Privacy Policy

1. Introduction

SeedTree Education Pty Ltd (ABN to be registered) ("SeedTree", "we", "us", or "our") operates the website seedtree.com.au, the web application at app.seedtree.com.au, and the SeedTree Mental Maths iOS application (collectively, the "Services").

We are committed to protecting the privacy of all users, including students, teachers, parents, and school administrators. This policy explains what data we collect, why we collect it, how we use and protect it, and your rights regarding your data.

2. Data We Collect

2.1 Account Information

When you sign up or sign in via Google Authentication (our default login method), we receive and store:

• Name and email address (from your Google account)
• Profile picture URL (if available)
• Unique account identifier
• Role designation (student, teacher, parent, or administrator)

We do not receive or store your Google password. Authentication is handled entirely by Google's OAuth 2.0 protocol.

2.2 Learning Data

When students use SeedTree for mathematics practice, we collect:

• Practice completion records (which exercises were attempted and completed)
• Accuracy data (correct and incorrect answers)
• Error classifications (types of mathematical errors made)
• Improvement tracking (mastery status per concept: Concept Deficit, Practice Needed, Mastered)
• Timestamps of practice sessions
• Seed Points balance and transaction history

This data is essential to our core service: providing personalised mathematics learning paths and enabling teachers to identify where students need support.

2.3 Google Classroom Data (Optional)

If a teacher chooses to connect their Google Classroom account, we access:

• Course names and structure
• Student roster (names and email addresses)
• Coursework and topic information

This data is used solely to enable teachers to distribute SeedTree exercises through Google Classroom and to sync grades back. We do not access Google Classroom data for any other purpose.

2.4 Technical Data

We automatically collect:

• Device type and operating system version
• Browser type (for web application)
• IP address (for security and abuse prevention)
• General usage analytics (page views, feature usage)

3. How We Use Data

• Delivering the Service — generating practice questions, tracking progress, awarding Seed Points
• Teacher Insights — showing teachers which students need help, common error patterns, and concept mastery status
• Personalisation — adapting practice recommendations based on individual learning progress
• Google Classroom Integration — distributing assignments and syncing completion/grade data
• Service Improvement — understanding aggregate usage patterns to improve our curriculum and features
• Communication — sending service-related notifications (e.g., assignment reminders, account updates)

We do not use student data for advertising, marketing to students, or building advertising profiles.

4. Data Storage and Security

4.1 Data Residency

All data is stored on servers located in Sydney, Australia (AWS ap-southeast-2). Student data does not leave Australia.

4.2 Security Measures

• All data in transit is encrypted via TLS/HTTPS
• Database access is restricted to application servers only
• Google OAuth tokens are stored securely and refreshed automatically; we never store Google passwords
• Seed Points transaction history uses a hash-chain integrity mechanism to prevent tampering
• Regular security reviews and dependency updates

5. Data Sharing

We share data only in the following limited circumstances:

• Teachers — can view their own students' learning data (progress, errors, mastery status)
• Google Classroom — grade and completion data is synced back to Google Classroom only when a teacher has explicitly connected their account and pushed an assignment
• Service Providers — we use Auth0 (authentication), AWS (hosting), and Square (payment processing for subscriptions). These providers process data only as necessary to deliver their services
• Legal Requirements — we may disclose data if required by law, regulation, or valid legal process

We do not sell, rent, or trade personal data to third parties. We do not share student data with advertisers.

6. Children's Privacy

SeedTree is designed for use by school-aged students. We take the protection of children's data seriously:

• Student accounts are created through teacher or school administration — students do not sign up independently
• We collect only the minimum data necessary to deliver the educational service
• Student data is never used for advertising or non-educational purposes
• Parents and guardians can request access to or deletion of their child's data by contacting us

We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs) as they apply to children's data.

7. Data Retention and Deletion

• Active accounts — data is retained for as long as the account is active
• Inactive accounts — accounts with no activity for 24 months may be flagged for deletion, with prior notice sent to the account holder
• Deletion requests — you may request deletion of your account and all associated data at any time by contacting [email protected]
• Google Classroom data — if a teacher disconnects their Google Classroom integration, we delete all stored Classroom tokens and mapping data within 30 days

8. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your data (subject to legal retention requirements)
• Data Portability — request an export of your learning data in a standard format
• Withdraw Consent — revoke Google Classroom access at any time through your Google account settings or SeedTree settings

9. Third-Party Services

10. Cookies and Local Storage

We use essential cookies and local storage for authentication session management. We use analytics cookies (Umami) to understand aggregate usage patterns. Umami is privacy-focused and does not use personal identifiers or cross-site tracking.

We do not use advertising or third-party tracking cookies.

11. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify affected users via email or in-app notification at least 30 days before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

• Email: [email protected]
• Website: seedtree.com.au/contact

For complaints about our handling of personal information, you may also contact the Office of the Australian Information Commissioner (OAIC).