Privacy Policy

• Student first name and year group, entered at the start of the assessment to personalise the report.
• Answers to assessment questions, with the time taken and the engine's branching decision for each response, so we can produce a strand-by-strand report.
• An email address, only if a parent or carer chooses to submit one at the end to receive the full report.
• Standard server logs (IP address, user agent, timestamp) retained briefly for security and abuse prevention.

We do not ask for, or store, a student's last name, date of birth, school, address, phone number, or any other identifying information.

• To run the adaptive assessment and pick the next question.
• To compile the personalised report and deliver it to the email address provided.
• To improve the question bank and engine over time, in aggregate form (e.g. average difficulty, common gaps).

We do not sell, rent, or share data with third parties for marketing. We do not run advertising trackers on the assessment.

• Assessment data is stored in Supabase (PostgreSQL hosted on AWS) with row-level security.
• Report emails are sent via Resend; only the email address you submit is shared with Resend, solely to deliver that one email.
• The website is delivered through Vercel and fronted by Cloudflare for security and performance.

• Assessment sessions and responses are retained while NumPath is operating, primarily so the same family can view their report again later.
• You can request deletion of an assessment record at any time by emailing hello@numpath.com.au.
• Email addresses are kept until you ask us to remove them, or you click an unsubscribe link in any email we send.

The student-facing assessment uses no third-party cookies. The admin panel at /admin uses a single first-party cookie to keep authorised staff signed in. No analytics or advertising cookies.

NumPath is designed for use by primary school students under the supervision of a parent, carer, or teacher. We collect only the minimum required to run the diagnostic (first name, year group, answers) and we do not enable account creation, social features, or content uploads for students.

Under the Australian Privacy Principles, you can ask us to access, correct, or delete personal information we hold about your child. Email hello@numpath.com.au and we'll respond within 30 days.

If we change how we collect or use data, we'll update this page and bump the "Last updated" date. Material changes will be flagged at the top of the page.

NumPath is a pilot product run by Ben Hampton and Matt. For any privacy question or request, email hello@numpath.com.au.