Privacy Policy

Tuplora ("we", "us", "our") operates tuplora.com.au and related services. This policy applies to personal information we collect from parents/guardians and the children whose profiles they create.

From parents/guardians: name, email address, password (hashed), Australian state, and marketing preferences. If you pay for a subscription, billing details are handled by our payment processor — we don't store full card numbers.

About your child: display name (which can be a nickname), year level, learning progress, attempts, scores, time spent, and any avatar you choose.

Technical: IP address, device and browser type, pages viewed, referring URLs, cookie identifiers, and basic analytics events. This helps us run the Service and detect abuse.

Directly from you when you sign up, create child profiles, contact us, or use the Service; and automatically through cookies, logs and analytics when you visit.

• To deliver the Service and personalise lessons to your child's level.
• To communicate with you about your account, updates and (with your consent) marketing.
• To monitor performance, debug issues and improve content.
• To detect, prevent and respond to fraud, abuse or security incidents.
• To comply with legal obligations.

Tuplora is designed to be used by children only under the supervision of a parent or guardian who holds the account. By creating a child profile, you confirm you have authority to consent on the child's behalf. We collect the minimum information needed to run the learning experience and do not knowingly collect personal information directly from children without parental consent. You can review, correct, or delete your child's information at any time from your parent dashboard or by contacting us.

We use essential cookies to keep you signed in and the Service working, and analytics cookies to understand how Tuplora is used. You can clear or block cookies in your browser; some features may not work properly without them.

We do not sell your personal information. We share it only with:

• Service providers who help us run Tuplora — including hosting, database, authentication, email, payment processing and analytics providers — under contracts that require them to protect your information.
• Authorities where required by law, court order, or to protect rights, safety and property.
• A successor if Tuplora is involved in a merger, acquisition or sale of assets; we will notify you of any change in ownership.

Some of our service providers store or process data outside Australia (for example, in the United States or Europe). Where we transfer personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

We use sensible safeguards including encryption in transit (HTTPS), row-level security on our database, access controls and least-privilege practices. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

We keep personal information while your account is active and for a reasonable period afterwards to meet legal, accounting and dispute-resolution requirements. You can ask us to delete your account and associated data; we'll do so unless we're legally required to keep something.

You can ask us to:

• Give you a copy of the personal information we hold about you or your child.
• Correct information that is inaccurate, out of date or incomplete.
• Delete information we no longer need to keep.
• Stop sending you marketing emails (you can also unsubscribe via the link in any email).

Email privacy@tuplora.com.au. We'll respond within a reasonable time, usually within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

The Service may contain links to other sites. We aren't responsible for their privacy practices — please read their policies separately.

We may update this policy from time to time. If changes are material, we'll give reasonable notice. The "Last updated" date at the top will always reflect the current version.

Privacy questions or requests: privacy@tuplora.com.au.