Privacy Policy

Last updated: 6 August 2026

About this policy

This Privacy Policy explains how Session Review handles personal information collected through our mobile apps — Session Review Educator and Session Review Learner — and our website at sessionreview.com.au (together, the "Services").

Session Review is a partnership based in Terrey Hills, New South Wales 2084, Australia (ABN 73 522 572 155). For the purposes of the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), Session Review is the entity responsible for the personal information handled through the Services.

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services. You can contact us any time at admin@sessionreview.com.au.

What Session Review does

Session Review is a one-way tool for sharing session notes from a teacher or tutor to a student or their parent/guardian. Teachers enter a short summary after each session in the Educator app and share it using a six-character code (or QR card). Students or parents view those notes in the Learner app by entering the code. A teacher may also share individual written notes with a particular student. There is no messaging back to the teacher, and no public content.

Information we collect

We collect only what we need to run the Services.

a) Account details. Each app uses an account so information stays with you if you change devices. Depending on how you sign in, this may include your name, your email address, and an identifier from Apple. If you sign in with Apple and use Hide My Email, we only ever receive the relay address Apple generates. We never receive your Apple ID password.

b) Profile details. Teachers and learners can set a display name and an optional profile photo. A teacher's display name and a small copy of their profile photo are shown to the students who hold one of their codes, so the student knows whose sessions they are looking at. A learner's display name is shown to the teacher whose code they have redeemed, so the teacher can see who has joined.

c) Information teachers enter. In Session Review Educator, a teacher may enter a student's first name or nickname, short lesson notes (such as what was covered and what to practise next), and attendance, in order to share it with that student or their parent/guardian. We ask teachers to use first names or nicknames only and to avoid sensitive personal information.

d) Notes. Teachers and learners can write their own notes. These are private to the person who wrote them and are stored on that person's device, except where a teacher explicitly links a note to a student and shares it — in which case that note is shared with that student only.

e) Sharing codes. The Services generate six-character codes (and QR cards) that link a teacher's notes to the student who holds the code. When a code is redeemed, we record which account redeemed it so that a code cannot be used by two different accounts.

f) Subscription status. If you purchase an optional Pro subscription, we store whether your account has an active subscription and its renewal date. Payment is processed entirely by Apple — we never see or store your payment card, billing address, or Apple ID credentials.

g) Technical and diagnostic data. Like most apps, we may collect limited technical information needed to operate the Services and keep them reliable, such as device type, operating system, app version, and crash or performance diagnostics.

h) Usage and analytics data. We use Google Firebase Analytics to understand how the apps are used so we can fix problems and improve them. This includes information such as which screens are opened, general device information, and an app-generated identifier. We do not use this information for third-party advertising, and we do not combine it with session notes to identify a child.

i) Website information. When you visit our website, our website provider may collect standard server information (such as your browser type and general location) and may use limited cookies to operate the site.

How we use information

We use personal information to:

• provide the core function of the Services (sharing session notes via codes);
• keep the Services reliable, secure, and free of errors;
• understand usage and improve the apps;
• confirm whether an optional subscription is active;
• respond to your questions and support requests;
• meet our legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

How we store and share information

We use Google Firebase (a Google service) to run the Services — Firebase Authentication for sign-in, Firebase Realtime Database to store and sync session notes between the Educator and Learner apps, and Firebase/Google Analytics for the usage information described above. Google processes this data on our behalf as our service provider. Notes and drafts are also stored locally on your device.

We may disclose personal information:

• to service providers who help us operate the Services (such as Google Firebase and Apple);
• if required by law, or to protect the rights, safety, or property of Session Review, our users, or others.

What a student can see

This is the core of the product, so it deserves saying plainly. A student who holds a teacher's code can see the sessions recorded against that code, any notes that teacher has explicitly shared with them, and that teacher's display name and profile photo. They cannot see the teacher's other students, the teacher's private notes, or any other account details. Other teachers cannot see your data at all. A teacher can withdraw access at any time by removing the student, which frees the code.

Overseas disclosure

Our service providers, including Google Firebase, may store and process data on servers located outside Australia. Where personal information is disclosed overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

Data retention

We keep personal information only for as long as necessary to provide the Services or as required by law. Teachers can delete a student and their associated notes in the Educator app at any time. You can delete your entire account and its data from Settings in either app. You can also ask us to delete information we hold about you (see "Your rights and choices").

Children's privacy

Session Review is designed to be set up by adults — teachers in the Educator app, and parents, guardians, or adult learners in the Learner app.

The Learner app uses an account, and when it is first opened it asks for a display name so the student's teacher can recognise who has joined. A parent, guardian, or teacher should set this up for a child, and should enter a first name or nickname only. The apps do not ask a child for an address, phone number, date of birth, or any other personal detail beyond a display name and an optional profile photo.

The notes a teacher shares may relate to a student who is a child. To protect children:

• we ask teachers to enter only a first name or nickname and lesson-related notes, and to avoid sensitive information;
• a learner account only ever has read access to the sessions and notes tied to a code an adult has given them;
• a student can never see another student's records.

We do not knowingly collect personal information directly from a child without the involvement of a parent, guardian, or teacher. If you believe a child's information has been shared with us and should be removed, contact us at admin@sessionreview.com.au and we will delete it promptly.

Security

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access, including transmitting data over encrypted connections (HTTPS) and applying database security rules that restrict every account to its own records, with code-scoped access for enrolled learners. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Your rights and choices

You may ask us to:

• access the personal information we hold about you or your child;
• correct information that is inaccurate or out of date;
• delete information we hold about you or your child.

To make a request, email admin@sessionreview.com.au. We will respond within a reasonable time (usually within 2 business days) and may need to verify your identity first. Teachers can also remove students and their notes directly in the Educator app, export their data from Settings, and delete their account entirely.

Complaints

If you have a concern about how we have handled your personal information, please contact us first at admin@sessionreview.com.au so we can try to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and post the new version on this page.

Contact us

Session Review

Terrey Hills, New South Wales 2084, Australia

ABN 73 522 572 155

Email: admin@sessionreview.com.au