Privacy Policy

Effective date: 28 September 2026

1. About this Policy

1.1 This Privacy Policy explains how Limudo ("Limudo", "we", "us", "our") collects, holds, uses and discloses personal information, and the choices and rights you have. It applies to teachers, Schools, School Administrators, and the Students they teach on the platform.

1.2 We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs"). Where you use the Service from outside Australia, the privacy laws of your jurisdiction may give you additional rights; we honour those we are required to honour.

1.3 This Policy is written to be read. If anything in it is unclear, please contact us at admin@limudo.com.

2. What We Collect

2.1 Account information. Your name, email address, username, password (stored only as a secure hash), country and city.

2.2 Student information. The names and class details a teacher or School enters for their Students. Students do not hold independent accounts; they sign in under their teacher's setup.

2.3 Content. Games, texts, worksheets, images and other material you create or upload.

2.4 Messages. Direct and group messages sent on the platform.

2.5 Calls and recordings. Video calls conducted on the platform, and recordings where a teacher uses the recording feature.

2.6 Usage data. Records of activity on the Service: logins, pages used, games played, points, purchases, AI generations and similar events (who did what and when).

2.7 Technical data. IP addresses, browser type, device information, cookies and similar identifiers, and error logs, used to keep the Service running and secure.

2.8 Payment data. Payments are processed by our payment processor (currently Stripe). We receive and store confirmation and transaction records; we do not store your full card details.

3. How We Collect It

3.1 We collect information: (a) directly from you when you register, use the Service, or contact us; (b) automatically through your use of the Service (usage and technical data); and (c) from teachers and Schools, who enter information about their Students.

3.2 Where we are required by law to collect information and it is not provided, some or all of the Service may be unavailable to you.

3.3 Unsolicited information. If we receive personal information we did not ask for, we will, within a reasonable period, decide whether we could have collected it under this Policy and, if not, delete or de-identify it where lawful to do so.

4. Why We Collect, Use and Hold It

4.1 We collect, use and hold personal information to:

• (a) provide the Service: run classes, games, calls, messages, points, reports and accounts;
• (b) keep the platform secure and operating properly, including investigating reported or flagged misuse;
• (c) fix problems, prevent misuse, and improve the Service;
• (d) process payments and manage Subscriptions and purchases; and
• (e) send service communications (welcome, verification, account and billing notices).

4.2 Direct marketing. We do not send advertising or direct marketing without your consent, and you may opt out of any such communication at any time.

4.3 Sensitive information. We do not ask for, and do not knowingly collect, sensitive information (such as health information or religious affiliation beyond what is inherent in the educational content you choose to create). Please do not provide sensitive information except where the educational purpose genuinely requires it.

5. Who Can See It

5.1 Limudo. Limudo personnel access platform data only as needed to operate, secure and improve the Service - for example to provide support, fix problems, and investigate reported or flagged misuse. Such access is limited to what those purposes require and is logged.

5.2 Teachers see their own classroom: their Students, Content, messages, calls and reports.

5.3 School Administrators see the teachers and activity within their own School, where the teacher belongs to a School on the platform.

5.4 Service providers who help us run Limudo process limited data on our behalf: hosting (servers in Australia), email delivery, video calls (Daily.co), AI generation (Google), and payments (Stripe). Each provider receives only the information its function requires and is bound by its own privacy and security obligations.

5.5 No one else. We do not sell personal information, we do not share it with advertisers, and we do not show one teacher's data to another, except where a teacher or School explicitly turns on sharing.

5.6 Overseas disclosure. Some of our service providers (including Google, Daily.co and Stripe) process data outside Australia, including in the United States. Where we disclose personal information overseas, we take reasonable steps in the circumstances to ensure the recipient handles it in accordance with the APPs or substantially similar safeguards.

6. Children's Data

6.1 Students on the Service are children, and we treat their data with particular care.

6.2 Student accounts are created by teachers or Schools. The teacher or School is responsible for having the authority - from a parent or guardian, or through the School - to add the Student and their information, as set out in our Terms of Use.

6.3 We use Student data only to provide the educational service. We never advertise to Students and never sell their data.

6.4 Students' conduct and safety, on and off the platform, remain the responsibility of their teacher and School; Limudo does not monitor or supervise Student behaviour.

6.5 Parents and guardians with questions about a child's data should contact the child's teacher or School in the first instance, but may always contact us at admin@limudo.com.

7. Where Data Is Stored

7.1 Platform data is stored on servers located in Australia. Certain service providers (such as Google, Daily.co and Stripe) process data overseas as described in clause 5.6. Teachers and Students access their data from wherever they are.

8. How Long We Keep It

8.1 We keep account and platform data while the relevant account is active.

8.2 When an account closes, we delete or de-identify the data within a reasonable period, except: (a) information the law requires us to keep (for example, payment and transaction records); and (b) routine backups, which age out on their normal cycle.

9. Security

9.1 Passwords are stored as secure hashes, connections are encrypted in transit, and access to platform data is restricted to what each function requires.

9.2 No system is perfectly secure. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

10. Access, Correction, Deletion and Complaints

10.1 You can see and correct your account details in your settings. Teachers manage the Student details they enter.

10.2 You may request access to, correction of, or deletion of your personal information, or closure of your account, at any time by emailing admin@limudo.com. We will respond within a reasonable period and as required by law.

10.3 If you believe we have breached your privacy, please contact us first at admin@limudo.com and we will investigate and respond. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).

11. Changes to This Policy

11.1 If we change this Policy materially, we will give at least fourteen (14) days' notice by email or by notice on the Service before the change takes effect. The current version is always available on the Service.

12. Contact

Privacy questions, requests and complaints: admin@limudo.com