Privacy Policy

1. Introduction

BeyondWalls ("we," "our," or "us") is committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered homeschool learning platform.

We take the privacy of children's educational data very seriously and comply with applicable privacy laws, including the Australian Privacy Act 1988.

2. Information We Collect

2.1 Personal Information

• Parent/Guardian account information (name, email address)
• Child profile information (name, educational stage, profile photo - optional)
• Authentication credentials (encrypted passwords)

2.2 Educational Data

• Learning activity logs and descriptions
• NESA curriculum outcomes tracking
• Educational goals and achievements
• Student progress reports
• Evidence photos uploaded by users
• AI-generated educational content and suggestions

2.3 Location Data (Mobile App Only)

• Precise location data (when device session tracking is enabled)
• Used for safety monitoring and parental oversight
• Location address and coordinates linked to device sessions
• Can be disabled at any time in mobile app settings

2.4 Device and Identifiers

• Push notification tokens (for mobile notifications)
• Device session IDs (for safety monitoring)
• User account IDs (internal identifiers)

2.5 Usage Data

• Platform usage patterns and feature interactions
• Device information and browser type
• Log files and analytics data

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain the Platform's functionality
• To generate AI-powered learning activity suggestions and outcome tagging
• To create educational reports and track student progress
• To improve and personalize your experience on the Platform
• To provide safety monitoring through location tracking (mobile app only)
• To send push notifications about activities and achievements (mobile app only)
• To communicate with you about your account and Platform updates
• To ensure compliance with educational standards (NESA)
• To detect, prevent, and address technical issues

4. AI Processing and Data Usage

4.1 AI Services

We use third-party AI services (AWS Bedrock with Claude models) to provide intelligent features such as:

• Auto-tagging of Learning outcomes
• Generating learning activity suggestions
• Enhancing activity descriptions
• Analyzing uploaded photos for educational context

4.2 Data Processing

When using AI features, your educational content may be processed by our AI service providers. We ensure:

• Data is processed securely and encrypted in transit
• AI providers do not store or train on your personal data
• Processing is limited to providing the requested service
• No personally identifiable information is shared unnecessarily

5. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Data is primarily stored in Australia-hosted servers
• Encryption of data in transit using HTTPS/TLS protocols
• Secure authentication systems with encrypted passwords
• Regular security audits and updates
• Limited employee access to personal data

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

6.1 Service Providers

We may share data with trusted third-party service providers who assist in operating the Platform (e.g., cloud hosting, AI services), bound by confidentiality agreements.

6.2 Legal Requirements

We may disclose information if required by law or in response to valid requests by public authorities.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.

7. Children's Privacy (COPPA Compliance)

7.1 How We Protect Children

BeyondWalls is designed exclusively for parents and guardians (18 years or older) to manage their children's homeschool education. The platform is NOT intended for direct use by children under 13 without complete parental control and supervision.

7.2 Parental Control and Consent

• Account Creation: Only parents/guardians aged 18+ can create accounts
• Verifiable Consent: By creating a child profile, you (the parent/guardian) provide consent for collection of your child's educational data
• Full Control: Parents have complete control over all child profile data, including viewing, editing, and deleting
• No Direct Child Access: Children cannot create accounts, sign in, or modify data without parent/guardian supervision

7.3 What Information We Collect About Children

With parental consent, we collect:

• Child's first name (or pseudonym - you choose)
• Educational stage/year level
• Profile photo or emoticon avatar (optional)
• Learning activity records and educational progress
• Photos of schoolwork (uploaded by parent)

We do NOT collect:

• Child's surname (not required)
• Child's date of birth (not required)
• Location data or geolocation
• Social media profiles
• Device contacts or phone numbers

7.4 How We Use Children's Information

Children's information is used solely for:

• Tracking educational progress and curriculum outcomes (NESA)
• Generating progress reports for parents
• Providing AI-powered learning activity suggestions
• Displaying achievements and rewards within the parent-controlled account

