Privacy policy

The short version

• A parent or carer sets up Meraki Studio and makes each child's login. Children never sign themselves up and never need an email address.
• We keep only what Meraki Studio needs to work: logins, year levels, and how each child is going with lessons and tests.
• There are no ads, no tracking for advertising, and we never sell anyone's information.
• Children can't chat. Other children only ever see a friend's name; everyone else shows as Player 1, Player 2 and so on.
• You can delete a child, and everything about them, at any time.

Families joining

To join, a parent or carer signs up with their first name, email address and a password. We send an email to check the address belongs to them.

That parent then creates a login for each child. The parent who creates a child is that child's owner.

The owner can invite another parent, such as a co-parent, by email to help look after a child. The invited parent sees nothing until they accept. Once they do, they see the same progress and reports as the owner and can help with things like unlocking lessons and approving friends. Only the owner can invite or remove parents or delete the child, and the owner can remove an invited parent at any time.

What we keep about a child

• The name and username the parent chooses, and the password, which we store scrambled so nobody can read it.
• Their year level, and the colour and profile icon they pick.
• What they do in Meraki Studio: lessons played, answers, test scores, stars, streaks, XP, league places, mystery boxes and outfits.
• Writing they do in the app, and the feedback on it.
• Their friends, and friend requests waiting for a parent to approve.

We use this to run the app: to pick questions at the right level, unlock the next lesson, show progress to the child's parents, and show league tables. We don't use it for anything else.

We don't ask for a child's birthday, school, address, photo or email address. Please don't use a child's full name or anything that identifies their school as their username.

When something goes wrong

A child can tap "Something wrong?" and choose to send a picture of their screen to the Meraki Studio team. They don't type anything, and nothing is sent unless they say Yes. Parents, teachers and admins can send a longer report with up to 5 pictures.

A report from a child keeps the child's username and the email address of the parent who added them, so we can follow up. It also keeps the page, the kind of device and the version of the app. Only Meraki Studio's admins can see reports and their pictures. We never put them in public places, and a child's details are never sent to GitHub or put in our summary emails.

Admins get one short email a day listing new reports. We delete a report and its pictures 90 days after it is marked fixed.

Who can see a child's information

• The child's owner and any parents they've invited see everything about that child.
• Friends (approved by a parent) see the child's name, icon and league place. Other children see them only as "Player" with a number.
• Meraki Studio's admins can open a child's or parent's account in a read-only "View as" mode, to help when something isn't working or to keep the app safe. Nothing can be changed or saved while viewing. Each time an admin does this, we record who viewed which account, when, and why. Admin accounts must use two-step sign-in.
• Teachers who write lessons and questions see the learning materials and question bank, not children's accounts.

Services that help us run Meraki Studio

A few companies process information for us. They may only use it to provide their service to Meraki Studio.

• Cloudflare hosts the app and stores its database and uploaded files. All information is sent over an encrypted connection.
• Resend sends our emails to parents, such as checking your email address, password resets, friend requests and invites to share a child. Emails come from admin@merakistudio.app.
• Anthropic (Claude), an AI service, helps write practice questions from learning materials our admins upload, and drafts feedback on a child's writing for a parent to check and edit before the child sees it. For writing feedback, Claude receives the writing task, the child's year level and the writing itself, but not the child's name or login. Anthropic doesn't use information sent this way to train its AI models.

These services may store information outside Australia.

Cookies

We use one cookie to keep you signed in. We don't use advertising or tracking cookies, and our fonts are served from our own site.

How long we keep it, and deleting it

We keep a child's information while their account exists. When the owner deletes a child, their login, progress, answers, writing and friends are deleted straight away.

To delete your own parent account, or to ask for a copy of what we hold about you or your child, email us. We'll reply within 30 days.

Questions or worries

Email admin@merakistudio.app. If you think we've mishandled your information and we haven't sorted it out, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.