Privacy Policy

1. Who is responsible for your data

Te Pātaka Pouako is operated by Kawana J Wallace, Aotearoa New Zealand, who is the data controller (the "agency" under the Privacy Act 2020) for personal information collected through this platform.

2. What we collect and why

• Email address and display name — collected exclusively to authenticate you when you sign in (including via Google) and to match you to a Kura / Syndicate team seat when a Kura admin has invited your school email. Legal basis: performing our contract with you. Your email is never sold, shared for marketing, or used for spam.
• Subscription details — plan, status and renewal date, so we can run your account. Legal basis: contract.
• Saved resources — only what you explicitly choose to save to your cloud account. Legal basis: contract.
• Basic technical data — IP address and browser information processed transiently by our hosting provider for security and fraud prevention. Legal basis: legitimate interests.

3. Text you enter into tools

No text submitted to any AI or LLM-powered tool (for example graders or feedback assistants) is stored, logged, or used for training. Unsaved work — including word lists, clues and generated puzzles — stays strictly in your browser and is not transmitted to our servers.

4. Saved cloud resources

When you choose "Save to Cloud Account", the resource is stored in a database that only your account can read. Saved resources remain private to you. If your subscription lapses, your resources are preserved and become accessible again as soon as you resubscribe. You can delete any saved resource at any time.

5. Who we share data with

• Paddle — our Merchant of Record, which handles the sale, subscription management, payments, tax compliance and invoicing. Paddle collects your payment details directly; we never see or store your card number.
• Hosting and database providers that run the platform on our behalf (Lovable Cloud).
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

Some providers store data outside New Zealand; we only use providers with comparable privacy safeguards.

6. Retention and security

Account and subscription data is kept while your account exists and for up to 12 months after it ends, then deleted or anonymised. We protect data with encryption in transit and at rest, access controls and row-level permissions so only you can read your saved work.

7. Your rights

Under the Privacy Act 2020 you can ask to access or correct your personal information, and you may ask us to delete your account and saved resources at any time. You can also complain to the Office of the Privacy Commissioner (privacy.org.nz).

8. Cookies

We use only essential cookies and browser storage needed to keep you signed in and remember your language preference. We do not use analytics or marketing cookies.

9. Contact

Questions about this policy can be sent through the contact details on your account page once signed in.