1. Waitlist
When you join the waitlist, we save your email address, the time you joined and your consent to receive a launch notification. Joining does not create a membership or authorise any charge. We use this information to tell you when the free trial opens, not for unrelated marketing.
Waitlist information is stored through our current OpenAI Sites and Cloudflare hosting. To withdraw your consent or request removal, email support@gumnutlearning.com. Any launch email will include a way to opt out. We retain your signup until the launch notification has been sent or you request removal, unless retention is required by law. A daily hashed network identifier and request counter help prevent form abuse; older counters are removed when the form next receives a valid request.
2. About this policy
Gumnut Learning provides parent-managed learning plans and resources. This policy explains how we handle personal information through our website, learning tools and support enquiries. Contact our privacy contact at support@gumnutlearning.com.
We use the Australian Privacy Principles as a framework for our privacy practices. The Privacy Act 1988 (Cth), including the Australian Privacy Principles and Notifiable Data Breaches scheme, applies where Gumnut Learning is legally covered. This policy does not limit your rights under applicable Australian law.
3. What we collect and why
- Parent account information: email, account identifiers and sign-in information where available, to provide access and support.
- Learning records: year level, saved resources, lesson completion, program choices, progress notes, program changes and registration reminders, to organise your learning.
- Portfolio evidence: titles, subjects, notes, filenames and uploaded files, including photos and work samples that may identify a child or another person.
- Technical information: browser identifiers and hosting/security logs, which may include IP addresses, browser details, request times and errors, to operate and protect the website.
- Support: contact details and information you send us, to answer enquiries and resolve problems.
- Payments, when enabled: customer/payment references, payment status and authorisation records, to administer trials, payments and access. Card details are entered with Stripe, not in learning records.
We collect information from you, your use of the service and the authentication, hosting or payment providers involved. You can browse public information without an account. Withholding information necessary for a feature or request may prevent us from providing it.
4. Children and learning evidence
Gumnut is designed for parents and carers to manage learning. Only provide a child’s information when you are authorised to do so. Involve children in privacy decisions in a way appropriate to their understanding. Do not upload information about other children without appropriate authority.
Use initials or a nickname where practical. Do not upload identity documents, Medicare details, medical reports or unnecessary sensitive information. A diagnosis or health history is not needed to browse resources. Contact us before supplying sensitive information so we can consider whether it is needed and any applicable consent requirements.
Learning records are not automatically submitted to NESA or the NSW Department of Education. You decide what to print or share.
5. Browser storage and saved records
The current Sites-hosted service uses OpenAI Sites and Cloudflare infrastructure. Its learning tools can associate server-saved records with a signed-in identifier or a random browser identifier saved in local storage. A browser identifier is not a separate, password-protected family account.
People sharing the same browser profile may be able to access that browser’s records. Use your own device/profile and avoid sensitive information in a shared-device or demonstration session. Clearing browser storage may remove your link to records without deleting server copies. Contact us before clearing storage if you need assistance removing those records.
Hosting and sign-in services may use cookies or similar storage for functionality and security. Manage these through your browser; blocking them may affect sign-in and saved preferences. The current Gumnut application does not include an advertising pixel or marketing analytics integration.
6. Providers and overseas handling
We use providers to host and protect the website, store records, authenticate users, deliver support email and, when available, process payments. Current hosting uses OpenAI Sites and Cloudflare. Support email is configured with Google Workspace.
A separate member service using Vercel and Supabase, with Stripe checkout, is being prepared. Naming these providers does not mean new member registration or payments are already available. We will update this policy as the service is enabled.
Providers operate internationally. Information may be processed outside Australia, including in the United States. We do not promise Australia-only storage. Other locations depend on the provider and configuration; contact us before supplying information if location is important to you. Further information is available from OpenAI, Cloudflare, Google, Vercel, Supabase and Stripe.
We do not sell children’s learning records or use them for targeted advertising. We may disclose information to advisers or authorities where reasonably necessary and permitted or required by law. Applicable overseas-handling safeguards remain our responsibility; using the website is not consent to waive privacy rights.
7. Security, retention and deletion
We use the security features of our hosting and account services and restrict access according to the service’s capabilities. No online system is risk-free. Do not share passwords or send card details by email.
We retain information to provide saved records, support the service, resolve disputes and meet applicable record-keeping obligations. There is not currently one automatic deletion period for all records. We will review deletion requests, remove or de-identify information no longer needed where reasonably practicable, and explain any lawful reason for retention. Provider logs and backups may remain until their normal expiry.
An available portfolio delete control removes the active record and associated uploaded file. Cancelling a trial, signing out or clearing browser storage does not itself delete all information. Printed or downloaded copies remain under your control. If a breach occurs, we will assess it and notify affected people and the regulator where legally required.
8. Access, correction and complaints
Email support@gumnutlearning.com with the subject “Privacy request”. Explain whether you want access, correction, deletion or to make a complaint, and provide enough detail to locate the records. Do not send passwords or identity documents in your first email. We may need proportionate verification of your identity and authority before releasing or changing information.
We aim to respond within 30 days. If more time is needed, we will explain why. If a request cannot be fulfilled, we will explain the reason and next steps, subject to applicable law. You may also request this policy in an accessible format.
If a complaint remains unresolved, contact the Office of the Australian Information Commissioner on 1300 363 992. The OAIC can explain whether the matter falls within its jurisdiction.
9. Policy updates
We will update this page when services or information-handling practices change. Significant new collections or uses will be explained at the relevant point, and consent obtained where required. This policy is not blanket consent to future uses.
Read the Privacy Act 1988 and the Australian Privacy Principles for the Australian legal framework.