Privacy Policy

This Privacy Policy explains how Kaloot Group Pty Limited (ABN 38 639 638 350), trading as Test Wizard (“we”, “us”, “Test Wizard”) collects, uses, stores, and protects personal information through testwizard.com.au and the Service, including information about children provided by their parent or guardian.

We handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. Children don't register themselves

Test Wizard is designed so a parent or guardian is always the account holder. Children don't create their own accounts, provide their own consent, or give us their email address — a parent sets up each child's login and remains responsible for it. Where this policy refers to “your child's information”, it means information a parent has given us about their child, or that's generated by the child's use of the Service under a parent-created login.

2. Information we collect

From you, the parent:

• Email address and password (we store a securely hashed version of your password, never the password itself).
• A record that you accepted these Terms and this Privacy Policy, including the version, timestamp, and the IP address/browser you used — this is our audit trail that consent was actually given.
• If you register through a free-access offer link, the IP address of that registration, used only to prevent automated abuse of the offer.

About your child, which you provide:

• Display name, a username and password you choose for them (password stored hashed, as above), and optionally their year level, school name, and target test date.

Generated by your child's use of the Service:

• Which questions they've attempted, their answers, whether each was correct, time spent, and any questions flagged for review.
• Which Learning lessons and Practice/Test sittings they've completed, and their progress and results over time.

We use this activity data to run the core features of the Service — showing progress on the dashboard, picking what to show next in Practice, and scoring a Test sitting. We don't use it for anything else, and we don't use it to advertise to your child.

3. Cookies and similar technology

We use one essential, strictly-necessary cookie to keep you signed in (a session cookie set when you log in). Apart from the link cookie and Google Analytics described below, we don't use advertising or tracking cookies.

If you arrive through a link we've shared (for example a link posted in a parents' group or sent by a teacher), we set one first-party cookie that remembers how you found Test Wizard — such as which link you used. If you then create an account, we save that with your account. We use it only to understand which channels help families find us. It lasts 90 days and isn't shared with anyone or used for advertising.

We use Google Analytics on our public pages (the home and exam pages), the sign-up page and the parent account page, to count visits and sign-ups and see which pages work. It sets cookies and sends Google your browser and device type, approximate location and the pages you view — not your name, email or any information about your child. We never load it on a page your child uses, and we've turned off its advertising features. You can opt out with Google's browser add-on.

4. Who we share information with

We don't sell personal information, and we don't share it with third parties for their own marketing purposes. We use a small number of service providers to run Test Wizard, who process data on our behalf and under our instructions:

• Vercel — hosts the application and handles web traffic.
• Neon — hosts our database, where account and activity data is stored.
• Resend — sends transactional emails (e.g. email verification, password reset).
• Google Analytics — counts visits and sign-ups on our public pages, the sign-up page and the parent account page (see section 3).

If you write a testimonial in one of our feedback forms, we publish it (on our website or in our marketing) only if you tick the box giving permission, and only with the name you choose — or anonymously. We never publish your child's name.

These providers may store or process data on servers located outside Australia. We choose providers that maintain appropriate security standards, and we don't give them any use of your data beyond providing their service to us.

We may also disclose information if required by law, or to protect the safety, rights, or property of Test Wizard, our users, or others.

5. How we protect and store information

Passwords are never stored in plain text — only a securely hashed form. Data is encrypted in transit. We keep account and activity data for as long as the account is active, plus a reasonable period afterward (or as required by law), and delete it on request as described below.

6. Your rights, and your child's

As the parent account holder, you can access, correct, or request deletion of your own information and your child's information at any time by contacting us (§8). Deleting your account removes the children provisioned under it and their associated activity data, other than anything we're required to retain by law.

If you believe we've mishandled personal information, you can contact us directly (§8), or lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

7. Changes to this policy

We may update this Privacy Policy as the Service changes. We'll update the “Last updated” date above whenever we make a material change.

8. Contact us

For any privacy question, access/correction/deletion request, or complaint, contact us at hello@testwizard.com.au.