Last updated: 17 June 2026
This Privacy Policy explains how The Forktree Project handles personal information collected through the Forktree education platform.
The Forktree Project is a registered charity with the Australian Charities and Not-for-profits Commission (ACNC). ABN: 99 246 685 618.
We aim to handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply.
We collect only the information we need to provide and support the education platform. This may include:
We do not intentionally collect sensitive information through the platform. Some activities include open-ended questions, so responses may contain personal reflections. We treat this information with care and do not use it to build profiles of students.
The platform is mainly used by Australian schools, teachers and students, including students under 18. Student access is arranged through the relevant school or teacher.
Schools and teachers are responsible for arranging any student or parent notices, consents or permissions required by their school policies or applicable laws.
We collect only what we need for the education program. We do not use student information to build marketing profiles or to advertise to students.
The Forktree Project supports the goals of the Australian Children's Online Privacy Code and intends to align its handling of children's information with the Code's requirements as they apply and when they take effect.
We use information to:
We do not sell personal information. Student and user information may be accessed by The Forktree Project staff, contracted technical service providers, and authorised school staff for the relevant program.
We may share de-identified or aggregated program results with schools, partners or supporters. We do not publish or share identifiable student information unless required by law or with appropriate permission.
We use trusted service providers to host, operate and improve the platform:
| Provider | Website | Purpose |
|---|---|---|
| Windy Bit Pty Ltd | windybit.co | app development, maintenance and technical support |
| Supabase | supabase.com | authentication and database services |
| Vercel | vercel.com | hosting, analytics and performance monitoring |
| Cloudflare | cloudflare.com | hosting, security, caching and platform services |
| Sentry | sentry.io | error monitoring and diagnostics |
| Resend | resend.com | email delivery |
Our core database and authentication are hosted in Australia (Sydney). Some providers — including our analytics, error-monitoring and email-delivery services — may store or process information in other countries, mainly the United States, and only as needed to provide their services. Where information is processed outside Australia, we take reasonable steps to use reputable providers and protect the information.
The platform uses essential cookies for login and security. To understand how the platform is used and keep it working well, we record basic usage information such as the pages visited, the address of the page you came from, your browser and device type, and how long pages are used. We also use analytics, performance and error-reporting tools for the same purpose. This information is used only to operate, support and improve the platform — we do not use advertising trackers and we do not sell it.
We keep personal information only for as long as we need it. We generally remove or de-identify contact details, such as email addresses, within 12 months after an account becomes inactive or a program ends. We keep program records — such as quiz results, survey and form responses, and learning progress — for longer to support schools, evaluate and improve our programs, and maintain appropriate records; where we no longer need them in an identifiable form, we de-identify them. Usage and error logs are kept for up to 12 months. We will delete or de-identify student information sooner on request from the relevant school, unless we are required to keep it by law.
Schools or users can ask to access, correct or delete personal information by contacting us. Privacy complaints can be sent to the same contact email. We will respond within a reasonable time and may need to verify the request. If you are not satisfied with our response, you can refer your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We take reasonable steps to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. No online service can be guaranteed to be completely secure.
If a data breach occurs, we will assess it and notify affected people and relevant authorities where required by law.
We may update this Privacy Policy from time to time. The latest version will be available on this page.
For privacy questions or requests, please contact:
The Forktree Project
Email: hello@theforktreeproject.com
Address: c/o Winter & Co, 67 Broadway, Glenelg South SA 5045, Australia