HSC Helper – Privacy Policy
Last updated: 4 June 2025
Your privacy matters to HSC Helper Pty Ltd ("HSC Helper", "we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose and protect your personal information when you access or use our websites, mobile applications, browser extensions, APIs and related services (collectively, the "Service").
We comply with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), and the Office of the Australian Information Commissioner (OAIC) Children and Young People's Privacy guidelines. If you are under 18, please read this policy with a parent or legal guardian ("Guardian").
By using the Service you acknowledge that you have read, understood and agreed to the practices described in this Privacy Policy and our Terms of Service.
1. What Information We Collect
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | First name, last name | Account creation, personalisation |
| Contact Data | Email address | Account access, notifications, support |
| Profile Data | Optional profile picture | Personalisation, in‑app display |
| Educational Data | Past quizzes, upcoming assessments, marked questions, explained questions, feedback you submit | Core service functions (analytics, recommendations, study progress tracking) |
| Usage & Device Data | Log files, browser type, device identifiers, page views, in‑app actions, cookies | Service performance, security, analytics |
We do not knowingly collect Sensitive Information (e.g., health data, racial or ethnic origin). Please avoid submitting such information through the Service.
2. How We Collect Information
- Directly from you when you create an account, upload content or interact with features
- Automatically when you use the Service (logs, cookies, analytics tags)
- From schools or teachers where an education provider facilitates student accounts (only with documented Guardian consent where required)
3. Legal Bases for Processing
Under Australian law we do not require a specific "legal basis" framework as under the GDPR; however, the APPs require that we collect personal information only where it is reasonably necessary for our functions and activities and do so lawfully and fairly. For users under 18, we also rely on Guardian consent where the information is not reasonably expected or where local school policies require it.
4. How We Use Your Information
We use personal information to:
- Provide, maintain and improve the Service
- Personalise study analytics, recommendations and content
- Communicate with you (e.g., account confirmations, system alerts, product updates)
- Respond to support requests
- Conduct research and statistical analysis to enhance learning outcomes (using de‑identified or aggregated data where practicable)
- Secure and protect the Service, detect and prevent fraud or abuse
- Comply with legal obligations
We will not use your personal information for direct marketing of unrelated products to minors without Guardian consent.
5. Sharing & Disclosure
We do not sell your personal information.
We may share personal information only:
- With service providers (e.g., cloud hosting, analytics, payment processors) who are contractually bound to protect it and use it only on our instructions
- With schools and teachers associated with your account, subject to Guardian consent and school policy
- For legal reasons (e.g., court orders, enforcing our Terms, preventing harm)
- In a business transfer (e.g., merger or acquisition) where permitted by law and with appropriate notice
6. International Data Transfers
Our primary servers are located in Australia. If we transfer data outside Australia (e.g., to a reputable cloud provider in another country), we take reasonable steps to ensure the recipient does not breach the APPs (APP 8) by using contractual safeguards or certified compliance frameworks.
7. Children's Privacy & Parental Rights
- Users under 18 must obtain Guardian consent before creating an account
- Guardians can review, correct, delete, export or restrict collection of their child's personal information at any time by emailing hello@hschelper.com
- We use child‑appropriate language in our interfaces and avoid behavioural advertising
- We do not condition a minor's participation on disclosing more information than is reasonably necessary
8. Data Security
We employ administrative, technical and physical safeguards to protect personal information, including:
- TLS encryption in transit
- AES‑256 encryption at rest for databases and backups
- Role‑based access controls and 2FA for staff
- Regular security audits and penetration testing
- Incident response procedures aligned with OAIC Notifiable Data Breaches (NDB) scheme
Despite our efforts, no system is completely secure. You are responsible for keeping your password confidential.
9. Data Retention & Deletion
We retain personal information for as long as necessary to provide the Service and fulfil the purposes described in this Policy, unless a longer retention period is required by law. When information is no longer needed, we take reasonable steps to de‑identify or securely destroy it.
You or your Guardian may request deletion of your account and associated personal information at any time. We will honour such requests within a reasonable period unless we need to retain certain data to comply with legal obligations or resolve disputes.
10. Access & Correction Rights
Under APP 12 and 13 you (or your Guardian) have the right to request:
- Access to the personal information we hold about you
- Correction of any inaccurate, out‑of‑date or incomplete information
- Portability (a machine‑readable export) of your data
- Object to certain processing activities
To exercise these rights, email hello@hschelper.com. We may require identity verification for security. If we refuse a request we will provide written reasons and information on how to complain.
11. Cookies & Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences
- Keep you signed in
- Gather usage analytics to improve the Service
- Detect fraud or abuse
You may disable cookies in your browser settings, but some features may not work correctly.
12. Links to Third‑Party Sites
Our Service may contain links to external sites (e.g., reference resources, school portals). We are not responsible for their privacy practices. Consult their policies before providing personal information.
13. Changes to This Privacy Policy
We may update this Policy to reflect changes in our practices or law. We will post the revised version with a new "Last updated" date and, when material changes occur, notify you via email or in‑app notice at least 14 days before they take effect.
14. Complaints & Contact
If you have questions or concerns about this Privacy Policy, email hello@hschelper.com.
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied you may escalate to the OAIC (www.oaic.gov.au).
By using HSC Helper you acknowledge that you have read and understood this Privacy Policy.
© 2025 HSC Helper. All rights reserved.