Student Data and Privacy

Our Commitment to Privacy

LearnSpace takes the privacy of tamariki seriously. We have designed our platform to meet the requirements of New Zealand privacy legislation and support kura in fulfilling their obligations under the National Administration Guidelines.

Compliance Framework

NZ Privacy Act 2020

LearnSpace operates in full compliance with the Privacy Act 2020. We collect only the minimum personal information necessary to deliver our services, and we are transparent about how that data is used, stored, and shared. Our privacy policy is available on our website and details all thirteen information privacy principles as they apply to our platform.

NAG 5 Obligations

Schools have obligations under NAG 5 to provide a safe physical and emotional environment for tamariki. LearnSpace supports this by ensuring that student data is handled responsibly, access is controlled through role-based permissions, and whānau can request access to their child's information at any time.

Data Protection Measures

Encryption

All data is encrypted both in transit (using TLS 1.3) and at rest (using AES-256 encryption). This means that student information is protected whether it is being sent between devices or stored on our servers.

Access Controls

LearnSpace uses role-based access to ensure that only authorised kaiako and administrators can view student data. Kaiako can only see data for tamariki in their assigned classes, and support staff have restricted access by default.

Data Residency

For kura on Enterprise plans, we offer NZ-based data residency. This means student data can be stored within Aotearoa New Zealand, giving schools full confidence in where their data lives.

What Data We Collect

LearnSpace collects the following student information:

• First name and last initial (full surnames are not required)
• Year group and class assignment
• App usage and learning progress data
• Assessment results generated within our apps

We do not collect sensitive information such as health data, ethnicity, or home addresses.

Whānau Access

Parents and whānau can request access to their child's data through the school administrator. Schools can export individual student records from the admin dashboard at any time.

Data Retention and Deletion

When a student leaves your kura, their data can be deleted upon request. We retain anonymised, aggregated data for platform improvement but all personally identifiable information is removed within 30 days of a deletion request.

Further Information

For a full copy of our privacy impact assessment or to discuss specific privacy concerns, contact us at support@learnspace.nz.