Policies & Compliance
Published: August 2026
SchoolTalk is used by schools in Australia as well as New Zealand. This page explains how we approach the 13 Australian Privacy Principles under the Privacy Act 1988 (Cth).
A note on scope: Non-government (independent, Catholic) schools in Australia are generally covered by the Privacy Act 1988 (Cth). Government schools are instead covered by their state or territory's own privacy legislation, which varies by state. This page describes how Progressify approaches the APPs regardless of which regime applies to your school.
The 13 Australian Privacy Principles
Types of personal information processed by Microsoft Azure may include:
APP 1: Open and transparent management of personal information
APP 2: Anonymity and pseudonymity
APP 3: Collection of solicited personal information
APP 4: Dealing with unsolicited personal information
APP 5: Notification of the collection of personal information
APP 6: Use or disclosure of personal information
How We Approach Each Principle
APP 1 — Open and transparent management
Our Privacy Policy, Terms of Use, and this page are published at schooltalk.app. Privacy queries can be directed to support@progressify.io
APP 2 — Anonymity and pseudonymity
Where practicable, we minimise the personal information used — for example, our AI Progress Summary feature operates entirely on anonymised academic data with no learner names or identifiers included.
APP 3 — Collection of solicited personal information
We collect only the information needed to provide SchoolTalk's services. Schools are responsible for the personal information they input into SchoolTalk and for obtaining any parental or guardian consent required under applicable law before a student is given access, consistent with the School's obligations under the Terms of Service.
APP 4 — Dealing with unsolicited personal information
If we receive personal information we did not solicit and could not have lawfully collected, we will destroy or de-identify it as soon as practicable.
APP 5 — Notification of collection
Schools manage the collection of student, parent, and teacher information when setting up SchoolTalk accounts. We notify schools directly of any new feature that changes how student data is processed, and seek consent before enabling it.
APP 6 — Use or disclosure
We only use or disclose personal information for the purposes agreed with your school, or as otherwise required or permitted by law.
APP 7 — Direct marketing
SchoolTalk does not use student, parent, or teacher data for direct marketing purposes.
APP 8 — Cross-border disclosure
SchoolTalk's primary hosting infrastructure (Microsoft Azure) is located in Australian data centres (Southeast and Eastern Australia regions).
[Insert confirmed detail on the AI/Azure OpenAI processing region once confirmed by infrastructure team.]
Our sub-processors are listed in our Privacy Policy and are contractually bound to protect any data they process.
APP 9 — Government-related identifiers
SchoolTalk does not adopt, use, or disclose government-related identifiers (e.g. Medicare numbers, student government IDs) as part of its own identifiers.
APP 10 — Quality of personal information
Schools and users can request correction of inaccurate or outdated information at any time by contacting support@progressify.io
APP 11 — Security of personal information
Data is encrypted in transit and at rest. Access is restricted to authenticated users at the relevant school. SchoolTalk is assessed under the ST4S (Safer Technologies for Schools) certification programme.
APP 12 — Access to personal information
Schools and individuals may request a copy of the personal information we hold about them by contacting support@progressify.io
APP 13 — Correction of personal information
We will correct inaccurate, incomplete, or outdated personal information on request.
Notifiable Data Breaches (NDB) Scheme
Where a data breach is likely to result in serious harm to an individual, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC), consistent with our obligations under the Privacy Act 1988 (Cth).
Raising a Concern
If you're not satisfied with our response to a privacy concern, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.