Privacy Policy

1. What we keep

About the adult: name, email address, and a password held by our sign-in provider as a one-way hash. If you pay us, our payment provider holds your card details; we never see them.

About a child: first name or nickname, year level, a username and a hashed PIN, and their practice — the questions they were asked, what they answered, whether it was right, how long it took and which hints they opened.

We do not keep a child's email address (unless you turn it on for a student in Year 10 or above), date of birth, photograph, home address, or any free-text chat.

We also keep an audit log of sensitive actions, records of consent, and logs of the emails we send you.

2. Why we keep it

To choose the next question at the right difficulty, to show progress to you and to your child's tutor, to let you follow along, and to keep the account secure.

We do not sell anything about you or your children. There is no advertising on StudyMaster, no advertising trackers, and no cross-site tracking.

3. Automated decisions

StudyMaster chooses each question automatically from how your child has answered so far: a rating per skill goes up when they get questions right and down when they do not, and the next question is picked near that rating. A level, once earned, is never taken away by a wrong answer.

We also watch for patterns that look like an account being shared or copied — many different questions opened very quickly, or from many devices at once. If that trips, the student account is paused with a friendly message and you or the academy can lift it. No decision made this way is final, and you can always ask a person to look at it.

4. Who else sees it

A tutor sees only the children enrolled in their own class, at an academy you have joined. No family ever sees another family.

Our data is stored in Sydney. Some suppliers we use are overseas: our email sender and payment provider hold your adult contact details, and the services that help us write and check questions receive question text only, never a child's name or work.

5. Children and consent

A parent or guardian consents on behalf of their child when they set up the family, and the child is shown a short note in their own words explaining what is kept and why.

Where an academy adds a class to StudyMaster before the parents are on the platform, the academy attests on the record that it holds each family's signed enrolment agreement, and names that document. That attestation is not a parent's consent: it is the academy taking responsibility, and it is replaced by the parent's own consent as soon as they claim the child.

6. How long we keep it

Our retention schedule is: practice records made anonymous 24 months after a subscription ends; consent records, audit events and tax records kept for seven years; email logs twelve months; sign-in device records 90 days after last use.

We apply this schedule on request and as part of account deletion. We are still building the job that applies it automatically, so until then a record may be held past its date; ask us and we will remove it.

7. What you can ask for

You can ask us for a copy of everything we hold about your family, ask us to correct it, or ask us to delete the account. Today these are handled by a person rather than a button in the app: write to us and we will complete the request within 30 days and confirm by email. Deletion removes the people records and makes the practice history anonymous.

To make any of these requests, or to complain about how we have handled your information, write to support@sseducation.com.au. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner.

8. Changes

Each version of this policy carries a date, shown at the top. If we change why we use your information, we will tell you and ask you to agree again before the change applies to your family.