Privacy Policy

Plonk ("we", "us", "our") is committed to protecting the privacy of teachers and schools who use our platform. This policy explains what personal information we collect, how we use it, and your rights under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

If you have any questions, contact us at leonleclereai@gmail.com.

Account information: When you sign up, we collect your email address and a hashed password. If you use Google Sign-In, we receive your email address and display name from Google.

Student names: When you build a seating plan, you enter student first names (or whatever names you choose). These are stored in your account so you can reload your classes. We only store what you provide — we never ask for student surnames, dates of birth, or any other identifying information.

Payment information: We use Stripe to process payments. Plonk never sees or stores your card details — all payment data is handled directly by Stripe under their PCI-DSS compliance.

Usage data: We collect basic, anonymised usage metrics (page views, feature usage) to improve the product. We do not use third-party advertising trackers.

We use the information we collect to:

• Provide and maintain the Plonk service
• Save and restore your seating plans across sessions
• Process payments and manage your subscription or credit balance
• Send transactional emails (account confirmation, password reset)
• Respond to support enquiries
• Improve the product through aggregated, anonymous analytics

We do not sell, rent, or share your personal information or your students' names with third parties for marketing purposes.

Plonk is designed for teacher use. Student names entered into the platform are treated as sensitive data. We apply the following protections:

• Student data is stored on servers located in Australia or covered by adequacy agreements
• We collect only first names (or whatever label the teacher chooses)
• Student data is never used to train AI models or shared with third parties
• Teachers can delete their classes and student data at any time from the dashboard

We use Supabase (PostgreSQL) hosted on AWS infrastructure to store your data. All data is encrypted at rest and in transit using industry-standard TLS. We follow NIST security guidelines and conduct regular security reviews.

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and all associated data
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at leonleclereai@gmail.com. We will respond within 30 days.

Plonk uses session cookies to keep you signed in. We do not use advertising cookies or cross-site tracking. You can disable cookies in your browser settings, but this will prevent you from staying logged in.

We may update this policy from time to time. We will notify you of significant changes by email or by displaying a notice in the app. Continued use of Plonk after changes constitutes acceptance of the updated policy.