Privacy policy
Last updated 31 October 2026.
Scoreko is run by JMM Consulting Pty Ltd (ABN 98 681 247 914), New South Wales, Australia ("we", "us"). This policy explains what we collect, why, who sees it, and your choices. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
What we collect
About you, the parent:
- your email address, used to send you a one-time sign-in code (there are no passwords);
- which children are in your family account;
- your language choice for reports.
About your child:
- a nickname and school year (Year 3 to 6). Please do not use your child's real full name;
- an optional 4-digit PIN, stored scrambled so we cannot read it;
- practice results: questions attempted, answers chosen, time per question, scores, and labels for common mistakes.
We do not collect a child's email, photo, birth date, location, contacts or device identifiers. We show no ads and use no advertising or tracking tools.
Why we use it
- To let you sign in and manage your family account.
- To mark answers and show scores.
- To build your parent report, using fixed rules in our own software.
- To compare results with other children, using only first attempts and never names or details.
- To keep the service secure, fix problems and meet legal duties.
No artificial intelligence receives your child's data. We do not sell personal information, and we do not use it for advertising.
Who can see it
- You, and a second parent if you invite one. A second parent sees reports only.
- Your child sees their own practice and results.
- Our database host, Supabase, in the Sydney, Australia region.
- An email service that sends sign-in codes. We will name it here before sign-up opens.
- Authorities, if the law requires.
Not switched on
Crash reporting, product analytics and payments are not active. We will update this policy and tell you before we turn any of them on.
How we protect it
Data is stored in Sydney, Australia, and is encrypted in transit and at rest. Each family's data is kept apart from other families by access rules that we test. Sign-in codes work once and expire after 10 minutes. If a breach is likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner (OAIC).
Deleting your account
The primary parent can ask to delete the account in Settings, or by emailing welcome@scoreko.com.au. The account is locked for 30 days so you can change your mind. After 30 days, everything is permanently deleted: parent email, child profiles, results and reports.
Your rights
You can ask to see, correct or delete the information we hold about you or your child by emailing welcome@scoreko.com.au. We reply within 30 days and may ask you to confirm your identity.
Children
Children use Scoreko only through a parent's account. We collect as little as we can, never ask children for personal details, and the app has no chat or messaging.
Complaints
Contact us first at welcome@scoreko.com.au. If you are not satisfied, you can complain to the OAIC at www.oaic.gov.au or 1300 363 992.
Changes
We will post changes here and email you about important ones before they start.