Privacy Policy

Last updated: 2 October 2026

About this policy

This Privacy Policy explains how Session Review handles personal information collected through our mobile apps — Session Review Educator and Session Review Learner, on iPhone, iPad and Android — and our website at sessionreview.com.au (together, the "Services").

Session Review is a partnership based in New South Wales, Australia. For the purposes of the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), Session Review is the entity responsible for the personal information handled through the Services.

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services. You can contact us any time at admin@sessionreview.com.au.

What Session Review does

Session Review is a one-way tool for sharing session notes from a teacher or tutor to a student or their parent/guardian. Teachers enter a short summary after each session in the Educator app and share it using a six-character code (or QR card). A teacher can also create a class, which has one code that any number of students can join. Students or parents view those notes in the Learner app by entering the code. A teacher may also share individual written notes with a particular student. There is no messaging back to the teacher, and no public content.

Information we collect

We collect only what we need to run the Services.

a) Account details. Each app uses an account so your information stays with you if you change devices, including moving between iPhone and Android. Depending on how you sign in, this may include your name, your email address, and an identifier from Apple or Google. If you sign in with Apple and use Hide My Email, we only ever receive the relay address Apple generates. We never receive your Apple ID or Google Account password.

b) Profile details. Teachers and learners can set a display name and an optional profile photo. A teacher's display name and a small copy of their profile photo are shown to the students who hold one of their codes, so the student knows whose sessions they are looking at. A learner's display name is shown to the teacher whose code they have redeemed, including on a class roster, so the teacher can see who has joined.

c) Information teachers enter. In Session Review Educator, a teacher may enter a student's first name or nickname, short lesson notes (such as what was covered and what to practise next), and attendance, in order to share it with that student or their parent/guardian. We ask teachers to use first names or nicknames only and to avoid sensitive personal information.

d) Notes. Teachers and learners can write their own notes. These are stored with your account so they stay in step across your devices, and they are private to the person who wrote them — except where a teacher explicitly links a note to a student and shares it, in which case that note is shared with that student only.

e) Sharing codes. The Services generate six-character codes (and QR cards) that link a teacher's notes to the student or class that holds the code. When a code is redeemed, we record which account redeemed it so that a student's code cannot be used by two different accounts.

f) Subscription status. If you purchase the optional Session Review Pro subscription, we store whether your account has an active subscription, its renewal or expiry date, and whether it was bought through the App Store or Google Play, so that Pro works wherever you sign in. Payment is processed entirely by Apple or Google — we never see or store your payment card, billing address, or Apple ID or Google Account credentials.

g) Technical and diagnostic data. Like most apps, we may collect limited technical information needed to operate the Services and keep them reliable, such as device type, operating system, app version, and crash or performance diagnostics. Apple and Google may also share aggregated crash and performance reports with us through their developer tools.

h) Usage and analytics data. The iPhone and iPad apps use Google Firebase Analytics to understand how the apps are used so we can fix problems and improve them. This includes information such as which screens are opened, general device information, and an app-generated identifier. The Android apps do not include Firebase Analytics. We do not use this information for third-party advertising, and we do not combine it with session notes to identify a child.

i) Website information. When you visit our website, our website provider may collect standard server information (such as your browser type and general location) and may use limited cookies to operate the site.

How we use information

We use personal information to:

• provide the core function of the Services (sharing session notes via codes);
• keep your account and notes in step across your devices;
• keep the Services reliable, secure, and free of errors;
• understand usage and improve the apps;
• confirm whether an optional subscription is active;
• respond to your questions and support requests;
• meet our legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

How we store and share information

We use Google Firebase (a Google service) to run the Services — Firebase Authentication for sign-in, Firebase Realtime Database to store and sync sessions, notes and profiles between your devices and between the Educator and Learner apps, and, in the iPhone and iPad apps, Firebase/Google Analytics for the usage information described above. Google processes this data on our behalf as our service provider. A copy of your data is also kept on your device so the apps work offline.

We may disclose personal information:

• to service providers who help us operate the Services (such as Google Firebase, Apple and Google Play);
• if required by law, or to protect the rights, safety, or property of Session Review, our users, or others.

What a student can see

This is the core of the product, so it deserves saying plainly. A student who holds a teacher's code can see the sessions recorded against that code, any notes that teacher has explicitly shared with them, and that teacher's display name and profile photo. A student in a class sees the sessions written for that class. They cannot see the teacher's other students, the teacher's private notes, or any other account details. Other teachers cannot see your data at all. A teacher can withdraw access at any time by removing the student, which frees the code.

Overseas disclosure

Our service providers, including Google Firebase, may store and process data on servers located outside Australia. Where personal information is disclosed overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

Data retention and deletion

We keep personal information only for as long as necessary to provide the Services or as required by law. Deleted sessions and notes go to Trash, where they can be restored for 30 days before being removed for good. Teachers can delete a student and their associated notes in the Educator app at any time.

You can delete your entire account and its data from Settings → Delete account in either app, on any device. You can also ask us to delete your account or data by email. Our Delete your data page (sessionreview.com.au/delete-account) explains both ways, what is deleted, and what is kept.

Children's privacy

Session Review is designed to be set up by adults — teachers in the Educator app, and parents, guardians, or adult learners in the Learner app.

The Learner app uses an account, and when it is first opened it asks for a display name so the student's teacher can recognise who has joined. A parent, guardian, or teacher should set this up for a child, and should enter a first name or nickname only. The apps do not ask a child for an address, phone number, date of birth, or any other personal detail beyond a display name and an optional profile photo.

The notes a teacher shares may relate to a student who is a child. To protect children:

• we ask teachers to enter only a first name or nickname and lesson-related notes, and to avoid sensitive information;
• a learner account only ever has read access to the sessions and notes tied to a code an adult has given them;
• a student can never see another student's records.

We do not knowingly collect personal information directly from a child without the involvement of a parent, guardian, or teacher. If you believe a child's information has been shared with us and should be removed, contact us at admin@sessionreview.com.au and we will delete it promptly.

Security

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access, including transmitting data over encrypted connections (HTTPS) and applying database security rules that restrict every account to its own records, with code-scoped access for enrolled learners. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Your rights and choices

You may ask us to:

• access the personal information we hold about you or your child;
• correct information that is inaccurate or out of date;
• delete information we hold about you or your child.

To make a request, email admin@sessionreview.com.au. We will respond within a reasonable time (usually within 2 business days) and may need to verify your identity first. You can also act directly in the apps: teachers can remove students and their notes, both apps can export or download your data from Settings, and either app can delete your account entirely.

Complaints

If you have a concern about how we have handled your personal information, please contact us first at admin@sessionreview.com.au so we can try to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and post the new version on this page.

Contact us

Session Review
New South Wales, Australia

Email: admin@sessionreview.com.au