Child-focused privacy, explained for schools and teachers.

SmartKidz is an Australian educational service for Years 1–10. Our primary privacy framework is the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where a government school or agency uses SmartKidz, we also support that organisation's applicable public-sector privacy obligations.

• We do not serve advertising to children.
• We do not sell children's personal information.
• We do not use identifiable learner data to train general AI models.

• Teacher account: name, email, authentication records, school or organisation details and curriculum preference.
• Classroom and roster: classroom name, year level, learner roster identity, join code and PIN credential.
• Learning records: assigned work, answers, completion, scores, mastery and reporting evidence.
• Riley and safety: relevant chat text, session context, safety signals and teacher acknowledgement where those features are used.
• Service records: security logs, device or browser information and essential session cookies.

Students do not need to provide an email address to use their classroom learner space.

We use this information to authenticate teachers and learners, operate classrooms, deliver assigned work, provide Riley support, create reports, respond to support requests, maintain security and meet legal obligations.

Public School marketing pages use limited first-party measurement. Signed-in teacher and student surfaces are excluded from public marketing analytics.

Riley and teacher drafting use Anthropic Claude through AWS Bedrock in Sydney. Relevant prompt and learning text is processed to provide the requested feature and is not used by SmartKidz to train general AI models.

Optional speech-to-text streams audio to Deepgram's Australian endpoint to produce text. SmartKidz does not store the voice recording. Text-to-speech sends Riley's written response to Deepgram to return synthesised audio.

We also use contracted infrastructure, authentication, email and support providers where necessary to operate the service. They receive only the information needed for that function and are bound by their applicable data-protection terms.

Teacher routes and classroom records are checked against classroom ownership. A teacher can access records for learners connected to a classroom they own, including available assignment evidence, safety signals and Riley transcripts.

A student session is limited to the learner identity and school work associated with its classroom membership. The student experience has no public profile, advertising or open social feed.

SmartKidz defines retention rules for child transcripts, support records, safety information and technical records, with shorter windows for ordinary conversation data and safeguards around unresolved or critical safety records. Exact operational windows can be configured for the deployed service.

Teachers, schools, parents or guardians can contact us to request access, correction or deletion where they have the relevant authority. Some information may need to be retained where required by law, security or an unresolved safeguarding matter.

SmartKidz uses authenticated access, signed student sessions, classroom ownership checks and encrypted service connections. No online service can promise absolute security.

If an eligible data breach is likely to cause serious harm, we assess and notify affected people, the OAIC and any relevant school or agency where required under the Notifiable Data Breaches scheme.

To ask about a learner record, correct information, withdraw an optional permission or request deletion, email [email protected]. We may need to verify identity and authority before acting.

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner .

Essential cookies keep teacher and student sessions secure. We do not use advertising cookies or behavioural tracking in the signed-in student experience. Limited first-party public-site measurement honours the browser's Do Not Track setting and is not used to profile children.