Privacy policy

Who we are

ManduMagpi is run by Jessica Gao, a sole trader in Sydney, New South Wales, Australia, trading as ManduMagpi. ABN 79 567 010 980. In this policy "we" and "us" mean her business.

For anything on this page, email contact@mandumagpi.com.au. Jessica reads every email herself.

We follow the Australian Privacy Principles in the Privacy Act 1988. A business our size can be exempt, but we have chosen to be covered by the Act (this is called opting in), because most of the people who use ManduMagpi are teenagers and their families should have the full protection of the law.

What we collect, and why

We only collect what something on the site needs. Here is everything, with the reason for each.

• Your account: name, email address, password (stored scrambled by our sign-in provider, so we never see it), whether you are a student or a parent, and for students the year level and course. This lets you sign in and shows you the right worksheets.
• A student's date of birth. We use it for three age rules: under 13, a parent has to make the account; under 15, a parent has to agree before the account works; and 13 or over, a student can buy on their own account. We do not use it for anything else.
• A student's username, profile picture and colour, and weekly worksheet goal. The username is what friends see instead of a real name. We keep the dates it was changed, because it can only be changed twice a month.
• Quiz answers, scores and how long each quiz took, so you can see your progress and, if you use Friends, compare with friends.
• Worksheet progress: which sheets a student has started or finished, the score they record, and any short note they write for themselves (up to 280 characters).
• Friends, if switched on: the student's friend code, who they are friends with, friend requests, challenges and live matches.
• Parent links: which parent is linked to which student, a parent's agreement for a student under 15 (with the exact wording they were shown, and the date), and requests a student sends asking a parent to buy a plan.
• Purchases: what was bought, for whom, the price, any coupon, and the dates. Card details are entered on Stripe's systems, not ours. We never see or store a card number.
• Worksheet requests: the year, course, level and topics you ask for, and your email only if you leave it. The request is emailed to our inbox. It is not stored on the site.
• Emails you send us, for example to contact@mandumagpi.com.au, and the photo of a student ID card if you send one to id@mandumagpi.com.au to change a plan's year.
• Technical information: your IP address, held for a short time to stop one computer flooding a form or guessing passwords, and to check you are a person rather than a script.
• A record of important actions (for example a plan bought, a parent's agreement given or withdrawn, a username changed), so we can investigate a problem or a complaint.

Cookies and similar storage

• A sign-in cookie that keeps you signed in, and a timer that signs you out after 6 hours without using the site.
• Your light or dark setting, your cart, and the zoom level you chose for reading worksheets, kept in your own browser.
• We do not use advertising cookies, tracking pixels or analytics.

What we never do

• We never sell or swap anyone's personal information.
• We do not show advertising, and nobody can advertise to you through ManduMagpi.
• We do not send marketing emails or newsletters. If we ever start, you will have to tick a box to ask for them first, and every one will have an unsubscribe link.
• We do not put anything a student types into an AI tool, and we do not use it to train one. (Our worksheets are written with the help of AI, but that never involves anyone's personal information.)
• There is no messaging. Nobody can chat with or send a message to a student through ManduMagpi, and students cannot write to each other. Apart from their username, the only words a student writes that anyone else sees are the notes on their own worksheets, which only a linked parent can read.

Students under 15, and under 13

We treat 15 as the age a student can decide about their own information. Australian privacy guidance presumes someone under 15 cannot, so for younger students a parent or guardian decides. This is the rule we have chosen to follow.

• Under 13: a parent or guardian makes the account for the child, from their own ManduMagpi account. The child then sets their own password.
• 13 or 14: the student can start an account, but it does nothing until a parent or guardian agrees. We email the parent, show them exactly what they are agreeing to, and keep a copy of that wording with their answer. The invitation link lasts 14 days. A parent who has been invited but not agreed can see nothing.
• 15 or over: the student can make their own account and decide for themselves. They can choose to link a parent.
• A parent can withdraw their agreement at any time. The account switches off straight away, and the student is signed out everywhere. If the parent does not agree again within 30 days, we delete the account.
• We tell the student when a parent agreed on their behalf, and they can see it on their account page.
• For a student under 15, Friends stays off until a parent switches it on, and the parent can switch it off at any time.

If you were sent an invitation you did not expect, you do not need to do anything. It expires, the account never switches on, and we will not email you about it again. Ask us and we will delete what we hold straight away.

Who can see what

These rules are enforced by the database itself, not just by what the screens show, and they are tested automatically.

