Legal

Privacy Policy

Last updated: 15 April 2025

Lesson Creator (“we”, “us” or “our”) is operated by Scott Gruar, based in Queensland, Australia. We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what information we collect, how we use it, and your rights in relation to it.

By creating an account or using Lesson Creator at www.lessoncreator.com.au, you agree to the practices described in this policy.

1. What Information We Collect

1.1 Account information

  • Email address
  • Display name (when signing in with Google)
  • Account type (free or Plus)

1.2 Usage information

  • Subject, year level and learning intention you enter when generating a lesson
  • Which tools you select (e.g. lesson plan, worksheet, quiz)
  • Number of lessons generated and timestamps
  • Files you upload for text extraction (processed in-memory; not stored)

1.3 Technical information

  • Browser type and operating system (collected automatically by our analytics provider)
  • Pages visited and time spent on the site
  • IP address (anonymised where possible)

We do not collect sensitive information (as defined in the Privacy Act), financial card details, or information about your students. We do not collect information from people under the age of 13.

2. How We Collect Information

We collect information:

  • Directly from you — when you create an account, sign in, or use the lesson generation tools.
  • From Google — when you choose to sign in with Google OAuth, we receive your email address and name.
  • Automatically — through our analytics platform (PostHog) when you browse and use the site.

3. How We Use Your Information

We use your personal information to:

  • Create and manage your account
  • Generate AI-powered lesson resources based on your inputs
  • Enforce usage limits on the free tier (3 lessons per week)
  • Process payments for Plus subscriptions
  • Send transactional emails (account verification, password reset)
  • Improve our service through aggregate, de-identified usage analytics
  • Respond to support enquiries

We do not use your information for direct marketing without your consent, and we do not sell your data to third parties.

4. Disclosure to Third Parties

We share information only as necessary to operate the service:

  • OpenAI — your lesson inputs (learning intention, subject, year level, source text) are sent to OpenAI’s API to generate content. OpenAI processes this data in the United States. See OpenAI’s privacy policy.
  • Google Firebase & Cloud — we use Firebase Authentication and Google Cloud Firestore/Storage to store account data and generated files. Data is stored in the United States.
  • PostHog — usage analytics, hosted in the United States.
  • Stripe — payment processing for Plus subscriptions. Stripe is PCI-DSS compliant and stores no card data on our servers.

We do not disclose your personal information to government agencies except where required by law.

5. Cross-Border Disclosure (APP 8)

As described above, some of your personal information is processed or stored by third-party providers in the United States. By using Lesson Creator, you consent to this cross-border disclosure. We take reasonable steps to ensure these providers maintain privacy standards comparable to the APPs.

6. Data Security (APP 11)

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. Measures include:

  • HTTPS encryption for all data in transit
  • Firebase Authentication for secure sign-in
  • Firestore security rules restricting access to your own data
  • Signed, time-limited URLs for generated file downloads

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you of any data breach that is likely to result in serious harm, as required by the Notifiable Data Breaches scheme.

7. Retention

We retain your account information for as long as your account is active. Usage logs are retained for a rolling 90-day period for analytics purposes. Generated lesson files are stored for a limited period on a rolling basis for Plus members; free-tier downloads use time-limited links and are not permanently stored against your account.

When you delete your account, we will delete or de-identify your personal information within 30 days, except where retention is required by law.

8. Access and Correction (APPs 12 & 13)

You have the right to access the personal information we hold about you, and to request correction of inaccurate information. To exercise this right, contact us at hello@lessoncreator.com.au. We will respond within 30 days.

9. Anonymity (APP 2)

Where practicable, you may interact with parts of our site (such as the public homepage) without identifying yourself. However, an account with a verified email address is required to use the lesson generation tools.

10. Cookies and Analytics

We use PostHog for product analytics. PostHog may set cookies or use local storage to identify your browser session. You can opt out of analytics tracking by using your browser’s “Do Not Track” setting or a browser extension that blocks tracking scripts. Declining cookies may affect some functionality.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new “last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact & Complaints

If you have a question or complaint about how we handle your personal information, please contact us:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

← Back to home · Terms of Service