Privacy Policy
Your family's data is protected by Australian law, Australian infrastructure, and our unwavering commitment to children's privacy.
Effective date: 1 March 2026
Introduction
SeeMe Learn (“we”, “us”, “our”) is an Australian company that builds AI-powered educational books for neurodiverse children and children with special needs. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
We understand that your family's data — particularly information about children — is deeply sensitive. We are committed to collecting the minimum data necessary, keeping it on Australian soil, and giving you full control over what we hold.
We never sell personal information. We never use children's data for advertising. Full stop.
Information We Collect
We collect the minimum data necessary to deliver personalised educational books. Here is what we collect and why:
Account Information
Your name, email address, and password (hashed) to create and manage your account.
Child Profiles
First name, learning level, age range, and pronouns. We deliberately do not collect surnames, addresses, or school details for children.
Photographs (with Consent)
Reference photos of a child, uploaded only after explicit parental consent. These are used solely to generate personalised book illustrations. EXIF metadata (GPS coordinates, device information, timestamps) is automatically stripped on upload.
Usage Data
Basic analytics such as pages visited and features used, to improve the service. We do not use third-party tracking scripts.
We collect the minimum data necessary. Child profiles never include surnames, addresses, or school details.
How We Use Your Information
We use the information we collect to:
- Generate personalised books— phonics readers, social stories, and emotion stories tailored to each child's learning level and interests.
- Manage your account— authentication, session management, and role-based access.
- Improve the service— aggregate usage patterns (never individual child data) to refine our AI models and user experience.
- Communicate with you— service notifications, policy updates, and support responses.
We never sell your data. We never share personal information with advertisers. We never use children's data for marketing.
Children’s Information
Children's data receives the highest level of protection in our system. SeeMe Learn is designed for use by parents, guardians, educators, and therapists on behalf of children — children do not create accounts themselves.
Parental Consent
Before any child photograph can be uploaded, the parent or guardian must provide explicit, informed consent through our consent wizard. Consent records are immutable — they cannot be edited or deleted, creating a full audit trail.
Minimal Data Collection
Child profiles contain only a first name, learning level, age range, and pronouns. No surnames, no school details, no location data.
Photo Usage
Reference photos are used exclusively to generate consistent character illustrations in educational books. Photos are encrypted at rest and served via time-limited pre-signed URLs (15-minute expiry) in production.
Consent is required before any photo upload. Consent records are immutable and create a permanent audit trail.
AI & Image Processing
We use artificial intelligence to generate book text and illustrations. Here is exactly how your data interacts with AI systems:
Text Generation
Story text is generated using Anthropic's Claude API. Only the child's first name, learning level, and selected topic are sent to the text model. No photos or biometric data are sent for text generation.
Image Generation
Illustrations are generated using Google Gemini or OpenAI as image providers. Reference photos are provided at inference time only — they are included in the API request to guide the illustration style, but are not stored by the AI provider and are never used to train the provider's models.
No Model Training
None of our AI providers use your data — including photographs — to train their foundation models. We have contractual and technical safeguards in place to enforce this.
Your child's photos are used at inference time only. They are never stored by AI providers and never used for model training.
Data Storage & Security
We take a defence-in-depth approach to protecting your data, with multiple layers of technical safeguards:
Australian Data Residency
All personal data and biometric data (photographs) are stored exclusively in Australian data centres (Sydney region). This includes our database (Supabase Sydney) and file storage (AWS S3 Sydney). Your child's data never leaves Australia.
Encryption at Rest
All data is encrypted at rest. API keys and sensitive credentials are additionally encrypted using AES-256-GCM before storage. Photographs are encrypted via the storage provider's server-side encryption.
Access Controls
In production, photos are served via pre-signed URLs that expire after 15 minutes. Role-based access control (RBAC) with granular permissions ensures only authorised users can access child data.
EXIF Metadata Stripping
All uploaded images are automatically stripped of EXIF metadata — including GPS coordinates, device information, and timestamps — before storage. A daily automated scan verifies no metadata persists.
Your child's photos never leave Australia. All data is encrypted at rest with AES-256-GCM encryption for sensitive credentials.
Your Rights Under the Australian Privacy Principles
Under the Australian Privacy Principles (APPs), you have the right to:
- Access your data(APP 12) — Request a copy of all personal information we hold about you and your child profiles.
- Correct your data(APP 13) — Request correction of any inaccurate, out-of-date, or incomplete personal information.
- Delete your data— Request deletion of your account and all associated data, including child profiles, photos, and generated books.
- Withdraw consent— Withdraw consent for photo usage at any time. Consent withdrawal is logged and auditable.
- Export your data— Request a portable copy of your data in a standard format.
- Complain— Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs.
To exercise any of these rights, contact us at privacy@seemelearn.com.au. We will respond within 30 days as required by the APPs.
Third-Party Services
We use a limited number of third-party services to deliver SeeMe Learn. Each has been evaluated for privacy compliance:
| Service | Purpose | Data Processed |
|---|---|---|
| Supabase (Sydney) | Database | Account data, child profiles, book data |
| Upstash Redis | Job queue & caching | Job metadata (no photos or PII) |
| Anthropic (Claude) | Text generation | First name, learning level, topic |
| Google Gemini | Image generation (primary) | Reference photos (inference only) |
| OpenAI | Image generation (fallback) | Reference photos (inference only) |
| AWS S3 (Sydney) | File storage | Photos, generated images, book assets |
We do not share personal information with any parties beyond those listed above, and only to the extent necessary to provide the service.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or other factors. When we make material changes:
- We will notify you via the email address associated with your account at least 14 days before the changes take effect.
- We will display a prominent notice within the application.
- The “Last Updated” date at the bottom of this page will be revised.
Your continued use of SeeMe Learn after the effective date of any changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights under the APPs, or want to raise a privacy concern, please contact us:
If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) (opens in new tab).
This policy was last updated on 1 March 2026.