Privacy policy

Last updated: 23 May 2026

Stub document. This page is a placeholder. The full Privacy Policy is being drafted with legal review. In the meantime, see the comprehensive Compliance Report for the same information in technical detail.

What we collect

LEP collects the minimum needed to provide the service: email address, display name, role (teacher or student), and the writing-process events captured inside the LEP editor (timing, paste metadata, paste content up to 2000 characters per event, caret offsets, and the student's final draft text).

What we don't

Every keystroke (only word counts and timing)
Screen, webcam, microphone, or any browser content outside the LEP editor
Cross-site tracking, advertising identifiers, or third-party analytics
Generative AI training data: no student text is sent to any AI service

Where it lives

All student and teacher data is stored in Sydney, Australia (Supabase ap-southeast-2 region; Vercel hosting pinned to syd1). No data is transferred outside Australia in normal operation.

How long we keep it

Document content and events: kept while your school uses LEP, and deleted on request. Account records: retained until you request deletion. Server access logs: 30 days.

Your rights

You can request access to, correction of, or deletion of your data at any time by emailing privacy@learningevidenceplatform.com. Requests are processed within 30 days.

Children

LEP is intended for use in schools. Parental/carer consent should be obtained through the school's existing process before student enrolment in LEP.

Contact

Privacy questions: privacy@learningevidenceplatform.com
Operator: [To be completed before launch]
Australian Privacy Commissioner: oaic.gov.au