Privacy & student data

Under the Privacy Act 2020, your school's Board of Trustees is the agency responsible for student personal information. ScoreSyncHQ simply holds and processes it on your school's behalf.

We never sell, rent or share school data, and we never use student information to advertise or train anything. Your school can ask for its data back, or ask us to delete it, at any time.

For students: first and last name, year level, class or room, house, team, and their points history.

For staff: name, email address, role, and the date they last signed in.

We do not collect home addresses, dates of birth, ethnicity, health information, behavioural notes, photos of students, or any government identifiers such as NSN.

Only to run your house points programme: awarding points, showing live standings, recognising achievement, and giving your leadership team a record of what was awarded and by whom.

Nothing is used for any other purpose.

Every school lives in its own private space. Staff at one school can never see another school's students, points or settings — this is enforced by the database itself, not just the screens.

Within your school, what each person sees depends on their role. A parent coach or volunteer, for example, only sees the students in the team they were assigned to.

The public scoreboard and homepage rankings show house totals and your school name only. Student names never appear on any public page.

All traffic is encrypted in transit, and data is encrypted at rest with our hosting provider.

Access is controlled by role, and every point award, correction and administrative action is written to an audit log your school leaders can review.

Points records are append-only: a mistaken award is reversed with a matching correction rather than quietly erased, so the history always adds up.

Your school controls retention. Students can be archived at the end of a year, or deleted outright, from the Students screen.

You can export your student list and points history at any time. If your school closes its account, we remove its records from the live system.

Students and parents have the right to ask what information is held about them and to have it corrected.

Those requests go to your school, as the agency responsible. School administrators can view, correct or remove a student's details directly, and we will help your school respond if anything more is needed.

ScoreSyncHQ is designed to operate in accordance with the Privacy Act 2020. Your Board of Trustees remains the agency responsible for student personal information; ScoreSyncHQ holds and processes it solely as an agent of the school under section 11, for safe custody and processing only, and for no purpose of its own.

A one-page statement covering all thirteen Information Privacy Principles, breach notification and overseas hosting is available for your board or privacy officer:

ScoreSyncHQ is an excluded service under section 5(2)(f) of the Online Safety (Minimum Age and Child Safety Risk Assessment) Bill 2026, as a platform that solely enables education services. It has no messaging, algorithmic feeds, likes or disappearing content, so no minimum-age verification or child safety risk assessment is required — schools and students under 16 can use it freely.

A one-page compliance statement summarising this assessment is available for your board or principal: