Data storage & AI for schools
Last updated: July 2026
Where data is stored
Account, school, class, and roster data for the LearnSpace platform is stored in Supabase (database and authentication). Our primary region is Sydney, Australia (ap-southeast-2) — the closest Supabase region to New Zealand.
Each classroom app (MyFeedback Pro, PlanSpaceNZ, Word Wand, and others) runs on its own LearnSpace subdomain and keeps only what that app needs to work. Core identity and school membership still sit in the shared LearnSpace account system above.
NZ data residency
Enterprise school plans can elect NZ-based data residency, so student and school records for that tenancy are stored within New Zealand. Talk to us if your kura needs this for board or MoE requirements.
What we collect (and what we don’t)
Adults (kaiako, school admins, whānau)
- Name, email, and role
- School name and region (for school accounts)
- Billing details via Stripe (we do not store full card numbers)
- App opens and approximate time-in-app for adult sessions, so we can support schools and improve the product
School directory fields are already public. School name, region, and related MoE directory details (including publicly listed school contacts and leadership) come from the Ministry of Education / Education Counts schools directory. LearnSpace links kura to that register — we are not inventing private “secret” school identity data.
Tamariki
- First name and year level (or last initial where used) — provided by a parent or teacher
- Class assignment and learning progress generated inside LearnSpace apps
- Kids portal / student app sessions are recorded anonymously — no child identity is attached to usage analytics
We do not collect health data, home addresses, or ethnicity for marketing. We never sell personal information or use it for advertising.
AI in LearnSpace apps
AI is used in specific apps for classroom and teacher workflows — not as a general chatbot that stores your school’s chat history for training.
| App | Typical AI use | Whose data is involved |
|---|---|---|
| MyFeedback Pro | Curriculum-aligned writing / handwriting feedback | Student writing submitted for feedback in that session |
| PlanSpaceNZ (Teachers Planner) | AI-supported activity ideas from NZ Curriculum picks | Teacher planning prompts and curriculum choices — not student workbooks |
| Word Wand | Camera word scanning / phonics support | Words or images captured in-app for that lookup |
Other practice apps may use lighter AI or none at all. The hub (accounts, billing, class lists) is not itself a training pipeline for third-party models.
Our AI commitments
- No training on your school or student data. We do not use LearnSpace customer content to train our own foundation models, and we choose AI providers and settings that do not use API / customer content to train their models.
- Purpose-limited. Content is sent to AI only to deliver the feature you asked for (feedback, activity ideas, word help) — not for ads or unrelated product training.
- Minimised. We aim to send only what the feature needs for that request.
- Not sold. Student and teacher content is never sold or used for advertising.
Generic consumer AI tools (e.g. ChatGPT in a browser) often have different defaults. LearnSpace apps are built for school use with privacy expectations that matter to kura.
Encryption & access
| Layer | Practice |
|---|---|
| Data at rest | AES-256 encryption |
| Data in transit | TLS 1.3 |
| Backups | Encrypted; daily automated backups with point-in-time recovery in the same region |
| Access | Production access requires MFA, is restricted to authorised staff, and is logged |
LearnSpace staff access personal or student data only when needed for support, and with appropriate consent or school authorisation.
Analytics
Site analytics use Plausible — privacy-friendly, cookie-free, and without personal identifiers. First-party app usage metrics for adults help us support schools; children’s sessions stay anonymous.
Compliance
- NZ Privacy Act 2020 — our primary framework
- Australian Privacy Act 1988 — relevant while primary hosting is in Sydney
- We follow relevant NZISM-aligned practices for classification and access
Full legal detail is in our Privacy Policy.
Data deletion
When you cancel an account:
- Data remains available for 30 days (in case you change your mind)
- After that, personal data is permanently deleted
- Anonymised aggregate stats (e.g. totals by region) may be kept for product analytics
You can request earlier deletion at any time.
Share this page
Feel free to send this URL to teachers, principals, or your board:
Questions
- Email: support [at] learnspace.nz
- Phone: Available for Enterprise customers
For day-to-day product help, see Privacy and data storage in the knowledge base or contact support.