Who we are
Skillia is a school platform — a website and an Android app — used by schools to run enrolment, attendance, learning, mathematics practice and family communication. Each school controls its own records; Skillia processes them on the school’s behalf. For anything about your child’s records, your first contact is the school. For anything about the platform itself, or to ask about your data or have your account closed, use the request form at /account-deletion, which reaches the platform operator directly.
What we collect
Only what a school needs to operate: names, contact details, class membership, attendance records, homework and lesson progress, mathematics working and the checks made on it, Qur’an memorisation reviews, teacher observations with their reasons, and applications submitted through a school’s enrolment form. Pupils signing in with a student ID have no email address collected at all. We do not collect data for advertising, and we do not sell or share personal information for marketing.
Children’s information
Most records on this platform describe children, and the design treats that as the default risk. Every record is scoped to one school by row-level security enforced in the database; a teacher sees only their classes, a family only their own children. A pupil’s username deliberately contains no date of birth.
AI features
AI drafts of marks, feedback, reports and recommendations never reach a pupil until a member of staff approves them. The two tutors answer a pupil’s question directly, under these rules: the question is screened for safety before any model is asked, and a flagged question is held for a teacher and never reaches the model; the mathematics tutor is never given the answer and cannot contradict the engine that checks the working; and a pupil or parent can report any reply from inside the app. Text sent to a model goes to the school’s configured provider (Microsoft Azure AI Foundry), whose terms do not permit training on it.
The Skillia app
Signing in on a phone stores a sign-in token in the phone’s secure keystore. A copy of what you last viewed is kept on the phone so it opens offline, and is wiped when you sign out. If you allow notifications, the app sends Skillia a push address, the phone’s model name and the app version; these are deleted when you sign out or close your account. A notification’s title and the first part of its text pass through Expo’s push service and Google Firebase Cloud Messaging to reach your phone, and may appear on the lock screen; you can mute categories or set quiet hours in the app. The app uses no advertising identifier, no location, no contacts and no analytics or crash-reporting service.
Who else handles data
Supabase (the database, Australia region), Microsoft Azure (hosting and AI, Australia East), Brevo (sending email), and, for the app, Expo and Google Firebase Cloud Messaging (delivering notifications). Each processes data only to provide its service. Every request to the platform records the time, the action, the network address and the browser or app identifier in an audit log, for security; the school can read its own audit log.
Access and correction (APP 12 and 13)
Parents and pupils can see their own records in the app at any time. To correct something, ask the school — corrections are made as new, attributed entries rather than silent edits, so the history stays honest. You may ask the school, or us through /account-deletion, for a copy of the personal information held about you.
Closing an account and deleting data
Anyone with a Skillia login can ask for their account to be closed — in the app (Settings → Delete my account) or on the web at /account-deletion, without signing in. A parent may ask for their child’s account. We record the request and pass it to the person’s school, which acts on it, normally within 30 days. Closing an account stops sign-in at once and deletes the registered phones and notification settings immediately. Records the school is required by law to keep — such as enrolment, attendance, finance and child-protection records — are kept under the school’s retention policy and deleted when that period ends. Security audit entries are kept for the same reason. When a school leaves the platform, its data is exported to the school and then deleted.
Breaches
If a data breach is likely to result in serious harm, we notify affected schools and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme.
Contact and complaints
Privacy questions: your school office first, or the platform operator through the request form at /account-deletion. You may complain to the OAIC (oaic.gov.au) if a concern is not resolved.