Privacy Policy — Production Draft
Before school sale: insert the real legal operator, ABN and final provider/data-location details, then obtain appropriate legal review.
MathsExpress is a mathematics learning platform for students, teachers, schools and authorised parents/guardians.
Information we may hold
Account and school identifiers, class membership, assignments, responses and working, marks and mastery, teacher feedback, learning activity, security/integrity events, authorised guardian links, support reports, optional AI request context, and accessibility/preferences.
How it is used
To provide and secure the learning service, manage classes and assessments, create progress reports, provide support, operate optional AI features, maintain audit/security records and meet contractual/legal obligations.
Student advertising
MathsExpress is not designed to sell student personal information or use student personal information for targeted advertising.
AI
AI features are optional/configurable. Strict Test Mode blocks student AI help. Personal information sent to an AI provider should be minimised. The final policy must name the actual production AI provider, processing location/terms and retention/training settings.
Storage and security
School production should use a dedicated Australian-region database with authenticated access, role-based controls, row-level database security, HTTPS, server-side secret storage, logging and tested backup/recovery. No online service can guarantee absolute security.
Retention
Information should be kept only as long as reasonably needed for the service, school requirements, security/support and applicable law, then securely deleted or de-identified.
Your requests
Signed-in users can request a data export or verified account/data deletion from Student Settings when the v10 privacy migration is installed. Access and correction requests can also be handled through the operator/school process.
Students and consent
School deployment must follow the school/system requirements for notices, authority and parent/guardian consent. NSW public schools should use the Department’s current process rather than relying on this draft alone.
Children and automated decisions
MathsExpress is likely to be accessed by people under 18. The operator must review and implement applicable requirements of the final Australian Children’s Online Privacy Code when it is issued. Before 10 December 2026, the operator must also assess the new APP 1 transparency requirements for certain substantially automated decisions that significantly affect individuals and update this policy where required.
Contact
Email: aarush.sharma6@education.nsw.gov.au
Before school sale: legal entity, ABN and any additional required operator details still need to be finalised.