Last updated: 21 June 2026

Privacy Policy

No networking, by design. Nexus Academy contains no messaging, chat, comments, sharing, uploads, friend lists, leaderboards, or player-to-player features of any kind. Children cannot contact other users, and other users cannot contact children, through the Service. Student names, avatars, dorm rooms, stories, journals, and other creations are stored only in your device's local storage and are never transmitted to us or to any third party.

This Privacy Policy explains how Nexus Systems World ("Nexus Systems World", "we", "us"), a sole trader in Australia (ABN 87 716 389 234), collects, uses, discloses, and protects personal information in connection with Nexus Academy (the "Service"). We are the data controller for personal information collected through the Service.

The short, plain version. The only things Nexus Systems World keeps are (a) the account email address of the paying adult, (b) the subscription record needed to bill and unlock access, and (c) anonymous, aggregated traffic counts — how many visits a page received, how many people installed the app, how many purchases were made. That is it. We keep no information about any child, no learning history, no scores, no recordings, no photos, and no contact lists. Everything your child creates or completes stays on your own device. We do not sell, rent, trade, or share personal information with data brokers, advertisers, or anyone else for money — ever. We believe in honesty, transparency and privacy, and this policy is written to be checkable against how the app actually behaves.

1. Information We Collect

Account information: the adult account holder's email address, an authentication record (password stored hashed, or a one-time email sign-in link), and the date the terms were accepted.
Subscription information: trial start, subscription status, billing period, and payment-provider IDs. We never see or store card numbers.
Aggregate traffic data: counts of page views, visits, app installs and completed purchases, plus standard server logs (including IP address and browser type, kept short-term for security and fraud prevention). Traffic reporting we look at is aggregated — totals, not individuals.
Communications: any message you choose to send to support.
Messages typed to Spark (our on-screen helper): if you or your child type a question into the Spark helper bubble, that text and the current page name are sent to a third-party AI language-model provider so a reply can be generated. This is the only text from inside the app that leaves the device. We do not store these conversations, and they are not used to identify anyone. Spark is instructed never to ask for personal information — please do not type names, addresses, school details, or contact details into it.

1a. Information We Do Not Collect

No child data. Student names, ages, avatars, houses, pets, dorm rooms, stories, journals, drawings, scores, quiz answers, XP, streaks, badges and album rewards are written to your device's local storage only. They are never transmitted to us, and we could not retrieve them if we tried.
No per-child analytics. We do not track which activities a specific child opened, how long they played, or how they performed.
No microphone, camera, photo, contact or precise-location access. The music room generates sound; it does not listen.
No advertising or tracking networks, no third-party ad pixels, no cross-site profiling.
No sale of data. We do not sell, licence or trade personal information under any circumstances.

2. How We Use Your Information

To create and operate your account and provide the Service.
To process payments and manage subscriptions (via our payment provider).
For security, abuse prevention, and fraud detection.
To improve the Service, fix bugs, and develop new features.
To respond to customer support enquiries.
To comply with legal obligations.

3. Legal Basis

We process personal information on the basis of contract performance (to provide the Service you have signed up for), our legitimate interests (security, improvement, and analytics), your consent (where required), and our legal obligations.

4. Sharing Your Information

Payment provider (Stripe): Stripe processes payments and manages subscriptions. Card details are handled directly by Stripe and are never stored on our servers.
Hosting & infrastructure providers: cloud hosting, database, and edge function providers that store and process data on our behalf under contractual confidentiality and security obligations.
Authentication provider: Supabase Inc. for account and session management.
AI language-model provider: text typed into the Spark helper bubble is sent to a third-party AI provider solely to generate a reply. It is not used for advertising and we do not send account or student profile data with it.
Professional advisers: legal, accounting, or tax advisers under duties of confidentiality.
Authorities: where we are required by law, by court order, or to protect rights and safety.

We do not sell your personal information, and we do not use it for third-party advertising.

5. Australian Privacy Principles

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You may make a complaint about our handling of your personal information by emailing us first; if you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

6. Your Rights

Access the personal information we hold about you.
Correct inaccurate or incomplete information.
Request deletion of your account and associated personal information.
Object to or restrict certain processing.
Withdraw consent (where processing is based on consent).
Lodge a complaint with a supervisory authority.

To exercise these rights, email nexus.systems.au@gmail.com. We respond within a reasonable time and at most within 30 days.

7. Cookies & Local Storage

The Service uses your browser's localStorage and a small number of essential cookies to keep you signed in, remember your preferences, and store your student's progress on your device. We do not use third-party advertising or marketing cookies. You can clear local storage and cookies at any time using your browser settings; doing so will sign you out and clear locally-stored progress.

8. International Transfers

We are based in Australia. Some of our service providers (including hosting, database, and payment partners) may process personal information in the United States, the European Union, or other countries. By using the Service, you consent to such transfers. Where required, we use contractual safeguards such as Standard Contractual Clauses or rely on adequacy decisions.

9. Security

We use appropriate technical and organisational measures to protect personal information, including encryption in transit (HTTPS/TLS), encryption at rest where supported, access controls, role-based permissions, and routine security reviews. No system is perfectly secure; we cannot guarantee absolute security.

10. Retention

We retain personal information for as long as your account is active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. We delete or anonymise data once it is no longer required.

11. Children

The Service is intended for use by parents or guardians on behalf of children. Accounts must be created by an adult (18+). The Service is not directed at children under 13 to create accounts directly, and we do not knowingly collect personal information from children outside the supervised student-profile context. If you believe a child has created an account or that we have inadvertently collected a child's personal information, contact us and we will promptly remove it.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will update the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact

For privacy questions or requests, email nexus.systems.au@gmail.com.