Last updated: placeholder draft
Privacy policy
Plain-English version. The technical detail lives on our security page.
1. Who we are
Kookabytes is operated by Mindset Cyber Pty Ltd, an Australian company. Our registered address and ABN will appear on every tax invoice we issue.
If you have a privacy question, write to privacy@mindsetcyber.com.au and we will respond within ten business days.
2. What we collect
From students: a first name (or chosen nickname), a class identifier, and gameplay progress. We do not collect emails, surnames, dates of birth, addresses, photos, or audio from students.
From staff: name, work email, role, the school they belong to, and standard authentication metadata (last sign-in, IP for the auth event).
From visitors to this website: the same logs your browser sends to any website, plus any data you give us in the contact or trial form.
3. Where the data lives
All school and student data is Sydney-hosted in Australia.
Backups stay in the Sydney region. We do not transfer school or student data outside Australia.
4. Sub-processors
Sydney-hosted managed database + auth (AU-resident). Card payments via a PCI-DSS-compliant provider (staff only). Transactional email via an AU-resident provider (staff only). Global CDN for static assets only — no personal data routed through it.
Our current named sub-processor list is available on request and on the security page; we notify customers of any change.
5. How long we keep it
Active student progress is retained for the duration of your subscription plus 60 days for export.
Staff accounts are retained while you have an active subscription. After cancellation we keep dashboard access read-only for 60 days, then delete personal data and retain only the records needed for tax and audit purposes.
6. Your rights
You can request access to, correction of, or deletion of personal information we hold about you or your students. Email privacy@mindsetcyber.com.au and we will action verified requests within thirty days.
You can also export progress data yourself from the teacher dashboard at any time.
7. How to lodge a complaint
Write to us first at privacy@mindsetcyber.com.au and we will work with you in good faith.
If you are not satisfied, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
8. Updates to this policy
This is a placeholder draft. The final version will be reviewed by Australian privacy counsel before launch and will replace this page in full.
We will email all current customers and post a notice on this site whenever the policy changes materially.