ZING Activ Teacher Portal · Last reviewed June 2026
«ZING Activ Pty Ltd» (ABN «…») (“ZING Activ”, “we”) provides a curriculum, teaching and assessment platform to Australian primary schools. This policy explains how we handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and applicable state privacy laws.
The school (and its diocese or system, where applicable) is the data controller and owner of all records and anything staff create. ZING Activ is the data processor — we hold and process the data only to provide the service, on the school’s instructions, and never sell it or use it to train external models.
Students: First name or chosen display name (no full legal name required); Year level and class; Optional photo (only if a school adds one); Learning activity — lessons viewed, A–E judgements, work samples. No student email addresses, dates of birth or home addresses are collected. Students join class activities with a class code and pick their name — no student logins.
Students with disability: NCCD level, category and adjustments (for the relevant students); Life Skills flag. Required for the school’s NCCD and equity-reporting obligations. Treated as sensitive information.
Staff (teachers, leaders): Name, work email, role; School association.
School: School name, ABN, state, sector; Contact details, subscription/billing reference.
To deliver lessons, track curriculum coverage, support assessment and reporting (including A–E grades and registration evidence), and provide the service to your school. We do not sell personal information, and we do not use student data to train external AI models.
All school and student records are stored and processed in Australia (AWS ap-southeast-2, via Supabase). Data is not stored offshore.
We use a small set of sub-processors to run the service. Student personal information is held only in Australia (Supabase).
We do not otherwise disclose personal information except where required by law.
Data is encrypted in transit and at rest. Each school's data is isolated by row-level security. Photos, work samples and uploaded materials are stored in private buckets and served only via short-lived signed links. Staff authenticate with a password or magic link; students do not log in.
Records are kept while the school holds an active subscription and for as long as the school needs them for reporting and registration evidence. On account closure, data is deleted or exported back to the school on request.
We deliberately collect minimal information about students — a first or chosen name, year and class, optional photo, and learning activity. Schools add any identifiable information (such as photos) under their own consent processes. Students do not create accounts or provide email addresses.
You can access, correct, export or request deletion of personal information. Most of this can be done in the portal; for anything else, or to make a privacy complaint, contact us at «privacy@…». If you are not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC).
We may update this policy; we will note the review date above and notify schools of material changes. Governing law: «New South Wales, Australia».
See also our Terms of Service, which confirm your school owns the content it creates.
Contact: «privacy@zingactivdigital.com» · «postal address».