Privacy Policy

Updated: 6th November 2025

Your Privacy

We are committed to protecting your privacy and handling your data responsibly in accordance with Australian privacy laws.

1. Introduction

CurricuLLM is an AI-powered SaaS platform for students (aged 10+) and educational staff, aligning with the Australian Privacy Act 1988 and the Australian Framework for Generative AI in Schools.

2. Information We Collect

We collect:

Account Information: Names and emails via Google or Microsoft authentication, and school affiliations.

User-Provided Information: Users might inadvertently enter personal details; we discourage including sensitive information.

Technical Data: IP addresses, device types, browsers, and usage patterns, via cookies and analytics.

Third-Party Information: Limited information from Google or Microsoft for authentication purposes only. Or information from systems that users choose to connect.

3. Use of Information

We use personal information to:

  • Provide, operate, and enhance our services.
  • Communicate service updates.
  • Maintain platform safety and compliance.
  • Conduct anonymised research and user surveys for product improvement.

CurricuLLM does not use prompts to train AI models.

4. Data Retention

Data is retained only as long as necessary for service provision or legal compliance. Upon account deletion requests, data is deleted or anonymised within a reasonable timeframe.

5. Data Storage and Security

All data is securely stored within region, protected by encryption, restricted access, regular security audits, and industry-standard practices.

6. International Data Transfers

CurricuLLM primarily stores and processes information within Australia and New Zealand.

However, for the purposes of providing AI inference services, limited information may be processed in the United States. This processing is strictly limited to real-time inference tasks only and is not used to train AI models.

When transferring information overseas, we ensure appropriate safeguards and contractual protections are in place, and maintain compliance with applicable privacy laws.

7. Third-Party Providers

We share data only with essential service providers (e.g., Microsoft Azure, AWS, Google Cloud) for secure hosting, authentication, and service delivery.

Some AI inference processing may occur with approved providers in the United States, with safeguards including encryption, contractual data protections, and regional privacy controls.

No personal information is disclosed to overseas recipients for marketing or profiling purposes, and prompts or user content are not used to train AI models.

8. Cookies and Tracking Technologies

We use cookies for authentication, preference management, and analytics. Users may manage preferences via their browser settings.

9. User Rights and Controls

Users may request access, correction, or deletion of their data, by emailing hello@curricullm.com.

10. Children's Privacy

We provide schools with a parental notification template. We minimise student data collection, utilise content filters, and do not engage in direct student marketing.

11. Policy Updates

Significant policy changes will be communicated via email and prominently on our platform. Users are encouraged to regularly review policy updates.

12. Contact

Questions or privacy requests: hello@curricullm.com

13. Complaints & Resolution

If you believe your privacy has been breached or mishandled, you may contact us at hello@curricullm.com.

We will:

  • Acknowledge receipt of your complaint within 5 business days
  • Investigate and respond with an outcome within 30 days
  • If further time is required, we will let you know and explain why

If you are not satisfied with our response, you may escalate the matter to the Office of the Australian Information Commissioner (OAIC) via https://www.oaic.gov.au/privacy/privacy-complaints/