Skip to content
LearnSpaceSchools

Privacy Policy

Last updated: July 2026

LearnSpace NZ ("we", "us", "our") is committed to protecting the privacy of all users — especially tamariki. This policy explains how we collect, use, store, and protect personal information in compliance with the New Zealand Privacy Act 2020.

1. Information We Collect

Account Information

  • Name, email address, and role (teacher, parent, school administrator)
  • School name and region (for school accounts) — these school identity fields, along with related MoE directory details (including publicly listed school contacts), are already published by the Ministry of Education / Education Counts schools directory

Children's Information

  • First name and year level (provided by a parent or teacher)
  • Learning activity and progress data generated within LearnSpace apps

Technical Information

  • Device type, browser, and operating system
  • Anonymised usage analytics via Plausible (no cookies, no personal identifiers)
  • First-party app usage metrics for administrators: which LearnSpace apps adults open, approximate time in app, and associated school — collected so we can support schools and improve the product. Children's sessions are recorded anonymously (no child identity).

2. How We Use Your Information

We use personal information to:

  • Provide and improve the LearnSpace platform
  • Provide AI-assisted feedback on student work
  • Communicate account and service updates
  • Respond to support requests
  • Understand adult and school usage of LearnSpace apps (opens and time-in-app) for product and customer success

We never sell personal information to third parties. We do not serve advertising or use data for ad targeting.

3. Children's Privacy

LearnSpace is designed for tamariki aged 5–13. We take additional care:

  • Children cannot create accounts themselves — parents set a portal password for kids access at home
  • We collect the minimum data required for learning progress
  • Children's data is never shared with third parties for marketing
  • Parents and teachers can request deletion of a child's data at any time

4. Data Storage and Security

  • Account, school, and roster data is stored with Supabase on servers in Sydney, Australia (closest region to NZ), with NZ data residency available for Enterprise school plans
  • Classroom apps (e.g. MyFeedback Pro, PlanSpaceNZ) run on LearnSpace subdomains and store only what each app needs; identity remains tied to the shared LearnSpace account system
  • Data is encrypted at rest (AES-256) and in transit (TLS 1.3)
  • We perform daily encrypted backups with 30-day retention
  • Access to production data is restricted to authorised personnel with MFA

A plain-language summary for schools is at /data.

5. AI Features

Some LearnSpace apps use AI to deliver the feature you request — for example writing feedback in MyFeedback Pro, activity suggestions in PlanSpaceNZ, or word help in Word Wand.

  • We do not use your school or student content to train our own foundation models
  • We use AI providers and configurations that do not train on API / customer content
  • Content is processed to provide the requested feature only — not for advertising or unrelated model training
  • Children's learning data is never sold or used for ad targeting

6. Data Retention

  • Active accounts: data retained while the account is active
  • Cancelled accounts: data retained for 30 days, then permanently deleted
  • You may request earlier deletion by contacting us

7. Your Rights

Under the NZ Privacy Act 2020, you have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your data
  • Complain to the Office of the Privacy Commissioner if you believe we have breached your privacy

8. Third-Party Services

We use the following services to operate LearnSpace:

  • Supabase — database and authentication (Sydney region)
  • Stripe — payment processing (card details handled by Stripe)
  • Plausible Analytics — privacy-friendly, cookie-free analytics
  • Resend — transactional email delivery
  • AI providers — used only by apps that need AI features (e.g. feedback, planning suggestions, word scanning), under terms that do not use customer content for model training

None of these services receive children's learning data for their own advertising or model-training purposes.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email to account holders.

10. Contact Us

If you have questions about this policy or wish to exercise your privacy rights:

  • Email: support [at] learnspace.nz
  • Post: LearnSpace NZ, PO Box 12345, Wellington 6011, New Zealand

You may also contact the Office of the Privacy Commissioner if you have concerns about how we handle your data.