Privacy Policy

1. Who we are

Learna ("we", "us", "our") is a New Zealand-based software platform that provides AI-powered reporting and analytics for educators using Google Classroom. Our website is www.learna.co.nz.

We are committed to protecting your personal information in accordance with the Privacy Act 2020 (NZ) and applicable Google API Services User Data Policy requirements.

2. Information we collect

When you use Learna, we collect:

• Google account data — your name, email address, and profile picture, obtained via Google OAuth.
• Google Classroom data — course names, class rosters (student names and email addresses), assignment titles, submission statuses, and grades — accessed only for classes you explicitly authorise.
• Usage data — pages visited, features used, and error logs, used to improve the platform.
• Organisation details — institution name, campus, and role, provided during onboarding.

We do not collect payment information directly. We do not collect sensitive personal information beyond what is described above.

3. How we use your information

We use collected data to:

• Generate NZCEL progress reports and engagement analytics for teachers and administrators.
• Provide AI-assisted insights about student performance using the Anthropic API.
• Authenticate you securely via Google Sign-In.
• Operate, maintain, and improve the Learna platform.
• Respond to support requests.

We do not sell your data to third parties. We do not use student data for advertising.

4. Data access and sharing

Your data is accessible only to authorised users within your organisation (teachers and administrators at your institution). Data is strictly isolated per tenant — no other organisation can access your data.

We share data with the following third-party service providers solely to operate the platform:

Each provider has their own privacy policy and data processing agreements. Data transferred to providers in the USA is subject to standard contractual clauses or equivalent safeguards.

5. Google API data use

Learna's use of data obtained via Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request Google Classroom scopes necessary to generate reports.
• Google Classroom data is not used for any purpose unrelated to providing the Learna service to you.
• We do not use Google data to serve advertisements.
• We do not allow humans to read Google user data unless you have explicitly consented, it is necessary for security, or required by law.

6. Data retention

We retain your data for as long as your organisation has an active Learna account. When an organisation offboards:

• All personal data and Classroom data is deleted within 30 days of account termination.
• Generated reports stored in Cloudflare R2 are deleted at the same time.
• Anonymised, aggregated usage statistics may be retained indefinitely.

7. Your rights (NZ Privacy Act 2020)

Under the Privacy Act 2020, you have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Withdraw consent to data processing (this may limit your ability to use the platform).

To exercise these rights, email support@learna.co.nz. We will respond within 20 working days as required by law.

8. Security

We implement industry-standard security measures including HTTPS encryption in transit, encrypted storage, JWT-based authentication, multi-tenant data isolation, and Google RISC (Risk and Incident Sharing and Coordination) for account compromise detection.

No method of transmission over the internet is 100% secure. In the event of a data breach affecting your rights, we will notify affected users and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

9. Cookies

We use session cookies for authentication only. We do not use tracking or advertising cookies. You can disable cookies in your browser, but this will prevent you from logging in.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of Learna after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or complaints, contact us at:

If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner at www.privacy.org.nz.