Legal
Last updated: 3 April 2026
Numly ("we", "our", "us") is an Australian mathematics education platform operated in Australia. We are committed to protecting the privacy of all users, including students, parents, teachers, and school administrators. This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using Numly, you consent to the collection and use of your information as described in this policy. If you do not agree, please do not use the platform.
We collect only the personal information reasonably necessary to provide our educational services. The types of information we collect depend on your role on the platform.
| Category | Data Collected | Purpose |
|---|---|---|
| Account information | Full name, email address, role (student/teacher/admin), year level | Create and manage your account, assign appropriate curriculum content |
| School enrolment | School name, school code, class memberships | Link students to their school and teacher, manage school licence allocations |
| Learning progress | Question responses, mastery scores, time on task, module completion status, key skill results | Track learning progress, provide personalised feedback, generate reports for teachers |
| Billing information | Billing name, email, subscription plan, payment history | Process payments and manage subscriptions. Payment card details are collected and processed directly by Stripe — Numly does not receive, store, or have access to card numbers |
| Technical data | IP address, browser type, device type, error logs | Maintain platform security, diagnose errors, prevent abuse |
We use personal information for the following purposes:
We do not use personal information for marketing purposes without explicit consent. We do not sell personal information to third parties. We do not use student learning data for advertising or profiling.
We share personal information with the following third-party service providers, solely for the purposes described. Each provider is bound by their own privacy policy and data processing agreements.
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Supabase | Database hosting, user authentication | All account and learning data | United States |
| Stripe | Payment processing | Billing name, email, payment details (collected directly by Stripe) | United States |
| Resend | Transactional email delivery | Email address, email content | United States |
| Sentry | Error monitoring and diagnostics | User ID, role, module ID, error details, IP address | European Union (Germany) |
| Netlify | Website hosting and serverless functions | IP address, request data | United States |
We do not share personal information with any other third parties unless required by law or with your explicit consent.
In accordance with APP 8, we disclose that personal information is stored and processed on servers located outside Australia, primarily in the United States and the European Union, through the third-party providers listed in Section 3.
We take reasonable steps to ensure that overseas recipients handle personal information in accordance with the Australian Privacy Principles. Each provider maintains industry-standard security certifications (SOC 2 Type II, ISO 27001, or equivalent) and has entered into data processing agreements that require them to protect personal information to a standard comparable to the APPs.
Numly is designed for use by students from Year 3 (typically aged 8) through Year 12. We recognise that many of our users are children under 16 and take additional care with their personal information.
School accounts (under 13)
For students under 13, accounts are created and managed by a teacher or school administrator through a school licence. The school acts as the authorising entity and is responsible for obtaining any necessary parental or guardian consent before enrolling students on the platform. Student accounts created through a school do not require an individual email address — the teacher manages access via school codes.
Individual accounts (under 16)
For individual (non-school) accounts, we require that a parent or guardian creates and manages the account on behalf of any student under 16. By creating an account for a child, the parent or guardian consents to the collection and use of the child's information as described in this policy.
We collect only the minimum information necessary for educational purposes. We do not collect sensitive information from children. We do not use children's data for marketing, profiling, or advertising. Parents and guardians may request access to, correction of, or deletion of their child's data at any time (see Sections 7 and 8).
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure (APP 11). Our security measures include:
No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.
Under APPs 12 and 13, you have the right to:
To request access to or correction of your personal information, contact us at info@numly.com.au. We will respond to your request within 30 days.
Teachers and school administrators can view and update student information within their school account at any time through the teacher dashboard. Students and parents can update account details (name, email) through the student dashboard settings.
You may request deletion of your personal information at any time. Upon receiving a verified deletion request, we will:
To request deletion, submit a request via our Data Deletion Request Form or email info@numly.com.au with the subject line "Data Deletion Request".
We may retain de-identified or aggregated data (which cannot be used to identify you) for the purpose of improving our platform. We may also retain information where required by law or to resolve disputes.
We retain personal information only for as long as reasonably necessary for the purposes described in this policy:
| Data Type | Retention Period |
|---|---|
| Active accounts | Retained for the duration of the account's active use |
| Inactive accounts | Deleted after 24 months of inactivity. A notification email is sent 30 days before deletion |
| Learning progress data | Retained for the duration of the account. Deleted when the account is deleted |
| Billing records | Retained for 7 years after the last transaction, as required by Australian tax law |
| Error logs (Sentry) | Automatically deleted after 90 days |
| School enrolment records | Retained for the duration of the school's active licence. Deleted within 90 days of licence expiry |
Numly uses browser local storage (not cookies) to save learning progress on the student's device. This data remains on the user's device and is not transmitted to our servers unless the user is logged in and progress is synced to their account.
Our third-party providers (Supabase, Stripe) may use cookies for authentication and payment processing. These are strictly functional cookies necessary for the platform to operate and are not used for tracking or advertising.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. If we make material changes, we will notify users via email or a prominent notice on the platform. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Continued use of Numly after changes are posted constitutes acceptance of the updated policy.
If you believe we have breached the Australian Privacy Principles or wish to make a complaint about how we handle your personal information, please contact us at info@numly.com.au. We will acknowledge your complaint within 7 days and provide a response within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.
For any questions, concerns, or requests regarding this Privacy Policy or your personal information:
Numly Privacy Officer
Email: info@numly.com.au
© 2026 Numly. All rights reserved.