Last updated: 2026
This policy is provided in good faith but is not legal advice. Because SkillCount handles children's information, please have it reviewed by an Australian privacy lawyer — and check your obligations under the Privacy Act 1988 (Cth) and the forthcoming Children's Online Privacy Code — before relying on it commercially.
SkillCount ("we", "us", "our") provides an online tool for Australian students to practise for the NAPLAN assessment. We are the data controller for the personal information described here and handle it in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
From parents and teachers: name, email address, hashed password (we never store passwords in plain text), account role, subscription and billing status, and any messages you send us.
About students:the child's first name (or a display name you choose), year level, a username and PIN used to sign in, and practice activity — questions attempted, answers given, scores, time spent and progress over time.
Technical and usage data: basic log data such as IP address, browser type, pages visited and timestamps, used to keep the Service secure and reliable, plus aggregate analytics.
We practise data minimisation: we collect only what we need to run the Service. We do not ask children for an email address, phone number, home address or photo.
Student accounts are created and managed by a parent, guardian or teacher. By creating a student profile, that adult confirms they have authority to consent to the collection and use of the child's information as described in this policy. Students do not create their own accounts and cannot sign up independently.
We use children's information solely to deliver practice, generate progress insights for the responsible adult, and keep the Service safe and working. We never use it to serve advertising, and there are no chat, messaging or social features through which a child could be contacted.
To provide adaptive practice and mock exams; to produce progress reports and summaries for parents and teachers; to create and secure accounts; to process subscriptions and payments; to provide support and respond to enquiries; to monitor, maintain and improve the Service; and to meet our legal obligations.
We use AI in two limited ways. First, to help our team draftpractice questions — every AI-drafted question is reviewed and approved by a person before any child sees it. Second, to generate plain-English progress summaries for parents. These summaries are produced from anonymised performance data (scores and skill tags only); we do not send a child's name or identifying details to any third-party AI provider. Children do not interact with an AI chatbot anywhere in the Service.
We do not sell personal information. We share limited data with trusted providers who help us run the Service, under contractual confidentiality and security obligations:
Vercel — application hosting and delivery.
Neon — managed PostgreSQL database storage.
Paddle — subscription billing and payment processing (Paddle acts as merchant of record; we do not store your card details).
Brevo — transactional email (verification, welcome and account emails).
An AI/LLM provider — question drafting and anonymised progress summaries, as described in section 5.
Some of these providers may store or process data on servers located outside Australia. We take reasonable steps to ensure they handle information consistently with the APPs.
Data is stored securely and access is restricted to those who need it. Passwords and student PINs are hashed, sensitive configuration is encrypted, and connections are secured in transit. No system is perfectly secure, but we take reasonable technical and organisational measures to protect personal information from misuse, loss and unauthorised access.
We keep personal information for as long as an account is active and as needed to provide the Service. When you delete an account, we delete or de-identify the associated personal information, except where we are required to retain limited records (for example, billing records) to meet legal obligations. Practice activity that is no longer needed is destroyed or de-identified in line with our retention practices.
We use only essential cookies needed to keep you signed in and to keep the Service secure. We do not use advertising or cross-site tracking cookies.
You can access and update your information in account settings. A parent, guardian or teacher may request access to, correction of, or deletion of their account and their children's data at any time from Delete my account & data, or by contacting us. We will action verified requests promptly.
We may update this policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify account holders.
Privacy questions or complaints? Contact us at privacy@skillcount.app and we will respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.