Privacy Policy

1. Overview

This Privacy Policy explains how DCI Australia Pty Ltd (ACN 109 056 911, ABN 86 876 473 850), trading as TeachSmarts, handles personal information through PostWatch. We aim to handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Contact us at andrew@teachsmarts.com.

2. Information We Collect

We may collect account details, teacher names and email addresses, school or classroom details, student names and school email addresses, student answers, session content (the YouTube video link, questions and answers), how far each student watched, playback and focus events, usage events, device and browser information, authentication metadata, support messages, and billing-related status. Payment card details are handled by our payment provider and are not stored by PostWatch.

3. Google Data

When you sign in with Google we receive only your basic sign-in details (name and email). PostWatch asks for further Google access only when you choose a feature that needs it, and only at that moment. Google Sheets exports use the drive.file permission, which limits PostWatch to files it creates. Google Classroom features use permissions to list your classes, post an assignment, read the class roster (names and emails, to match students to their grades) and set grades on assignments PostWatch posted. These tokens are used for that one request and are not stored. We do not sell Google user data. PostWatch uses YouTube API Services to look up the title, length and embedding status of videos you choose, and plays videos with the YouTube embedded player. By using PostWatch you agree to be bound by the YouTube Terms of Service. Google's use of information is described in the Google Privacy Policy. YouTube may collect data when a video plays, subject to that policy.

4. How We Collect Information

We collect information directly from users, from teachers who create student activities, from student submissions, from the YouTube Data API for videos you choose, from Firebase authentication and hosting services, from Stripe billing services, and from automatic logs used for security, reliability, and abuse prevention.

5. How We Use Information

We use personal information to provide PostWatch, authenticate users, create and manage sessions, record student attempts and viewing progress, show results to teachers, enforce plan limits, process payments, provide support, improve reliability, prevent misuse, and comply with legal obligations.

6. Disclosure

We may disclose information to service providers that help operate PostWatch, including cloud hosting, database, authentication, YouTube, payment, email (Resend), monitoring, and support providers. We may also disclose information where required by law, to protect users or the service, or with your direction. We do not sell personal information.

7. Overseas Processing

Some providers may store or process information outside Australia. Where this occurs, we take reasonable steps to use reputable providers and protect information in a way that is consistent with this Privacy Policy and applicable privacy obligations.

8. Student Privacy

Teachers and schools are responsible for ensuring they have authority to provide student information to PostWatch and to invite students to participate. Students should use PostWatch under teacher, school, parent, or guardian direction where required.

9. Security and Retention

We use reasonable technical and organisational safeguards to protect personal information, including authentication, access controls, rate limits, and restricted administrative access. No online service can be guaranteed completely secure. We retain information for as long as needed to provide the service, meet legal obligations, resolve disputes, maintain records, and protect the service, then delete or de-identify it where reasonably practicable. When an account or session is deleted, we keep for up to 30 days only an anonymous record (a one-way scrambled form of the email address and the dates sessions were created) so that plan limits cannot be avoided by deleting and starting again. It contains no names or content.

10. Access, Correction, and Deletion

You may request access to or correction of personal information we hold about you. Teachers or schools may also request deletion of student information where appropriate. Contact andrew@teachsmarts.com and we will respond within a reasonable time.

11. Complaints and Data Breaches

If you have a privacy concern, contact us first at andrew@teachsmarts.com. We will investigate and respond within a reasonable time. If a data breach is likely to result in serious harm, we will take steps required by the Notifiable Data Breaches scheme. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

12. Changes

We may update this Privacy Policy as PostWatch changes or legal requirements change. The latest version will be available in the app.