Privacy Policy

MyAcademia provides the software that academies run on. There are two situations, and it matters which one you are in:

• Your MyAcademia account, and academy owners’ use of the platform: we are responsible for this information and this policy applies to it.
• Your learning at a particular academy (your enrolments, progress, quiz answers, submissions and messages there): the academy’s owner decides how it is used, and their own privacy policy applies too. We hold and process that information for them, to run their academy, and we do not use it for anything else.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

• Account details: your name, email address and, if you add one, a profile photo. Your password is handled by our sign-in provider; we never see or store it.
• Academy details, for owners and staff: your academy’s name, address, branding, courses and settings, and your plan and billing history.
• Learning activity: enrolments, lesson progress, quiz answers, assignment submissions and files you upload, certificates, and messages you post in discussions.
• Payment information: payments are processed by Stripe. We keep a record of each payment (amount, date, what was bought) and the card brand and last four digits, never the full card number.
• Messages to us: anything you send to our support address.
• Technical information: your IP address, browser and device type, and request logs, used to keep the Service secure (for example, to stop repeated failed sign-ins) and to fix errors.

• to provide the Service: accounts, academies, courses, payments and certificates;
• to send emails you need, such as receipts, enrolment confirmations and account notices;
• to keep the Service secure, prevent fraud and abuse, and enforce our Terms;
• to answer your questions and give support;
• to understand how the Service is used, in aggregate, so we can improve it;
• to meet our legal obligations, such as keeping tax records.

We do not sell personal information, and we do not use it for advertising. We do not send marketing emails unless you have asked to receive them.

When an academy owner uses an AI feature, the material they provide (a course brief, uploaded notes, or the lesson being edited) is sent to our AI provider, Anthropic, to produce a draft. These features work on course material, not on learners’ records. Anthropic processes this content to provide the service to us and does not use it to train its models.

We share personal information only:

• with the academy you use: its owner and the staff they appoint can see your name, email address and your activity at their academy (not at other academies);
• with the service providers below, who process it for us under contract;
• where the law requires it, or to protect people’s safety or our legal rights.

Most of the information we hold is stored and processed in the United States, by the providers listed above. We choose providers with strong security practices and take reasonable steps to make sure they handle personal information consistently with the Australian Privacy Principles.

We use cookies that are needed to keep you signed in and to protect the Service. We do not use advertising or cross-site tracking cookies. Our page-view analytics do not use cookies, and web addresses are recorded without their query strings.

Information is encrypted in transit, access is limited to the people who need it, and each academy’s records are kept separate from every other academy’s. No system is perfectly secure; if a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as the law requires.

We keep information while your account is active. If you ask us to delete your account, we delete or de-identify your information within a reasonable time, except records we must keep by law, such as payment and tax records, which are kept for up to seven years.

You can update your name and profile photo in your account. You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account, by emailing support@myacademia.app. For information an academy holds about your learning there, we may pass your request to that academy’s owner, who is responsible for it.

If you have a concern about how we have handled your information, please contact us first so we can put it right. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

The Service is not directed at children. Learners under 18 should use it only with the involvement of a parent or guardian and where their academy allows it. If you believe a child has given us information without that involvement, contact us and we will deal with it.

We may update this policy as the Service changes. The date at the top shows the latest version; if a change is significant, we will tell account holders by email.

Privacy questions and requests: support@myacademia.app.