1. Definitions
In this Privacy Policy, the following terms have the meanings set out below.
- Company, we, us or our
- Company means Curricly AI, the operator of the Service. If a separate legal entity is identified in an order, school agreement or other written contract, that entity is the Company for that transaction.
- Service
- Service means the Curricly AI website, application, account features, teaching studio, live classroom tools, APIs and related services that link to this policy.
- Personal Information
- Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not and whether recorded in material form or not.
- Content
- Content means prompts, instructions, uploads, references, drafts, generated resources, edits, exports, messages and other material submitted to or produced through the Service.
- School Workspace
- School Workspace means an account, workspace, class or other area administered by a school, faculty, team or organisation.
- Student Data
- Student Data means Personal Information about a student, learner or child that is submitted to or generated in connection with a classroom, resource or live-session activity.
2. Scope and roles
This policy describes how the Company collects, uses, discloses, stores and protects Personal Information when you visit our website, create an account, use the Service, participate in a School Workspace or contact us.
The Service is designed for teachers, education professionals, schools, teams and other authorised users. It is not intended to replace your school's privacy, safeguarding, records-management or information-security policy.
Where a school or organisation provides your account or controls a School Workspace, that organisation may determine why certain Personal Information is used and may have separate privacy obligations. In that situation, the school or organisation may be the primary contact for records held in its Workspace, while the Company remains responsible for the Service described here.
3. Personal Information we collect
We collect only the information reasonably needed to operate, secure and improve the Service. This may include the following categories.
Information you provide
- Account information: name, email address, authentication identifiers, profile details and account preferences.
- Teaching information: subjects, year levels, curriculum settings, teaching preferences and other context you choose to save.
- Content: prompts, drafts, generated resources, uploaded references, knowledge collections, edits, exports and shared resources.
- Classroom information: class details, live-session settings, participant responses and related records when you use classroom features.
- Support and transaction information: support messages, plan and usage records, transaction references and billing information where a paid feature is used.
Information collected automatically
- Device and usage information: browser and device type, IP address, approximate location inferred from an IP address, pages or features used, timestamps, diagnostic events and error or performance information.
- Cookies and similar technologies: essential session and security identifiers, preference information such as theme choice, and limited performance or diagnostic signals.
You may choose not to provide information, but a feature may be unavailable or less personalised if the required information is not provided.
4. How we use Personal Information
We may use Personal Information for the following purposes:
- to create, maintain, authenticate and secure accounts;
- to store, organise, edit, export and share Content at your direction;
- to process prompts and supporting context through the AI and other features needed to return a requested result;
- to provide classroom, live-session, workspace and collaboration features;
- to provide support, service messages, account notices and responses to enquiries;
- to process plans, usage records, payments and account administration where applicable;
- to detect misuse, investigate incidents, prevent fraud and protect users, the Service and the public;
- to monitor reliability, understand performance and improve the Service for legitimate product purposes; and
- to comply with law, respond to lawful requests and enforce our Terms & Conditions.
When you use an AI feature, the relevant prompt, instructions and supporting context may be processed by the infrastructure or AI providers needed to deliver that feature on our behalf. We do not sell Personal Information or use private teacher Content to serve advertising to you.
5. Teachers, schools and Student Data
Teachers and schools are responsible for deciding what Student Data is necessary and authorised for a teaching task. Before submitting Student Data, make sure the use is consistent with your school's instructions, notices, permissions, safeguarding requirements and applicable law.
- Use the minimum information needed for the feature.
- Prefer initials, anonymous labels, groups or fictional examples where identifying a learner is unnecessary.
- Do not submit health information, detailed behaviour records, financial information, authentication details or other sensitive information unless your school has specifically approved that use and it is necessary.
- Review generated resources, feedback, answer keys and live-session results before using them with students.
- Do not use an AI output as the sole basis for a safeguarding, disciplinary, diagnostic, access or other high-stakes decision about a student.
If you believe Student Data was submitted in error, contact us promptly at [email protected]. Provide enough information for us to locate the account or resource, but do not send the Student Data again in your email.
6. Disclosures and service providers
We may disclose Personal Information where reasonably necessary for the purposes in this policy, including to:
- Service providers: providers of hosting, storage, authentication, security, email, analytics, customer support, payment and AI infrastructure services that process information for the Company.
- School and Workspace administrators: administrators, owners and members of a School Workspace, according to the access and sharing settings selected by the school, team or user.
- Professional advisers and authorities: advisers, regulators, courts, law enforcement or other parties where disclosure is required or reasonably necessary to protect people, rights, property or the Service.
- Business successors: a purchaser, successor or adviser if the Company is reorganised, merged, financed or transferred, subject to appropriate confidentiality and legal protections.
We do not sell Personal Information and do not disclose it to data brokers for their own marketing.
7. International transfers, security and retention
International processing
The Company and its service providers may store or process Personal Information in Australia or other countries. Where information is transferred across borders, we take steps appropriate to the circumstances and applicable privacy requirements, including by using service providers we consider suitable for the relevant function.
Security
We use reasonable technical and organisational safeguards designed for the information we hold. These may include encryption in transit, access controls, authentication protections, monitoring and limiting internal access to people who need it for their role. No internet service or storage system can guarantee absolute security.
Retention
We generally retain account and Content information while an account is active, for as long as needed to provide a requested feature, or for legitimate records and legal obligations. When you close an account or request deletion, we remove or de-identify information through our account processes where we can. Backups, security records and information we must retain may remain for a limited period.
9. Access, correction, deletion and complaints
Depending on your location and how your account is managed, you may have the right to:
- request access to Personal Information we hold about you;
- ask us to correct information that is inaccurate, incomplete or out of date;
- download a portable account export from the Data & Privacy area where that control is available;
- request deletion of Personal Information, subject to legal, security, transaction and school-record requirements;
- withdraw consent or object to optional uses where the law gives you that choice; and
- ask how information in a School Workspace is managed through your school or organisation.
Send a request or complaint to [email protected]. We may need to verify your identity and clarify the scope before acting. If you are in Australia and remain concerned after contacting us, you may contact the Office of the Australian Information Commissioner (OAIC) through oaic.gov.au.
10. Changes and contact
We may update this Privacy Policy when the Service, our providers or applicable requirements change. The current version will be published on this page with a new last-updated date. If a change is material, we will take reasonable steps to draw it to account holders' attention.
Questions, requests and privacy complaints can be sent to [email protected]. Please do not include passwords, authentication codes or unnecessary Student Data in an email.
We are happy to clarify.
Contact [email protected] and include the page or section you are asking about.