We NEVER:

• Display advertising to children
• Market products or services to children
• Sell or share children's data with third parties for marketing
• Allow public profiles or social features for children
• Enable messaging between children

7.5 Parental Rights Under COPPA

As a parent/guardian, you have the right to:

• Review: Access all information collected about your child
• Refuse Further Collection: Disable AI features or stop adding new data at any time
• Delete: Request deletion of your child's information (see Section 8.3 below)
• No Conditions: Your child's participation in educational activities is not conditioned on sharing more information than necessary

To exercise these rights, contact us at privacy@beyondwalls.app or through your account settings.

8. Your Rights and Choices

8.1 Access Your Data

You can access and export your data at any time:

• View all learning activities and progress reports in your dashboard
• Export PDF reports containing activity history and outcomes
• Request a complete data export by emailing privacy@beyondwalls.app

8.2 Correct Your Data

You can edit your information directly in the app:

• Update parent account details in Settings → Profile
• Edit child profiles, names, and profile photos
• Modify or delete individual learning activities
• Update tagged outcomes and activity descriptions

8.3 Delete Your Data (Account Deletion)

You can permanently delete your account and all associated data at any time. This is irreversible.

What Gets Deleted:

• Your parent account and login credentials
• All child profiles and educational data
• All learning activities, photos, and reports
• All scheduled activities and goals
• All reward progress and achievements

What May Be Retained:

• Billing records (required by law for 7 years for tax purposes)
• Anonymous usage statistics (no personally identifiable information)
• Backups (purged within 90 days of deletion request)

8.4 Data Portability

You can export your data in standard formats:

• PDF reports (generated in-app)
• CSV/JSON data export (request via privacy@beyondwalls.app)
• Photo downloads (access through activity history)

8.5 Control AI Features

You can control how AI is used:

• Disable AI photo analysis in Settings
• Choose not to use AI outcome suggestions (manually tag instead)
• Opt out of AI-generated activity suggestions

8.6 Communication Preferences

Manage email preferences:

• Unsubscribe from newsletters and tips (link in emails)
• Essential service emails (password resets, billing) cannot be disabled while account is active

9. Cookies and Tracking Technologies

We use essential cookies and similar technologies to maintain your session and provide Platform functionality. We do not use advertising or tracking cookies.

You can control cookies through your browser settings, but disabling essential cookies may affect Platform functionality.

10. International Data Transfers

Your data is primarily stored and processed in Australia. If data is transferred to other countries (e.g., for AI processing), we ensure appropriate safeguards are in place to protect your information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on the Platform. Your continued use of the Platform after changes indicates acceptance of the updated policy.

12. Data Safety Summary (For App Stores)

This section summarises our data practices for app store transparency requirements.

Data Collection Practices:

Data Usage:

• App Functionality: Tracking educational progress, generating reports, safety monitoring (location), push notifications
• Product Personalization: Customizing child dashboards, displaying personalized greetings and achievements
• Analytics: Improving app features and user experience (aggregated, non-identifiable data only)
• Communication: Account updates and support

Data Linking:

All data we collect is linked to your user identity for app functionality. This means:

• Names, emails, photos are stored with your account
• Location data is tied to specific child profiles (safety monitoring)
• Device IDs linked to accounts for push notifications
• Usage data tracked per account to personalize experience

✓ We do NOT use any data for cross-app tracking, advertising, or data brokerage.

Data Sharing:

• Service Providers: AWS (hosting), Stripe (payments) - bound by confidentiality
• No Third-Party Marketing: We do NOT share data for advertising or marketing purposes
• No Data Selling: We do NOT sell user data to anyone

Security Measures:

• Data encrypted in transit (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Regular security audits
• Limited employee access to data

13. Your Data Rights

You have the right to access, correct, delete, and control your personal information. You can exercise these rights through your account settings or by contacting us.

14. Contact Us