NextGenAchievers App Privacy Policy
Last updated: 15 October 2026
1. Who we are
The NextGenAchievers app teaches kids money skills. It is run by Next Gen Achievers Pty Ltd (ACN 685 561 344, ABN 49 685 561 344), trading as NextGenAchievers ("we", "us"). We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy covers the app only. Our website has its own policy.
2. What we collect
A username created by the teacher; a placeholder email (not a real address); the shared class password; role, learning track and link to their teacher; progress (lessons completed, XP/points, skills, Vault jars and goals, streak); usage activity events linked to the username (for example, lessons opened or completed).
A username; a placeholder email (not a real address); the link to the parent's account; role and learning track; progress and usage activity events, as above.
A username; role and learning track; progress and usage activity events, as above. We ask for the year of birth once at sign-up to confirm the right age group and whether a parent needs to approve. We don't store it: we keep only whether parent approval was required and when the check happened.
Email address; the link between the parent and child accounts; guardian email addresses on consent requests.
Email address; password (stored as a hash); a generated username (not a name); seat limit, learning track and the shared class password; the classes and student seats the teacher creates. We do not collect teachers' names or school names.
| Who | What we collect |
|---|---|
| Students(school class seats) | A username created by the teacher; a placeholder email (not a real address); the shared class password; role, learning track and link to their teacher; progress (lessons completed, XP/points, skills, Vault jars and goals, streak); usage activity events linked to the username (for example, lessons opened or completed). |
| Students(parent accounts) | A username; a placeholder email (not a real address); the link to the parent's account; role and learning track; progress and usage activity events, as above. |
| Students(self sign-up) | A username; role and learning track; progress and usage activity events, as above. We ask for the year of birth once at sign-up to confirm the right age group and whether a parent needs to approve. We don't store it: we keep only whether parent approval was required and when the check happened. |
| Parents and guardians | Email address; the link between the parent and child accounts; guardian email addresses on consent requests. |
| Teachers | Email address; password (stored as a hash); a generated username (not a name); seat limit, learning track and the shared class password; the classes and student seats the teacher creates. We do not collect teachers' names or school names. |
We do not collect students' real names, dates of birth or home addresses, and we do not store birth years. We do not store IP addresses. IP addresses are used briefly, in memory only, to limit misuse (rate-limiting).
3. How we collect it
- From teachers, when they set up a class and create user IDs.
- From parents, when they create an account, link a child or respond to a consent request.
- From the app itself, as students complete lessons and activities.
4. Why we use it
We use personal information only to run NextGenAchievers:
- To create and secure accounts. We use a username and password to let you sign in and keep each account safe. The learning track (Explorer, Pathfinder or Maverick) sets the right lessons for each child.
- To save your learning. We store lesson progress, XP, medals and Vault activity so you can pick up where you left off.
- To run school classes. Teachers can see the usernames and XP in their own class only.
- To link parents and children. We record which parent is linked to which child so parents can give consent, manage their household, change a child's learning track, recover usernames and delete accounts.
- To send essential emails. These are parent approval and consent emails, welcome emails, teacher class confirmations, password and username recovery, and account-deleted notices. We don't send marketing emails.
- To understand how the app is used in school trials. We record simple activity, such as signing in, starting and finishing lessons, earning medals and opening Vault or Launchpad, together with the username, class, XP and streak. We use it to report on how classes use the app, for example school-hours versus home use. It doesn't include email addresses, real names or device details, and it stays in our own database.
We don't show ads, we don't use third-party analytics or tracking tools, and we don't sell or share personal information. Our service providers handle data only to run the app: Supabase stores it, Resend sends emails and Vercel hosts the app.
5. Who can see it
- Teachers can see their own class only: usernames, each user's lifetime XP and the class total.
- Parents can see their linked child's username, account status and learning track.
- Authorised NextGenAchievers staff can access stored data only to provide support and keep the service running (for example, resetting a password).
- Students cannot see other students. Any leaderboard shows usernames only.
- We do not share information with anyone else unless the law requires it.
6. Service providers and overseas hosting
We use trusted providers to run the app. Some of them store or process data outside Australia:
- Vercel (app hosting): app functions run in the United States (Washington DC).
- Supabase (database and sign-in): data is stored in Japan (Tokyo).
- Resend (email): sends emails to parents only, from mail.nextgenachievers.com. Email is processed in Japan (Tokyo).
We use no other third-party services in the app. That means no error monitoring, analytics, Google Fonts or third-party images.
We choose established providers that publish their security and privacy certifications, and we rely on these when using them. We remain responsible for how your information is handled.
7. Cookies and browser storage
The app uses a sign-in session cookie, plus a short-lived cookie during password recovery. It also stores a list of accounts used on the device, a progress cache and the session in your browser's local storage. We use no analytics, advertising or tracking tools.
8. Children and schools
The app is designed for children, so we collect as little as we can. In schools, the teacher creates usernames that should not include a child's real name. The school keeps any list that matches usernames to students. Outside school, a parent or guardian sets up and consents to their child's account. We build privacy into the app by design, in line with the OAIC's guidance for children's online privacy.
9. How long we keep it and how to delete it
We keep information while the account or class is active. Accounts inactive for 12 months are reviewed and deleted. Our database has no restorable backups, so deleted data cannot be recovered.
- Teachers can delete a single student or a whole class in the app. This removes their logins and progress.
- Parents can delete any of their linked child accounts in the app, one at a time.
- Parents can delete their own account, which also deletes all linked child accounts.
- For any other deletion, email us (see section 12).
10. Security
Data is sent over encrypted connections (HTTPS), class login passwords are stored encrypted, access is limited by account role, and only authorised staff can reach stored data. Password reset events record the user ID and role, never the password. If a data breach is likely to cause serious harm, we will notify affected people and the OAIC under the Notifiable Data Breaches scheme.
11. Access, correction and complaints
You can ask to see or correct the personal information we hold about you or your child. Email us, and we'll respond within 30 days. If you have a privacy complaint, email us first and we will reply within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.
12. Contact us
If you have any questions about this policy or your information, please contact our Privacy Officer at cath.drdw@nextgenachievers.com.
13. Changes to this policy
We will post updates here and change the date above. If we make a significant change, such as a new kind of data or a new use of children's information, we will email parents and teachers at the address on their account before it takes effect. Please keep your email address up to date so you don't miss these updates.