Last updated: 1 March 2026
About this policy
Jannic Pty Ltd (ABN 15 636 808 538) (trading as Teacharo) (we, us, our) operates the Teacharo platform and website at teacharo.com.au. We are committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you are in Victoria, the Privacy and Data Protection Act 2014 (Vic) may also apply.
By using our website or services, you agree to the collection and use of information as described in this policy.
When we collect personal information, we generally do so directly from you and provide this Privacy Policy as our main collection notice. If you choose not to provide certain information, we may not be able to create or maintain your account, provide particular features, or respond fully to your requests.
For School Plans, any required consent or authorisation for student data processing is obtained through the School’s Data Privacy Agreement with us, not through this Privacy Policy.
What information we collect
Information you provide directly
When you create an account, use our services, or contact us, you may provide:
- Your name and email address
- Your school or employer name
- Your role (such as teacher, head of department, or principal)
- Payment information (processed securely by our payment provider)
- Voice recordings when you use the voice input feature
- Content you create using the platform (lesson plans, communications, notes)
- Communications you send to us
Student and staff information (School Plans only)
Certain features that store personal information about students or school staff are only available on School Plans, where the school has signed a Data Privacy Agreement with us. These features are not available on Individual Plans.
On School Plans, authorised users may provide:
- Student names and identifiers
- Information about student learning needs, adjustments, and observations
- Parent and guardian contact details
- Staff information relevant to the school’s use of the Services
This information is only collected and stored when the school has formally authorised its use through a signed agreement. Individual Plan users cannot store student or staff personal information in Teacharo.
Some student information (for example, health information, disability information, and information about learning needs and adjustments) is sensitive information under the Privacy Act. We only collect and handle this information where authorised by the school and in accordance with our Data Privacy Agreement and applicable privacy and education laws.
Information collected automatically
When you visit our website or use our app, we automatically collect:
- Device information (device type, operating system, browser type)
- Log data (IP address, pages visited, time spent, referring pages)
- Usage data (features used, frequency of use, errors encountered)
- Cookies and similar technologies (see Cookies section below)
Information from third parties
We may receive information from:
- Your school, if they have a school-wide subscription
- Authentication providers, if you sign in with Google or Apple
- Analytics providers, in aggregated form
How we use your information
We use your information to:
Provide and improve our services
- Create and manage your account
- Process your voice inputs and generate content
- Remember your students and preferences to provide personalised assistance
- Process payments and manage subscriptions
- Provide customer support
- Fix bugs and improve our platform
Communicate with you
- Send service-related emails (account confirmation, password resets, important updates)
- Respond to your enquiries and support requests
- Send product updates and tips (you can opt out anytime)
- Send push notifications about tasks, reminders or updates (you can manage notification preferences in your app settings)
Ensure security and compliance
- Detect and prevent fraud or misuse
- Comply with legal obligations
- Enforce our terms of service
How we handle AI processing
Teacharo uses artificial intelligence to help you with tasks like lesson planning, report writing, and parent communications. Here is how we protect your information during AI processing:
De-identification before AI processing
For School Plan users with student data features enabled, personal information is de-identified before being processed by any artificial intelligence or machine learning model. This means the AI never sees who your students actually are. Names and identifiers are replaced with temporary tokens, and only restored after AI processing is complete.
Individual Plan users do not have access to features that store student personal information, so this de-identification process is not required for their use.
No AI training on your data
We do not use your information to train, fine-tune, or improve AI models. Your lesson plans, notes, and voice recordings are never used as training data.
Australian data processing
All AI processing occurs on servers in Australia (AWS Sydney region). Your data is never sent overseas for AI processing.
Human oversight
All AI-generated content is presented to you as a draft. Nothing is sent to students, parents, or anyone else without your explicit review and approval.
Voice recordings
When you use our voice input feature:
- Voice recordings are processed on our Australian servers to convert speech to text
- Voice recordings are automatically deleted within 24 hours of being transcribed
- Only the text transcript is retained (after de-identification)
- We do not share voice recordings with third parties
- Voice data is not used to train speech recognition or AI models
Where your data is stored
All your data is stored on servers located in Australia, specifically in the Amazon Web Services (AWS) Sydney region. We do not transfer your personal information outside Australia. We also do not otherwise disclose personal information to overseas recipients. If this changes in future, we will update this Privacy Policy and, where required, notify you and obtain any necessary consents.
Our infrastructure is designed to keep your data in Australia at all times, including during AI processing and backup operations.
When we share your information
We do not sell your personal information. We only share your information in the following circumstances:
Service providers
We use trusted service providers to help us operate our business. These providers only access your information to perform services for us and are contractually required to protect it. Our current providers include:
- Amazon Web Services (cloud hosting and AI processing, Sydney region)
- Stripe (payment processing)
- Email service providers (for transactional emails)
Schools with subscriptions
If your school has a Teacharo School Plan, designated school administrators may have access to aggregated usage data (such as number of active users). They do not have access to the content you create unless you choose to share it.
