Privacy Policy

1. Introduction

Lumen8 Pty Ltd ("Lumen8", "we", "our", or "us") is committed to protecting the privacy of our users, especially students. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform.

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and other applicable privacy laws including those specific to the protection of children's data.

2. Information We Collect

2.1 Student Information

• Name and student ID
• Year level and class information
• Learning progress and assessment data
• Interaction data with the platform
• Username and encrypted password

2.2 Teacher Information

• Name and professional contact information
• School affiliation
• Classes and subjects taught
• Account credentials

2.3 Parent Information

• Name and contact information
• Relationship to student(s)
• Account credentials

3. How We Use Information

We use collected information to:

• Provide adaptive learning experiences tailored to each student
• Track and report on student progress and mastery
• Generate insights for teachers and parents
• Improve our educational algorithms and content
• Communicate with users about their accounts
• Ensure platform security and prevent fraud
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, rent, or trade student personal information. We may share information only:

• With teachers and parents for educational purposes
• With schools as part of our service agreement
• With service providers who assist in platform operations (under strict confidentiality)
• When required by law or to protect safety
• With consent from parents/guardians for students under 18

5. Data Security

We implement industry-standard security measures including:

• End-to-end encryption for data transmission
• Secure data storage with encryption at rest
• Regular security audits and penetration testing
• Access controls and authentication protocols
• Employee training on data protection
• Incident response procedures

6. Data Retention

We retain personal information only as long as necessary to provide our services and comply with legal obligations. Student progress data is retained throughout their enrolment and for a period afterward as required by educational regulations. Users may request deletion of their data subject to legal requirements.

7. Children's Privacy

We are committed to protecting the privacy of children under 18. We:

• Obtain verifiable consent from parents/schools before collecting student data
• Limit data collection to what is necessary for educational purposes
• Do not use student data for behavioural advertising
• Provide parents with access to their child's information
• Allow parents to request deletion of their child's data

8. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Opt-out of certain data uses
• Data portability where applicable
• Lodge a complaint with privacy authorities

9. Cookies and Tracking

We use essential cookies to maintain sessions and ensure platform functionality. We do not use tracking cookies for advertising purposes. Analytics cookies are used only to improve our educational services and are anonymised.

10. International Data Transfers

Data is primarily stored in Australia. If data is transferred internationally, we ensure appropriate safeguards are in place to protect your information in accordance with Australian privacy laws.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of material changes via email or platform notification. Continued use after changes constitutes acceptance of the updated policy.

12. Australian Privacy Principles

This policy addresses all Australian Privacy Principles including: open and transparent management, anonymity options where practical, collection of solicited information, dealing with unsolicited information, notification of collection, use and disclosure, data quality, data security, access and correction, and accountability for cross-border disclosure.