Privacy Policy

CurricuLLM is an AI powered SaaS platform for students aged 10 plus and educational staff. We aim to align with the Australian Privacy Act 1988 and the Australian Framework for Generative AI in Schools.

We collect

Account Information
Names and emails via Google or Microsoft authentication, and school affiliations.

User Provided Information
Users may enter content into the platform, including in Studio. Users might inadvertently enter personal details. We discourage including sensitive information.

Technical Data
IP addresses, device types, browsers, and usage patterns, via cookies and analytics.

Third Party Information
Limited information from Google or Microsoft for authentication purposes only. Or information from systems that users choose to connect.

We use personal information to

• Provide, operate, and enhance our services.
• Communicate service updates.
• Maintain platform safety and compliance.
• Conduct anonymised research and user surveys for product improvement.

CurricuLLM does not use prompts or user content to train AI models.

Studio allows users to upload, create, edit, and export teaching and learning materials, including audio and video outputs.

If a user selects that Studio content is suitable for students, or ok to share with other teachers, then that content may be visible to other users inside CurricuLLM where sharing is enabled.

We encourage users not to include personal information in shared content, especially student names or identifying details.

We may review shared content for safety, quality, and compliance. This may involve human review and automated checks.

If you later change your selection to turn sharing off, we will stop new sharing within a reasonable time. Copies may still remain where other users have already accessed or exported the content, or where it is stored in backups, logs, or required for legal or safety reasons.

Data is retained only as long as necessary for service provision or legal compliance. Upon account deletion requests, data is deleted or anonymised within a reasonable timeframe.

All data is stored securely, protected by encryption, restricted access, regular security audits, and industry standard practices.

CurricuLLM primarily stores and processes information within Australia and New Zealand.

However, for the purposes of providing AI inference services, limited information may be processed in the United States. This processing is limited to real time inference tasks only and is not used to train AI models.

When transferring information overseas, we ensure appropriate safeguards and contractual protections are in place, and maintain compliance with applicable privacy laws.

We share data only with essential service providers for secure hosting, authentication, and service delivery.

Some AI inference processing may occur with approved providers in the United States, with safeguards including encryption, contractual data protections, and regional privacy controls.

No personal information is disclosed to overseas recipients for marketing or profiling purposes.

We use cookies for authentication, preference management, and analytics. Users may manage preferences via their browser settings.

Users may request access, correction, or deletion of their data, by emailing hello@curricullm.com.

We provide schools with a parental notification template. We minimise student data collection, utilise content filters, and do not engage in direct student marketing.

Significant policy changes will be communicated via email and prominently on our platform. Users are encouraged to regularly review policy updates.

Questions or privacy requests, hello@curricullm.com

If you believe your privacy has been breached or mishandled, you may contact us at hello@curricullm.com.

We will

• Acknowledge receipt of your complaint within 5 business days.
• Investigate and respond with an outcome within 30 days.
• If further time is required, we will let you know and explain why.

If you are not satisfied with our response, you may escalate the matter to the Office of the Australian Information Commissioner OAIC.

We use the following subprocessors to provide our services. These subprocessors may process personal information on our behalf in accordance with our contractual agreements and privacy requirements.