• A student sees their own information.
• A linked parent sees their child's account: year and course, plan, the worksheets they have started and finished with the scores and notes the child recorded, their quiz scores, and their friends' usernames. A parent sees nothing about any other family's child except a friend's username and picture.
• If a parent made the student's account, the student is asked the first time they sign in whether that person really is their parent or guardian. Until they say yes, the parent sees nothing about the account. If they say no, the link is removed, the account is switched off until a parent or guardian agrees to it, and we look into it.
• Friends, if switched on: each friend sees the other's username, picture and quiz results (topic, score, time and date), in a weekly leaderboard, head-to-head comparisons, challenges and live matches. A friend never sees a real name, email, school, year, worksheet or note.
• Friends are made only with a code that one student gives another, and both have to agree. There is no way to search for students.
• Jessica, as the only administrator, can see accounts to run the site, answer questions and fix problems. She can also view the site as a sample parent to check it works. Nobody else works on ManduMagpi.
• Nobody who is signed out can see anything about anyone.

Other companies that handle your information

We use other companies to run the site. Each only gets what it needs for its job. Several are based overseas, so some information leaves Australia. Where we could choose, we chose Australian locations. We remain responsible for how they handle it.

• Supabase: our database and sign-in. Data is stored in Sydney. Supabase is a United States company, and its staff can reach the systems that hold it.
• Vercel: runs the website, in Sydney. A United States company.
• Stripe: takes payments. It receives the buyer's name, email and card details, and handles them under its own privacy policy. Stripe processes payments in the United States and other countries.
• Resend: sends our emails, through Tokyo, Japan. A United States company.
• Google (Gmail) and Porkbun: Porkbun holds our domain name and its DNS records, which tell browsers where our website is, and it forwards emails sent to our @mandumagpi.com.au addresses, and worksheet requests from the site, to our Gmail inbox. Both are United States companies. Apart from those emails, they hold no information about you.
• Cloudflare: only the check on our forms that confirms you are a person rather than a script. Your browser talks to Cloudflare for that check; our pages and data do not pass through Cloudflare. A United States company with a worldwide network.
• Upstash: counts requests so forms cannot be flooded, which means it briefly holds IP addresses or account numbers. Located in Singapore.
• Sentry: tells us when the site breaks. It gets a technical description of the error. We switch off sending IP addresses and screen recordings, and remove email addresses and sign-in links before anything is sent. A United States company, which keeps reports for up to 90 days.

So the countries involved are Australia, the United States, Japan and Singapore, plus wherever Stripe processes a payment.

How long we keep it

• Your account and everything in it: until it is deleted. You can delete it yourself at any time from Profile and settings, and it goes straight away.
• A child's account after a parent withdraws their agreement: deleted after 30 days, unless the parent agrees again first.
• Payment records: five years, because tax law requires business records to be kept. After an account is deleted they are no longer attached to a name or email.
• A parent's agreement record: for as long as the student's account exists, and deleted with it.
• ID card photos: deleted from our inbox once we have checked the year, within 7 days.
• Worksheet requests and other emails to us: deleted from our inbox within 12 months.
• The record of important actions: up to 2 years.
• IP address counts: minutes to hours. They expire on their own.

Keeping it safe

• Every part of the database refuses access unless a rule allows it, and automatic tests check that the wrong person is refused.
• Passwords are stored scrambled by our sign-in provider. We never see them.
• Everything is encrypted between your browser and us. Worksheets are served only after checking you are allowed them, through links that expire quickly.
• Sign-in, sign-up, password reset and every form are limited, so guessing passwords or flooding a form does not work.
• A student account can only be signed in on one device at a time.

No system is perfectly secure. If something goes wrong that is likely to cause you serious harm, we will email you and tell the Office of the Australian Information Commissioner, as the Privacy Act requires.

Seeing, fixing or deleting your information

• Delete your account yourself from Profile and settings, at any time. (If a plan is still set to renew, cancel it first so your card is not charged again.)
• For a copy of what we hold, to fix something wrong, or for us to delete something, email contact@mandumagpi.com.au. We reply within 30 days, usually much sooner.
• A student aged 15 or over can ask for themselves. A parent can ask for a child they are linked to.
• If we cannot do what you ask, which is rare (usually a payment record the law makes us keep), we will tell you why in writing.

Complaints

Tell us first at contact@mandumagpi.com.au. We will reply within 5 business days to say we have it, and give you a full answer within 30 days.

If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

If we change it, the date at the top changes. If the change matters (for example, something new is collected, or a new company handles it), we will email everyone with an account before it applies.

A parent's agreement stays attached to the exact wording they were shown. A change here does not change what they agreed to; if we need a new agreement, we will ask for one.