Privacy policy

In one paragraph

Home Ed Report takes the photos, documents, and details you upload and turns them into a Queensland Home Education annual report. We hold your uploaded files and the generated Word document for seven days, only long enough for you to download your report. After seven days everything is automatically deleted. We never sell your data, never use your photos to train AI, and never share with QHE or any government body.

What we collect

• Your uploads : photos of work samples, any documents you supply (a learning program, an old draft, a registration letter).
• The details you type : child name, parent name, address, registration cycle date.
• The generated report : the Word document we produce for you, held in encrypted Australian storage until you download it.
• Email address : collected by Stripe at checkout for your receipt. We don't add you to any list.
• Anonymous usage : IP address kept for rate limiting; basic error logs.

How long we hold it

• Uploaded photos and documents: processed in memory for the report; not stored long-term.
• Generated Word document: 7 days, then deleted.
• Order record (token, child name, paid/unpaid status): 7 days, then deleted.
• Stripe payment record: retained as long as the ATO requires (currently 7 years for tax records).

Who we share with

Three sub-processors help us produce your report. Each is bound by its own contractual privacy commitments:

• OpenAI : your photos and document text are sent to OpenAI's API to draft the report. Configured to NOT retain prompts for training under their API terms.
• Cloudmersive : the generated Word document is sent for conversion to PDF (used for the in-page preview only).
• Stripe : handles payment. PCI-DSS Level 1 certified. We never see your card details.
• Supabase (Sydney) : encrypted Australian database and file storage. Your data stays in Australia.

What we will never do

• Sell your data, ever.
• Use your photos or documents to train AI models.
• Share with QHE, the Department of Education, or any government body without your explicit instruction.
• Run third-party advertising trackers or behavioural analytics.
• Auto-submit anything on your behalf.

Your rights

Under the Australian Privacy Act 1988 you can ask for a copy of your data, ask us to delete it sooner than the 7-day default, or correct anything we hold. Email hello@homeedreport.au and we'll action it within 48 hours. You can also complain to the OAIC if you feel we haven't.

Children

Home Ed Report is used by parents, about their children. The photos and details concerning children are entered by their parent, treated with extra care, deleted on the 7-day cycle, and never used for training, marketing, or analytics.

Contact

Questions, deletions, or anything else: hello@homeedreport.au.