Privacy

Who controls school data

Each school decides how it uses Myntix and manages the people in its organisation. Myntix operates the service on the school's behalf. Schools are responsible for the accuracy of information they provide and for assigning staff access.

Information we handle

School account information can include names, usernames, email addresses, roles, year levels, classes, groups, timetable assignments, and optional profile photos. We also hold the credits, reasons, balances, goals, reward requests, activity history, and audit records needed to run the program. Login, session, and operational records help secure and support the service.

Schools can add or import users and related information, including through supported school-system integrations. Google and Microsoft sign-in may provide account details when a school enables those options.

How we use information

We use school information to provide sign-in, staff and student views, credit records, reward requests, groups and timetables, reporting, support, security, and audit history. We do not use student information for advertising or sell it.

If you request a walkthrough, we use your name, work email, organisation, and any optional message to respond. The public website may use Cloudflare Web Analytics and Cloudflare traffic and security services to understand visits and protect the site. We do not run advertising pixels or a separate analytics service inside the school app.

Access and service providers

School administrators and teachers can access student details needed for their work. Students can see their own details. Myntix does not currently provide parent accounts. Authorised Myntix support staff may access information when needed to operate, support, or secure the service.

Our own application infrastructure and school databases are hosted in Australia. We use Cloudflare for website traffic, security, analytics, and encrypted backups; Resend for email; and Google or Microsoft for sign-in where a school enables them. These providers may process limited service data outside Australia under their own arrangements. We do not claim that every network request or provider record remains in Australia.

Security

We use access controls, account security measures, audit records, and backups to protect the service. No online system can be guaranteed completely secure. We investigate suspected incidents and work with affected schools on any notifications required by law.

Access, correction, and complaints

Students and families should contact their school to request access to, or correction of, school records or to raise a privacy concern. Schools can contact support@myntix.com for platform support, exports, deletion requests, or privacy complaints. We will work with the school to investigate and respond.

Retention and deletion

Schools can export data while their organisation is active. We prioritise verified school deletion requests and complete deletion within seven days. This includes the organisation's live database, uploaded files, and all encrypted backup copies, whether removed by our offboarding tools or manually by support. See our Data Retention page for more detail.