Our approach to privacy

What we hold about a child

• Their name, an email address used only to sign in and reset a PIN, their enrolled stage, and their class if they use Workings at school.
• Their learning record: the questions served and how they answered, which the no-repeat guarantee and mastery estimates rely on.
• Never photos, location or voice. No photograph of a child exists anywhere in the system — avatars are generated marbles a child chooses.

Where it lives

Children’s data is stored in Australia, in Sydney.

Who can see what

• Parents see their own children’s mastery, benchmarks and practice — not every question and answer.
• Teachers see derived information for the students linked to them. School administrators see their own school only.
• Our curriculum administrator sees aggregated, de-identified data only, never an identifiable child.
• Sponsors that fund places see only aggregated, de-identified cohort reports.

AI and children’s data

• A language model helps draft question wording offline. No model is called while a child waits for a question.
• A child’s name, email, school, avatar or any identifier is never sent to a model.
• Anything a child types is screened by a safety classifier first. Text that trips it is not stored.
• What a child types is kept for 30 days.
• Every answer is computed by code, and the answer is never sent to the child’s browser.

Consent

No child is enrolled without a parent or carer’s consent, recorded in the product. Families who sign up directly consent during sign-up. For schools, Workings sends each family a plain-English notice and records their decision. Consent can be withdrawn at any time.

Aboriginal and Torres Strait Islander data

Data about Aboriginal and Torres Strait Islander children is governed consistently with the Maiam nayri Wingara Indigenous Data Sovereignty principles, under agreements made with community partners.

Questions

Email hello@workings.com.au.