Draft for review. This policy hasn't been approved yet. Details in [square brackets] still need filling in.

Privacy policy

Last updated 24 September 2026

SchoolInsights is run by School Insights AU (ABN 71 101 552 419) ("we", "us"). It's a website of school reviews written by parents and alumni, at schoolinsights.com.au. We handle personal information in line with the Australian Privacy Principles. This policy explains what we collect, why, and your choices, in plain language.

What we collect

• Your account. Your email address, and the date you joined. If you sign in with Google, we also receive the name and email on your Google account. We don't use passwords.
• Full Access payments. Whether you bought Full Access, when, the amount and Stripe's reference numbers for the payment. Your card details go straight to Stripe; we never see or store them.
• Reviews you write. Your answers to our review questions, the school and years you're reviewing, how you'd like to be credited, your contact email, and proof of your connection to the school (such as a photo of a student ID or senior jersey). Verification proof is used only to check the review and is never published.
• Technical information. Like any website, our hosting provider records basic details of each visit (such as your IP address, browser and the page requested) to keep the site secure and working. We use small sign-in cookies to keep you signed in. We count visits with Umami (data stored in the European Union) and Cloudflare Web Analytics. Neither uses cookies or identifies you; they tell us things like which pages are popular, which website or search brought people here, and roughly which country visits come from. We don't use advertising cookies.

How we use it

• To create your account, sign you in and show you the reviews you have access to.
• To take your Full Access payment and switch on your access.
• To check and publish reviews, and to send reviewers any thank-you gift we've promised.
• To reply when you contact us, and to send updates you've asked for. You can unsubscribe at any time.
• To keep the site secure, including stopping people copying reviews in bulk.

We don't sell your personal information, and we don't share it with schools.

Who helps us run the site

We use a small number of trusted services. They only get the information they need to do their job:

• Supabase: our database and sign-in system (stored in Sydney, Australia).
• Cloudflare: hosts and protects the website (a global network, including the United States).
• Stripe: takes Full Access payments (Australia and the United States).
• Resend: sends sign-in code emails (servers in Japan).
• Google: only if you choose "Continue with Google".
• Umami: anonymous visitor statistics, no cookies (European Union).
• Zoho: runs our review and contact forms. Your answers are stored in Zoho's Australian data centre.

Because some of these services store information outside Australia, your information may be held in the United States, Japan or the European Union. We choose providers with strong security and privacy commitments.

Keeping it safe

Information is encrypted in transit, access is limited to the people who need it, and reviews are only shown to people entitled to see them. No system is perfectly secure. If we ever have a data breach likely to cause serious harm, we'll tell you and the regulator as the law requires.

How long we keep it

We keep your account while it's open. Payment records are kept for as long as tax law requires (usually five years). Verification proof for reviews is deleted once the review is checked [confirm the timeframe]. If you close your account we delete your account details, apart from anything we must keep by law.

Your choices

You can ask to see, correct or delete the personal information we hold about you, or ask us to remove a review you wrote. Email hello@schoolinsights.com.au and we'll respond within 30 days.

Complaints

If you're unhappy with how we've handled your information, please email us first so we can fix it. If you're still not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change this policy we'll update the date at the top, and tell account holders about any important changes by email.