Privacy Policy
This policy explains how [Business Name] collects, uses, discloses and protects your personal information when you use Pigrid, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Last updated: [Month Year]
1. Who we are
Pigrid is operated by [Business Name] (ABN [ABN]) ("we", "us" or "our"). We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Information we collect
We collect only what we need to run the Service:
- Account information — your email address and password (stored securely by our authentication provider).
- Learning data — units you complete, questions you attempt, answers you reveal, bookmarks, and where you left off, so we can save your progress.
- Technical data — basic information your browser sends (such as device and usage information) used to keep the Service secure and working.
We do not ask for sensitive information and ask that you do not send it to us.
3. Children's privacy and parental consent
The Service is used by secondary-school students, some of whom are under 18. Where a user is under 18, we rely on the consent of a parent or legal guardian for that child's use of the Service and the collection of their information. A parent or guardian may contact us at any time to access, correct, or request deletion of their child's information. We collect the minimum information needed to provide the learning experience and do not use children's information for advertising.
4. How we use your information
We use personal information to:
- create and manage your account;
- save and display your learning progress;
- keep the Service secure, reliable and improved over time;
- respond to your enquiries and provide support; and
- meet our legal obligations.
5. Disclosure and third parties
We do not sell your personal information. We share it only with service providers that help us operate the Service — for example, our hosting and database provider (Supabase) and our web hosting platform (Vercel) — and only so they can perform those services. We may also disclose information where required by law.
6. Overseas disclosure
Some of our service providers may store or process data on servers located outside Australia. Where this happens, we take reasonable steps to ensure your information is handled consistently with the APPs. [Specify hosting region(s) before launch.]
7. Cookies and analytics
We use cookies and similar technologies that are necessary to sign you in and remember your preferences (such as light or dark mode). [Describe any analytics tools and how to opt out before launch.]
8. How we protect your information
We take reasonable steps to protect personal information from misuse, loss, and unauthorised access — including encrypted connections, access controls, and reputable infrastructure providers. No online service can be completely secure, so we also ask you to keep your login details confidential.
9. Access, correction and complaints
You may request access to, or correction of, the personal information we hold about you (APPs 12 and 13) by emailing [email protected]. If you have a privacy concern, contact us first and we will try to resolve it. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
10. Retention and deletion
We keep your information for as long as your account is active or as needed to provide the Service and meet legal obligations. You can ask us to delete your account and associated data by emailing [email protected], and we will do so unless we are required to keep certain records by law.
11. Changes to this policy
We may update this policy from time to time. We will post the updated version with a new "last updated" date and, where changes are material, take reasonable steps to let you know.
12. Contact us
For any privacy question or request, contact [Business Name] (ABN [ABN]) at [email protected].