School Plans enable features that allow storage of student and staff personal information. These features are governed by a separate Data Privacy Agreement between Teacharo and the school, which sets out the school’s and our respective responsibilities for that information.
Legal requirements
We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business transfers
If Teacharo is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you of any such change. Any acquiring entity will be bound by obligations equivalent to those in this Privacy Policy in respect of your personal information. Where a School has an active School Plan and Data Privacy Agreement with us at the time of the transaction, the School may terminate its agreement and request deletion or return of student and staff personal information in accordance with the Data Privacy Agreement if the acquiring entity:
- (a) refuses to be bound by the existing Data Privacy Agreement terms;
- (b) operates primarily in an industry incompatible with education (such as advertising or data brokerage); or
- (c) is subject to laws that would require disclosure of student data in ways not permitted under the Data Privacy Agreement.
We will give the School reasonable notice of any proposed transfer and sufficient information to assess whether any of these grounds apply.
Cookies and tracking
We use cookies and similar technologies to:
- Keep you signed in
- Remember your preferences
- Understand how you use our website
- Improve our services
We use privacy-focused analytics that do not create cross-site profiles or track you across unrelated websites, and we do not use third-party advertising cookies.
Types of cookies we use
Essential cookies: Required for the website to function. You cannot opt out of these.
Analytics cookies: Help us understand how visitors use our website. We use privacy-focused analytics that do not track you across other websites.
Preference cookies: Remember your settings and choices.
You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website.
Your rights
Under Australian privacy law, you have the right to:
Access your information
You can request a copy of the personal information we hold about you. We will respond within 30 days.
Correct your information
If your information is inaccurate, incomplete, or out of date, you can ask us to correct it. You can also update most information directly in your account settings.
Delete your information
You can request that we delete your personal information. We will do so unless we are required to keep it for legal or business purposes (such as financial records). You can also delete your account at any time from your account settings.
Export your data
You can request a copy of your data in a commonly used format.
Withdraw consent
Where we process your information based on your consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.
Opt out of marketing
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email, or by updating your preferences in your account settings.
How long we keep your information
We keep your information for as long as it is reasonably needed for the purposes described in this Privacy Policy or as required by law, in line with the requirements of the Privacy Act 1988 (Cth) and APP 11.2.
For example:
- Voice recordings are automatically deleted within 24 hours of transcription.
- Lesson plans, notes, and other user content are generally retained for the life of your account and up to 30 days after you delete your account, so you can recover content if you change your mind, unless we need to keep it longer for the reasons listed below.
- Student and staff information on School Plans is retained and deleted in accordance with the relevant School’s Data Privacy Agreement with us and applicable education and privacy laws.
After you delete your account, we will delete or anonymise your information within 30 days, except where we need to retain it for:
- Legal, tax, or accounting requirements
- Fraud prevention
- Resolving disputes
- Enforcing our agreements
How we protect your information
We take the security of your information seriously and implement appropriate technical and organisational measures, including:
- Encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256)
- Multi-factor authentication for administrative access
- Regular security assessments and monitoring
- Role-based access controls
- Staff training on privacy and security
- Incident response procedures
While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
Data breaches
In the unlikely event that we suspect there may have been a data breach, we will promptly investigate and assess whether it is an “eligible data breach” under Part IIIC of the Privacy Act 1988 (Cth), in accordance with the Notifiable Data Breaches scheme. We will carry out this assessment as soon as practicable and, where required, within 30 days of becoming aware of reasonable grounds to suspect a breach. If we determine that an eligible data breach has occurred and is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required by law, including information about what happened, what information was involved, and steps you can take to protect yourself.
Children’s privacy
Teacharo is designed for use by teachers and school staff, not students. We do not knowingly collect personal information directly from children under 18. Where we handle personal information about children, we do so only on behalf of schools and school staff in connection with School Plans. In those cases, the school remains primarily responsible for notices, consents and other privacy obligations to students and parents under applicable education and privacy laws.
Individual Plans
Individual Plan users cannot store personal information about students in Teacharo. Features that would require storing student names, learning needs, or other identifiable information are not available on Individual Plans.
School Plans
On School Plans, teachers may enter information about their students into the platform. This is only permitted where the school has signed a Data Privacy Agreement with Teacharo, which establishes the school’s authority over this information and our obligations in handling it. The school is responsible for ensuring appropriate consents and authorisations are in place.
Changes to this policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or by posting a notice on our website before the changes take effect.
We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.
Contact us
If you have questions about this Privacy Policy or how we handle your personal information, please contact us:
Email: privacy@teacharo.com.au
Post: Jannic Pty Ltd (trading as Teacharo), [ADDRESS]
Complaints
If you believe we have breached your privacy, please contact us first so we can try to resolve your concern. We will respond within 30 days.
If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Website: www.oaic.gov.au
Phone: 1300 363 992