preferences and technical records such as IP address and browser information.

3. Why we use information

We use information to operate accounts, provide learning activities and progress reports, answer enquiries, verify trial eligibility, process subscriptions, deliver requested messages and protect the service. Marketing tips and product updates are separate from requested check-up results and essential billing or security messages.

Optional marketing requires your consent. We keep a record of newsletter consent and withdrawals. Marketing emails include an unsubscribe link; you can also contact pileoacademy6683@gmail.com. An unsubscribe stops optional marketing, while requested results and essential account messages remain separate. We do not sell student information for advertising.

4. Children and access to learning information

Family profiles are managed through adult parent or guardian accounts. Authorised school users can manage information in their school workspace, and platform staff may need access for support or operations. Keep account credentials private and avoid including a child's surname, contact details or sensitive circumstances where they are unnecessary.

The family achievements page shows learners linked to that parent account. The separate school league uses an explicit enrolment and consent-certification process with public pseudonyms. A nickname should not contain identifying details.

5. Providers, AI feedback and overseas handling

Service providers support hosting, email delivery, payments and SMS. Stripe handles payments and Twilio handles verification and billing messages. These providers may process information outside Australia. The applicable providers, locations and retention arrangements must be confirmed as part of the operational privacy review.

Where external AI writing feedback is enabled and you choose to use it, a writing response and task instructions may be sent to Anthropic to produce practice guidance. Writing can contain personal information: do not include names, addresses, contact details or private information in a response sent for AI feedback. AI feedback is not an official assessment or a substitute for a teacher's judgement.

6. Cookies and analytics

The service uses session cookies to maintain logins and protect forms. If you choose Remember me, a separate cookie can keep you logged in on that device. Learning activities may also use browser storage for local progress or preferences.

Interaction events may be recorded to understand use of the service. Any optional external analytics or advertising integration must be assessed and disclosed before it is enabled. Student answers, writing, names, email addresses and private result links must not be sent to advertising analytics.

7. Security and retention

Passwords are stored as one-way hashes. Access controls, encrypted HTTPS connections and security checks help protect information, but no online service can guarantee absolute security.

Account recovery uses a reset link that expires after 30 minutes and can be used once. Resetting a password revokes previous login sessions. Private check-up links expire 30 days after the check-up starts; expiry of a link does not itself delete the underlying learning record.

Learning records remain associated with an account until deleted under the applicable retention process. Cancellation of subscription renewal does not itself delete the account. Billing, audit and security information may need to be retained for legal, accounting or security purposes. Keyed trial-redemption identifiers are retained to prevent repeated trials; they are not the same as anonymous data.

Contact us for the retention and deletion arrangements that apply to your account. Specific retention periods and backup-deletion processes require operational verification; no automatic 12-month deletion is promised by this draft.

8. Requests and complaints

Contact pileoacademy6683@gmail.com or use the contact form to request access to or correction of your information, ask about deleting an account, or make a privacy complaint. Use your parent account email and describe the request without including passwords, full card numbers or sensitive student information. We may need to verify your identity and will explain any information that must be retained. Australian privacy rights apply where the relevant law covers the service. This policy does not describe account deletion as an unconditional statutory right.

We will explain how your request is being handled and any available escalation process. Where the Privacy Act applies, information about privacy complaints is available from the Office of the Australian Information Commissioner.

9. Changes

The date above identifies the current draft. Material changes to privacy practices should be explained before the changed practice begins.

---

Questions?

Email pileoacademy6683@gmail.com or call +61 494 639 263. You can also read our Privacy Policy, Terms of Service, and Cancellation & Refund Policy.