Privacy Policy

Growing With Gratitude HQ

Last updated: 6 October 2026

1. Who we are

Growing With Gratitude HQ ("GWG HQ", "the platform") is operated by Growing With Gratitude, ABN 71 577 578 107, based in Adelaide, South Australia.

You can contact us about anything in this policy at info@growingwithgratitude.com.au.

We are bound by the Australian Privacy Principles in the Privacy Act 1988 (Cth).

2. What this policy covers

This policy explains what personal information GWG HQ collects, why we collect it, who we share it with, where it is stored and how you can access, correct or delete it.

It covers the platform at hq.growingwithgratitude.com.au, including the public pages, teacher accounts, the Daily Check-In tools, the Parent Portal and the AI tools.

3. The information we collect

3.1 Teachers and school staff

When a teacher creates an account or joins through a school onboarding link, we collect:

• name and email address
• the school they belong to, where applicable
• a hashed password (we never store your password in readable form)
• a profile the teacher completes, including year level, role and curriculum

As a teacher uses the platform we also hold:

• resources they save, folders they create, and lesson plans and other material generated by the AI tools and saved to their library
• conversations with The Wizard, including messages that were refused or blocked, which we log so we can keep the assistant safe and working properly
• posts and replies in the Community
• class check-in setups, including the questions and response options a teacher configures
• basic technical records such as login times and session records

3.2 Students

The Daily Check-In feature collects information about students. The school decides what is entered. Typically this is:

• a student's first name or a nickname chosen by the school
• an avatar the student selects
• the student's answers to the wellbeing questions their teacher has set, such as how they are feeling that day
• the date and time of each response

We do not ask for, and schools should not enter, student surnames, dates of birth, contact details, addresses, health information, diagnoses or any government identifier.

Daily Check-In is operated by the school. The school decides which students take part, what is asked, and how the information is used. We hold it on the school's behalf.

3.3 Schools

For each school we hold the school name, a contact email address, the contract period, the number of seats and the staff attached to the account.

3.4 Parents and carers

The Parent Portal is reached through a link a school shares. Opening it does not require an account and we do not collect names or email addresses from parents through it. We record a count of how many times a school's portal has been viewed.

3.5 Visitors to the public site

Our public pages work without an account. We collect standard technical information that any website receives, such as the browser and approximate location indicated by your internet connection, and we use cookies as described in section 10.

4. Why we collect it

We collect and use personal information to:

• create and run teacher and school accounts, and control who can see what
• deliver the resources, tools and features a school has paid for
• let teachers save, organise and return to their work
• run the Daily Check-In on behalf of a school
• send account emails, such as password resets and school invitations
• keep the platform secure, prevent misuse and investigate problems
• keep the AI tools and the Community safe, which includes automated content checks and reviewing logged conversations
• meet our legal and record-keeping obligations

We do not sell personal information. We do not use student information for marketing. We do not use any information held in GWG HQ to train artificial intelligence models.

5. Who we share it with

We use a small number of service providers to run the platform. Each receives only what it needs.

We may also disclose personal information where the law requires it, or where it is necessary to prevent a serious threat to someone's life, health or safety.

We do not otherwise disclose personal information to anyone outside your school without your consent.

6. Artificial intelligence and your information

This section matters to schools, so we have set it out plainly.

Which tools use AI

The Wizard, Lesson Creator, Lesson Adapter, Assessment Generator, Storybook Generator, Term Snapshot, Weekly Planner and Smart Finder send text to OpenAI to generate their output.

Two other features send text to OpenAI for automated safety checks only, not to generate anything: Community posts and replies, and the text a teacher enters into the AI tools. The Parent Portal translation feature sends only published Growing With Gratitude content and the chosen language.

What is sent

Only what the teacher types or selects in that tool. Typically a year level, a lesson topic, a duration, class context the teacher chooses to describe, and the teacher's own prompt. Alongside it we send relevant Growing With Gratitude resource descriptions from our own catalogue. The output comes back to the teacher.

