True North Mathematics ("True North", "we", "us", "our") is an online maths learning service based in Melbourne, Victoria, Australia. This policy explains what personal information we collect through truenorthmath.net (the "Service"), why we collect it, who we share it with, and the choices and rights you have. We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, and we apply the same care to users in other countries.

1. Information we collect

Information you give us.

• Account details: your name, email address, password (stored only in hashed form by our authentication provider), role (student, parent, teacher, school or agent), curriculum and year level, and, where relevant, your school name.
• Linked accounts: links between parent, teacher, school and student accounts, so that the right people can see the right progress information.
• Learning activity: practice test attempts, answers and scores, assignments, worksheet and resource usage, and progress or recap records.
• Questions and uploads: text and any photos or files you submit when using Ask a Question or similar tools.
• Messages: support messages and enquiries you send us, including your contact details and the content of your message.
• Payments: when you subscribe, payment is handled by Stripe. We receive limited billing information such as subscription status, plan, and the last four digits and brand of your card. We do not see or store your full card number.

Information collected automatically.

• Visit analytics: pages viewed, referring page, device and browser type, language, approximate location (country and region, derived from your IP address), and an anonymous visitor identifier stored in your browser.
• Session activity: sign-in times and basic activity signals while you are logged in, used to keep sessions secure and to understand how the Service is used.
• Error logs: technical details of errors (and the IP address of the request) so we can find and fix faults.

We do not knowingly collect sensitive information (such as health, religion or political views). Please do not include it in questions, uploads or messages.

2. How we use it

• To create and manage your account, authenticate you and provide the Service, including free trials and subscriptions.
• To deliver learning content, mark practice tests, track progress and show results to the linked parent, teacher or school.
• To answer your questions and support requests, and to send service messages such as trial-expiry reminders, password resets and receipts.
• To process payments and prevent fraud or misuse.
• To understand which pages and resources are used, show the right regional site, and improve the Service.
• To keep the Service secure, diagnose errors and meet legal obligations.

We do not sell personal information, and we do not use it for third-party advertising.

3. AI features

Some features, such as Ask a Question, use a third-party artificial intelligence model provided by Anthropic. When you use one, the text or images you submit, and the context needed to answer (for example your curriculum and year level), are sent to the provider to generate a response. We do not send your password or payment details. Please avoid including personal details such as full names, addresses or phone numbers in questions or photos. Responses are generated automatically and may contain mistakes, so they should be checked against your teacher's or textbook's guidance.

4. Who we share it with

We share personal information only as needed to run the Service:

Provider	Purpose
Supabase	Database, authentication, file storage and server functions
Netlify	Website hosting and delivery, including regional routing
Stripe	Payment processing and subscription billing
Resend	Sending email (support replies, reminders and service notices)
Anthropic	AI-generated answers for features that use AI

Within True North's service, progress information is visible to the people linked to a student's account (for example a parent, teacher or school), and to our administrators. If an agent or school registers students with us, that agent or school may see information relating to those students. We may also disclose information where required by law, to protect safety or rights, or in connection with a sale or restructure of our business (in which case we will require the new owner to honour this policy).

5. Students and children

The Service is designed for school students, teachers, parents and schools. Students under 18 should use the Service with the knowledge and consent of a parent, guardian or school. We recommend that students under 13 are registered by a parent, guardian or teacher, who is responsible for their account. We collect only the information needed to provide learning features and do not use student information for advertising. A parent or guardian may contact us at any time to ask what we hold about their child, to correct it, or to have it deleted.

If you are a teacher or school registering students, you confirm that you have the authority and any required consents from the school and families to do so.

6. Cookies and local storage

We use a small number of first-party cookies and browser storage items:

• Region cookie (tnm_region): remembers the curriculum or regional version of the site you chose.
• Login session: keeps you signed in, held in your browser storage by our authentication provider.
• Anonymous visitor ID: a random identifier in your browser's local storage used for privacy-respecting visit analytics.

We do not use advertising or cross-site tracking cookies. You can clear or block cookies and site data in your browser settings, but parts of the Service (such as staying logged in) may then stop working.

7. Overseas storage and transfers

Our service providers may store and process information in countries outside Australia, including the United States and other regions where their data centres operate. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with applicable privacy law, such as by using reputable providers with contractual data-protection terms. By using the Service you understand your information may be processed in these locations.

8. Retention

We keep personal information for as long as your account is active and as needed to provide the Service. If you close your account or ask us to delete your information, we will delete or de-identify it within a reasonable time, except where we must keep some records (for example payment and tax records) for legal reasons or to resolve disputes. Analytics and error logs are kept only for as long as needed for security, troubleshooting and service improvement.

9. Security

We use measures including encrypted connections (HTTPS), access controls on our database, hashed passwords and two-step verification for administrator accounts. No online service can be completely secure, so please use a strong, unique password and do not share it. If you suspect unauthorised access to your account, contact us immediately. If a data breach is likely to cause serious harm, we will notify affected people and the relevant regulator as required by law.

10. Your rights and choices

You can ask us to:

• give you access to the personal information we hold about you;
• correct information that is inaccurate, out of date or incomplete;
• delete your account and personal information; and
• stop sending you non-essential emails.

If you are in the European Economic Area, the United Kingdom or another region with similar laws, you may also have the right to object to or restrict certain processing and to receive your data in a portable format. To make a request, contact us using the details below. We may need to verify your identity first, and we will respond within a reasonable time (generally within 30 days). Logged-in users can also update some account details inside their portal.

11. Complaints

If you think we have mishandled your personal information, please contact us first so we can try to resolve it. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au, or to the privacy regulator in your own country.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. If we make significant changes, we will take reasonable steps to let you know, for example by a notice on the site or an email to registered users.

13. Contact us

For privacy questions or requests, email enroll@truenorthmath.net with "Privacy" in the subject line. Logged-in users can also use the Get Support page.

True North Mathematics
Melbourne, Victoria, Australia