MetaPet Schools
Privacy materials
The school deployment uses alias-based local records, short retention, and teacher-controlled exports only. Download the privacy pack for the full artifact set.
Privacy policy
Child-friendly privacy notice
Parent/carer privacy notice
Data inventory
Retention and deletion schedule
Third-party services register
Data retention summary
- What is stored: student aliases, lesson progress, class summary counts and engagement analytics.
- Where: browser localStorage on this device only. No data is sent to any server.
- Retention period: data auto-deletes after 35 days without use.
- Immediate deletion: teachers can delete all classroom data at any time using the “Delete all school data” button in the Classroom Manager.
- No personal data: no real names, student IDs, email addresses or accounts are collected.
How deletion works
Auto-deletion is enforced by the application — when the 35-day window expires the classroom data is permanently removed from browser storage without any teacher action required. Teachers do not need to manually delete data for the retention policy to apply.
Manual deletion (the “Delete all school data” button in the Classroom Manager) is available for teachers who want to clear data immediately — for example at the end of a session or pilot. Either mechanism is sufficient; they are belt-and-suspenders, not sequential steps.
Compliance frameworks
- Australian Privacy Act 1988 (Cth) / Australian Privacy Principles (APPs): Because no data leaves the classroom device during routine use, the pilot does not create student data records that are collected, held, or disclosed by the operator under APP 3. Data minimisation and purpose limitation are built into the design.
- COPPA (US) / GDPR-K (EU): These regulations are not in scope for an Australian domestic, on-device pilot. However, the product's design — no accounts, no cloud transmission, alias-only identifiers, short retention — is consistent with the data minimisation and parental consent principles they embody.
- No third-party data sharing: No student data is shared with analytics services, advertising networks, or third parties. The third-party services register (available in the governance pack) documents all external dependencies used in the school deployment.