The Wizard also accepts a text or image attachment. If a teacher attaches one, its contents are sent to OpenAI.

Daily Check-In data is never sent automatically

The platform does not connect Daily Check-In to the AI tools. Student names, avatars, check-in responses and anything derived from them are never attached to an AI request by the system. Check-in history is shown to the teacher in their browser, and check-in reports are generated on our own servers, not by AI. We have verified this in the code.

But a teacher can send student information by typing it

The AI tools accept free text. If a teacher types a student's name or details into a prompt, or attaches a screenshot showing check-in data, that content is sent to OpenAI. The platform does not detect or remove it.

This is why our Terms of Use, and the guidance inside the tools, tell teachers to describe a class, not a child. Do not type a student's name. Do not type details of a child's health, family circumstances, behaviour incidents, disclosures or wellbeing concerns. Do not attach screenshots containing student information. The tools are built for planning, not for case notes.

Schools should include this in their own staff guidance.

Training and retention at OpenAI

OpenAI's published position is that data sent through its API is not used to train or improve its models unless the customer opts in. We have not opted in.

OpenAI retains API inputs and outputs for up to 30 days for abuse monitoring, after which they are deleted, unless the law requires otherwise.

The AI tools are not clinical tools

They do not diagnose, assess or treat. Output is a starting point for a qualified educator, not professional advice. Always apply your own professional judgement, and follow your school's processes for any wellbeing or child safety concern.

We log AI conversations

Including ones the safety systems block, so we can keep the tools working safely. Those logs are accessible to us only.

7. Where your information is stored

GWG HQ is hosted with Replit in the United States, and several of our other providers also operate in the United States. This means your information, including information about students, is stored and processed outside Australia.

We take reasonable steps to ensure our providers handle personal information consistently with the Australian Privacy Principles, but by using the platform you acknowledge that this information is held overseas and that overseas privacy laws differ from Australian law.

If your school requires Australian data residency, contact us before signing up so we can tell you honestly whether we can meet that requirement.

8. Keeping it secure

We use encrypted connections, hashed passwords, access controls tied to your school and account, and server-side checks on every request for a protected resource.

No system is perfectly secure. If a data breach occurs that is likely to cause serious harm, we will notify affected schools and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

9. How long we keep it, and deleting it

• Teacher accounts and saved work: kept while the account is active, and for 12 months after a school's access ends, so a school returning the following year does not lose its planning. After that we delete it.
• Daily Check-In student responses: kept while the school's account is active, and deleted 12 months after a school's access ends. A school can ask us to delete its student check-in data at any time and we will do so within 30 days.
• AI conversation logs: kept for 12 months.
• Parent Portal view counts: these are totals only and contain no personal information.
• Billing records: kept for seven years, as Australian tax law requires.

A school or teacher can ask us to delete their information by emailing info@growingwithgratitude.com.au. We will confirm when it is done. Some records may remain in encrypted backups for a short period before they are overwritten.

10. Cookies

We use a small number of cookies, and no advertising or cross-site tracking cookies.

• A session cookie that keeps you signed in. Without it you cannot use the platform.
• Local browser storage that remembers preferences such as your chosen filters.

11. Accessing and correcting your information

You can see and change most of your own information in your profile. For anything else, email info@growingwithgratitude.com.au and we will respond within 30 days.

A school can request a copy of, or ask us to correct, the information we hold on its behalf, including its students' check-in data.

If you are a parent or carer and want to know what your child's school has recorded in GWG HQ, please ask the school first. The school controls that information and is best placed to answer.

12. Making a complaint

If you think we have mishandled your personal information, email info@growingwithgratitude.com.au with the details. We will acknowledge within five business days and give you a written response within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

13. Changes to this policy

We will post any changes on this page and update the date at the top. If a change materially affects how we handle student information, we will email school contacts before it takes effect.

14. Contact

Growing With Gratitude ABN 71 577 578 107 info@growingwithgratitude.com.au Adelaide, South Australia