Privacy Policy
Last updated: 20 June 2026
1. Who We Are
Edufied is operated by Joshua Rentenaar trading as Edufied (ABN: 91 731 785 958), a sole trader based in Western Australia, Australia.
Edufied provides a suite of educational tools for teachers and students, accessible at edufied.com.au and its associated applications (collectively, "the Platform").
- Privacy Officer:
- Joshua Rentenaar
- Privacy contact:
- privacy@edufied.com.au
- General enquiries:
- support@edufied.com.au
We take our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) seriously. This Privacy Policy explains how we collect, use, store, and disclose personal information across the Platform.
2. Scope
This policy applies to all properties operated by Edufied, including:
- edufied.com.au (marketing site and teacher dashboard)
- student.edufied.com.au (student hub)
- All connected teacher applications (Pulse, Analytics, Circuit, Venture)
3. What Personal Information We Collect
Teacher Accounts
When a teacher creates an account, we collect:
- Full name
- Email address
- Password (stored as a secure cryptographic hash: we cannot read your password)
- School name and general location (if provided)
- Subscription and billing information (processed by Stripe: we do not store card numbers)
Student Accounts
Teachers create student accounts on behalf of their school. We collect only the minimum information required to operate the Platform:
- First name
- Last name initial (one or two characters only: not a full surname)
- Username (chosen by the teacher)
- Year level (optional)
- PIN (stored as a secure cryptographic hash: we cannot read the original PIN)
- Class enrolments
- Learning progress, activity responses, and assignment data within the educational tools
We do not collect student email addresses, home addresses, phone numbers, or any government-issued identification.
Technical Information
When you use the Platform, we automatically collect:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and features used
- Authentication session data
4. How We Collect Personal Information
We collect personal information:
- Directly from teachers: when they register, set up their account, add students, or contact us
- Through teacher-created accounts: teachers create and manage student accounts; students do not self-register
- Automatically: through server logs, authentication sessions, and the cookies and storage technologies described in Section 9
We do not purchase personal information from third parties, and we do not collect personal information from publicly available sources.
5. Why We Collect Personal Information
We use personal information for the following purposes:
- Providing the Platform: authenticating users, displaying class data, tracking learning progress, and enabling tool functionality
- Account management: allowing teachers to manage their classes, students, and settings
- Security: detecting and preventing unauthorised access, fraud, and misuse
- Communications: sending service-related emails (account setup, password resets, billing notifications)
- Improving the Platform: understanding how the Platform is used in aggregate, to fix bugs and improve features
- Legal compliance: meeting our obligations under applicable laws
We do not use student personal information for targeted advertising, behavioural profiling, or any commercial purpose unrelated to providing educational services.
We do not sell personal information.
6. Disclosure of Personal Information
We do not share personal information with third parties except in the following circumstances.
Service Providers (Sub-Processors)
We engage the following third-party providers to operate the Platform. Each is bound by confidentiality obligations and may only use personal information to perform services for us:
| Provider | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database hosting and user authentication | United States / EU |
| Netlify, Inc. | Website hosting, content delivery, and visitor analytics | United States |
| Stripe, Inc. | Payment processing (teacher subscriptions only) | United States |
| Resend, Inc. | Transactional email delivery | United States |
Legal Requirements
We may disclose personal information if required to do so by law, court order, or a request from a regulatory authority.
Business Transfers
If Edufied is acquired, merged, or substantially reorganised, personal information held by us may be transferred to the new entity. We will notify affected users before any such transfer.
7. Overseas Disclosure
All of our primary service providers are based in the United States or European Union. Your personal information is stored on servers operated by Supabase in the United States and/or European Union.
By using the Platform, you acknowledge that your personal information will be transferred to and stored in these countries. We take reasonable steps to ensure these providers protect personal information to a standard consistent with the Australian Privacy Principles, including through signed Data Processing Agreements (DPAs).
8. Student Data and Parental Consent
Edufied is designed for use in school environments. Teachers and schools (not students or parents) create and manage student accounts on the Platform.
By creating student accounts, a teacher confirms that they are acting with the authority of their school and that their school has appropriate consent processes in place for the collection of student personal information.
If you are a parent or guardian who has concerns about your child's data on the Platform, please contact the school directly. If you wish to contact us directly, email privacy@edufied.com.au and we will work with the relevant teacher or school to respond.
9. Cookies and Browser Storage
Cookies
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
_tccl_visitor | Netlify, Inc. (US) | Anonymous visitor ID for unique visitor counting | ~12 months | Analytics |
edufied_session | Edufied | Student authentication on student.edufied.com.au | Session | Strictly Necessary |
Other Storage Technologies
Teacher authentication is managed using localStorage via the Supabase JavaScript client. This stores an encrypted session token on your device and is strictly necessary for the Platform to function. We also store your cookie consent preference in localStorage under the key edufied-cookie-consent.
For full details, see our Cookie Policy.
10. Data Security
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include:
- Encryption in transit (TLS) for all data between your browser and our servers
- Encryption at rest for all data stored in our database
- Cryptographic hashing of all passwords and student PINs
- Role-based access controls so teachers can only access their own students and classes
- Authentication tokens with limited lifetimes
If you become aware of any security concern, please contact privacy@edufied.com.au immediately.
11. Data Retention
- Teacher accounts: retained while the account is active, and for a reasonable period after deletion to meet legal obligations
- Student accounts: retained while enrolled in an active teacher's class; teachers can delete students at any time
- Server logs: retained for up to 90 days for security purposes
When data is deleted, it is removed from our production database. Residual copies may remain in backups for a short period before being overwritten in normal backup rotation.
12. Access and Correction
You have the right to request access to personal information we hold about you, and to request corrections if it is inaccurate, out of date, incomplete, or misleading.
Teachers can update most of their own information directly in Account Settings. To request access to data not visible in the dashboard, email privacy@edufied.com.au.
Students do not have direct account settings access. A student's teacher or school can update or delete records on their behalf. Parents may contact privacy@edufied.com.au and we will work with the relevant teacher to respond.
We will respond to access and correction requests within 30 days.
13. Automated Decision-Making
Edufied does not currently use automated decision-making processes that would significantly affect the rights or interests of any individual. If this changes, we will update this policy and notify users before those features go live, in accordance with APP 1.7 (effective December 2026).
14. Complaints
If you believe we have interfered with your privacy, please contact us:
Email: privacy@edufied.com.au
Subject line: Privacy Complaint
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: oaic.gov.au
- Phone: 1300 363 992
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify teachers by email or by displaying a prominent notice on the Platform. The "Last updated" date at the top of this page will always reflect the current version.
16. Contact Us
Email: privacy@edufied.com.au
Operated by: Joshua Rentenaar trading as Edufied
ABN: 91 731 785 958
Location: Western Australia, Australia