Privacy Policy

Last updated 7 October 2026.

Draft — not legal advice. Review with a solicitor before relying on this, particularly for compliance with the Australian Privacy Principles and any state education-department data policies. See LAUNCH_PLAN.md Stage 10.

The personal information we collect

We collect as little about you as we can. The personal information we ask for is:

• Your email address — required to create an account.
• A name or alias — optional. You don't have to use your real name; an alias or initials are fine.

We do not collect any information about students. Student data stays on your own computer and is never sent to us.

What we use it for

Your email address is used to:

• sign you in (it is your username, and where we send sign-in links and codes);
• send your licence key and let you recover it;
• send notices about your account, trial and subscription (for example receipts, renewals and password changes);
• reply to bug reports, feedback and enquiries you send us; and
• make sure each person gets only one free trial.

Your name or alias is used only to address you in emails and on your account page, and to help us recognise you when you contact support. If you leave it blank, we simply use your email address.

We do not sell your information, and we do not share it with anyone for advertising. We use it only to run your account and the service described above.

The desktop app (OneSchool Companion)

Where the app's data is stored

Everything the app gathers or creates — class lists, rolls, attendance, behaviour notes, seating plans, parent contact records, reports and your settings — is saved only on the computer running the app. It is not uploaded to this website or to any of our services. If you copy or save those files elsewhere (for example a school network drive or OneDrive), that storage is run by your school or the Department, not by us.

Your OneSchool, Compass and Outlook passwords are typed into those sites' own sign-in windows inside the app and go only to those sites. We never receive them.

What the app sends to this website

• When you enter your licence key, and a check-in every few hours while online: the licence key (or the signed licence token it gives), a random identifier for that installation (not a hardware serial number), the computer's Windows name and the app version.
• Now and then: how many classes you have set up — a number only, with no class names or students.
• Only if you use "Report a Bug": your email address, the title and description you type, which screen you were on, the app version and your operating system. Please don't include student names or details in a report.

Checking for updates contacts GitHub (USA), not this website; as with any download, GitHub sees your internet address. The app sends nothing else — no student data, no reports, no screenshots and no usage tracking.

What this website sends to the app

Only a signed licence token, which tells the app whether your licence is valid: your plan, whether it is a trial, your class limit, and when the token expires, along with internal reference numbers for your account, licence and installation. It does not contain your name or email address. The app works offline for up to 5 days between check-ins.

Other information we hold

To run licensing and billing, 4eq.co also stores some non-personal account details:

• If you subscribe: school name, postcode and type, your plan and its status, and Stripe reference numbers
• Your licence key in scrambled (hashed) and encrypted form
• For each computer using your licence: a scrambled installation identifier, its Windows name, the app version and when it last checked in
• Reported class counts (a number only, used for plan limits)
• Bug reports and feedback you choose to send

What we never store

Student names, MIS/EQ IDs, class rosters, behaviour notes, attendance data, OneSchool, Compass or Outlook credentials, and downloaded reports all stay on your device and are never sent to this portal.

Payment data

Card details are handled entirely by Stripe; we never see or store your card number. See Stripe's Privacy Policy.

Where it is stored, and who processes it

Our database (Supabase) and website servers (Vercel) are in Sydney, Australia. We also use Stripe (payments, USA), Resend (email delivery, Tokyo), GitHub (installer downloads, USA) and Cloudflare Turnstile (bot protection). Your email address is therefore processed outside Australia when we send you email or when you pay. Student data is never sent to any of them. Full details: where your data lives.

Seeing, changing or deleting your information

You can view and change your email address and name or alias at any time in My account.

You can also delete your OneSchool Companion account yourself under My account → Delete my OneSchool Companion account. You confirm with a code we email you. This permanently deletes your 4eq.co account, licence keys, teacher seats, and any testimonials and sales enquiries you sent. Any paid subscription must be cancelled first, and a school subscription with other teachers on it must be handed over or have their seats removed.

Only OneSchool Companion is deleted. Your login (email, name or alias, password) is shared with our puzzle builder, voceda, and with foreq.co. If you still use either of them, your login and those accounts stay, and you can delete them from voceda or foreq. If you don't, your login is deleted too.

After deletion we keep only:

• payment records (in Stripe, and our subscription record without your email address), as tax law requires;
• a record that you have had a free trial (your email address and, if you gave a card, its fingerprint), so the one-trial-per-person rule still works;
• bug reports you sent, with your email address removed.

The desktop app's data is on your own computer, so we can't delete it — uninstall the app and remove any files you saved to delete it.

Contact

Questions or requests about your privacy: support@4eq.co.