Privacy Policy

Who we are

findmeaschool.au is operated by Portable Labs, based in Melbourne, Victoria, Australia (“we”, “us”, “our”). findmeaschool.au helps parents and carers discover and compare Australian schools. This policy explains what personal information we collect, why, and how we handle it.

What we collect

• Account information — your email address and password (stored as a hash), and profile details you choose to add.
• Child profiles (optional) — a child's name and year level, entered voluntarily by you to support school planning features. You control this information and can edit or delete it at any time.
• Chat messages — messages you send to our AI assistant, and the responses generated.
• Shortlists and preferences — schools you save and settings you choose.
• Feedback — anything you submit through our feedback form.
• Usage and log data — technical information such as IP address, browser type, pages viewed and timestamps, collected automatically to operate and secure the service.
• Cookies — we use cookies for authentication (keeping you signed in) and to remember your theme preference. We do not use advertising cookies.

Why we collect it

• To provide and personalise the service, including accounts, shortlists and planning features.
• To operate the AI assistant and respond to your questions.
• To respond to feedback and support requests.
• To maintain security, prevent misuse and debug problems.
• To improve the product, including using aggregated, de-identified usage patterns.

Third-party service providers

We use a small number of service providers to run findmeaschool.au:

• Supabase — database and authentication hosting. Your account data, profiles, shortlists and messages are stored on Supabase infrastructure (Postgres).
• Anthropic — messages you send to the AI assistant are processed via Anthropic's API to generate responses.
• Google — if you choose to sign in with Google (when available), Google provides us with your email address and basic profile information for authentication.

These providers process data on our behalf under their own privacy and security commitments. We do not sell your personal information.

Overseas disclosure

Some of our service providers, including Supabase and Anthropic, may store or process data on servers located outside Australia (including the United States). By using findmeaschool.au you acknowledge that your information may be transferred to, and stored in, jurisdictions with different privacy laws. We take reasonable steps to ensure providers handle your information consistently with the Australian Privacy Principles.

Children's information

findmeaschool.au is a service for adults — parents, carers and guardians. We do not knowingly collect information directly from children. Any information about a child (such as a name or year level in a child profile) is entered by, and remains under the control of, the parent or guardian account holder, who can update or delete it at any time.

Retention

We keep your personal information while your account is active. When you delete your account, or ask us to, we delete or de-identify your personal information within a reasonable period, except where we are required to retain it by law or for legitimate purposes such as security logs, which are kept for a limited time.

Your rights

You can access, correct or request deletion of your personal information at any time. Much of your data can be managed directly in the app; for anything else, contact us at contact@portable-labs.com and we will respond within a reasonable period. If you have a privacy concern we cannot resolve, you may complain to the Office of the Australian Information Commissioner (OAIC).

Australian Privacy Act

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we aim to meet those standards regardless of whether we are formally required to as a small operator.

Security

We take reasonable steps to protect your information, including encryption in transit (HTTPS/TLS), hashed passwords, role-based access controls, and limiting access to production data. No online service can guarantee absolute security, so please use a strong, unique password.

Changes to this policy

We may update this policy as the product evolves. We will post the updated version on this page with a new effective date, and for material changes we will take reasonable steps to notify you (for example, by email or an in-app notice).

Contact

Questions or requests about privacy: Portable Labs, Melbourne VIC, Australia — contact@portable-labs.com.