Privacy Policy
Last updated 22 October 2026
Who we are
Érudits is operated by Christine Myriam Tolefe, trading as Erudits Education, ABN 11 252 325 836, of Western Australia.
Contact: info@erudits.com
This policy explains what information Érudits collects, why, and what we do with it. It is written to be read by a Head of Department or a parent, not by a lawyer.
The short version
Érudits collects as little about students as it possibly can. Students have no email address on the platform, no password, and nothing they type or say is stored on our servers. We hold a student's name, their class label, and a login code. That is all.
What we collect
About the school
School name, the contact person's name and email address, phone number, state, approximate student and teacher numbers, the year groups you are interested in, and any notes you give us during registration. We use this to raise your invoice, set up your logins, and contact you.
About teachers
Name, email address, and a password. Passwords are stored as a one-way hash, which means we cannot read them and neither can anyone who obtained the database.
We also keep a simple activity log of teacher actions on the platform, so that a school can see that its subscription is being used.
About students
Only three things:
- The student's name, as the teacher typed it into the class list
- A class label, such as "8 French A"
- A login code that we generate
Teachers create these when they paste in a class roll. Students never enter any information about themselves.
About visitors to the free sample weeks
A count of how many times each sample week was opened, and the name of the website the visitor arrived from — for example "facebook.com" or "google.com". No IP address, no cookie, no name, no email. This tells us how many people tried it and which channel they came from. It cannot tell us who anyone is.
About teachers who register interest
If you fill in the "register your interest" form, we keep the email address and, if you gave one, your name, along with which page you were on.
What we do not collect
This list matters, so it is deliberately specific.
- No student email addresses. Students never give one.
- No student passwords. There are none to lose.
- No student answers, scores, marks or progress. Nothing a student types into an activity is sent to us or stored. Our database has no table for it.
- No voice recordings. The speaking and oral-exam tools record audio in the student's own browser, on their own device. The recording is never uploaded to us. It disappears when the page is closed.
- No advertising or tracking cookies, and no advertising networks.
- No location data.
Why we collect it
- To raise invoices and administer subscriptions.
- To create and authenticate teacher and student logins.
- To let a school see its own usage.
- To answer enquiries.
- To understand, at a purely numerical level, how many people try the free samples.
We do not use any of it for advertising, and we do not sell or rent personal information to anyone. Ever.
Who else sees it
Érudits runs on third-party infrastructure. Our hosting and database providers store the data on our behalf and do not use it for their own purposes:
- Neon — database hosting, in Sydney, Australia
- Vercel — application hosting, in Sydney, Australia
Other than these providers, we disclose personal information only where the law requires it.
Where your data is stored, and where it is processed
Both happen in Australia.
Stored in Australia. Every record Érudits keeps — school details, teacher accounts, student names and class labels — is held in a database located in Sydney.
Processed in Australia. The application code that reads and writes those records also runs in Sydney. When a teacher or student opens a page, the request is handled in Australia. The data does not travel overseas to serve it.
Neon and Vercel are United States companies, and we cannot rule out that their staff may access systems from overseas for support or maintenance. Where that happens they act only on our behalf, to keep the platform running, and not for their own purposes.
Until October 2026 the application ran on servers in the United States, and this policy said so. That is no longer the case.
How it is protected
- All traffic is encrypted in transit (HTTPS).
- Teacher passwords are hashed, never stored in readable form.
- Access to the administration area is restricted to Érudits.
- Student records contain no contact details, so a breach could not be used to contact a child.
No system is perfectly secure. If a breach occurred that was likely to cause serious harm, we would notify affected schools and the Office of the Australian Information Commissioner, as required.
How long we keep it
Student records — a student's name, class label and login code — are deleted within 30 days of a subscription ending.
In addition, no student record is carried into a new school year. Records held at the end of a school year are deleted by 31 December, unless the school's subscription continues into the following year.
A school may ask us to delete its student records at any time, and we will do it promptly.
We are able to be this strict because we hold so little: there is no completed work, no marks and no progress history to preserve for a returning student, so there is nothing to be gained by keeping a child's record after the school has stopped using Érudits.
Teacher logins are removed when a subscription ends.
School contact and invoicing records are kept for seven years, as tax law requires.
Free-sample visit counts contain no personal information and are kept indefinitely.
Interest registrations are kept until you ask us to remove them.
Children's privacy
Most Érudits users are school students under 18. We have designed the platform so that using it requires a child to disclose almost nothing: no email, no password, no profile, nothing published, and no way for anyone to contact them through it.
The school decides which students receive access and hands out the codes. We have no direct relationship with students and never contact them.
If a parent or school asks us to delete a particular student's record, we will do it promptly and without argument.
Your rights
You can ask us to:
- Tell you what personal information we hold about you
- Correct anything that is wrong
- Delete information we no longer need to keep
Email info@erudits.com and we will respond within a reasonable time, normally within 30 days.
If you are unhappy with how we have handled your information, contact us first. If we cannot resolve it, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
If we change this policy in a way that materially affects schools with an active subscription, we will tell the school's contact by email.