Privacy

Privacy Policy

This policy explains how TAN FIT handles personal information when it provides the service to schools and their authorised users around the world.

Last updated 13 August 2026

1. Our role and this policy

TAN FIT is an Australian school platform that serves Schools internationally. This policy describes how TAN FIT handles personal information in connection with tanfit.org and related services. Each School using TAN FIT determines why and how personal information about its students, staff, and community is used in the Service. The School is the data controller, or equivalent responsible organisation, for that information; TAN FIT acts as its service provider or processor and processes information only to provide, secure, support, and improve the Service for the School and as otherwise required by law.

Schools may have their own privacy notices and policies. If there is a question about a School’s collection, use, disclosure, correction, or deletion of student information, contact the School first.

2. Information we handle

Depending on the features a School enables and how you use TAN FIT, we may handle:

  • account and school information, such as name, school email address, role, organisation, and authentication details;
  • learning and school activity information, such as classes, timetables, course work, assessments, submissions, notes, attendance-related activity, and progress records;
  • physical education and performance information, such as exercise, workout, readiness, activity, and coaching records;
  • optional connected-device information a user chooses to import, including supported activity, heart-rate, step, sleep, and workout metrics;
  • files and other content a user or School uploads to the Service;
  • support correspondence and contact-form information; and
  • technical and security information needed to operate the Service, such as session identifiers, IP address, browser/device information, logs, and security events.

Activity, wellbeing, and connected-device information may be sensitive personal information or health information under applicable law. We handle it only where a School or user has chosen to use the relevant feature and it is needed for the Service.

3. How information is collected

We collect information directly when a School creates or manages accounts, when authorised users enter information or upload content, when a user contacts us, and when users choose to connect supported services or devices. We also collect limited technical information automatically as users access the Service. Schools are responsible for ensuring they have authority to provide student and staff information to TAN FIT.

4. How we use information

We use personal information to:

  • provide the requested learning, PE, performance, administration, and account features;
  • authenticate users, enforce role-based access, maintain security, and investigate misuse;
  • respond to support requests and communicate service-related information;
  • maintain, troubleshoot, and improve the reliability and usability of the Service; and
  • meet legal obligations and protect the rights, safety, and security of users, Schools, TAN FIT, and others.

We do not sell personal information or use student information for behavioural advertising. We do not make solely automated decisions with legal or similarly significant effects about students.

5. Disclosure and service providers

We disclose personal information only to the School and authorised users acting within their role, to service providers that help us host, authenticate, store, secure, and support TAN FIT, where a School directs us to do so, or where disclosure is required or permitted by law. Our platform uses Supabase services for authentication and data storage. Providers may access information only to perform services for TAN FIT and must protect it under contractual and legal obligations.

6. International transfers and processing

TAN FIT and its service providers may process personal information in Australia and other countries where TAN FIT, a School, or its providers operate. The location can depend on a School's configuration and the relevant provider. For international transfers, TAN FIT will use safeguards appropriate to the information and applicable law, such as contractual commitments, access controls, and security measures. Before introducing a likely overseas disclosure of School personal information, we will provide the School with relevant location and provider information where practicable. Schools remain responsible for their own privacy notices and permissions for students and staff.

7. Security

We use reasonable technical and organisational safeguards designed to protect information from unauthorised access, loss, misuse, interference, modification, or disclosure. These include authenticated access, role-based controls, encrypted connections, and security monitoring. No online service can guarantee absolute security, so users and Schools must also protect account credentials and report suspected unauthorised access promptly.

8. Retention and deletion

We retain personal information for as long as needed to provide the Service to the School, meet legal and security obligations, resolve disputes, and enforce agreements. When a School ends its use of TAN FIT or asks for deletion, we will follow the agreed School instructions and applicable law, subject to necessary backup, security, and legal retention periods. A School can request export or deletion support by contacting us.

9. Cookies and similar technologies

TAN FIT uses essential cookies and similar technologies to keep users signed in, maintain secure sessions, remember functional preferences, and protect the Service. We do not use advertising cookies in the TAN FIT application. You can control cookies through your browser, but disabling essential cookies may prevent parts of the Service from working.

10. Your privacy rights

Privacy laws in your country may give you rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may be able to review and update some account information in the Service. For information held for a School, send requests to the School first because it controls that information. TAN FIT will assist the School to respond where appropriate. For information TAN FIT holds about you independently, email privacy@tanfit.org. We may need to verify your identity and will explain if a legal exception prevents us from fulfilling a request.

11. Children and students

TAN FIT is provided to students through Schools internationally, not as a direct-to-child consumer service. Schools decide which students can use the Service and are responsible for notices, permissions, safeguarding, supervision, and parent or guardian communications required by their local laws, policies, and applicable law. We do not knowingly use student information for direct marketing.

12. Complaints

If you have a privacy concern, contact the School first where it relates to School-controlled information. You can also email privacy@tanfit.org with "Privacy complaint" in the subject line. Please describe the concern and how we can contact you. We will acknowledge and investigate the complaint, aim to respond within 30 days, and tell you if more time is needed. If you are not satisfied, you may contact the privacy or data-protection regulator in your country. In Australia, this is the Office of the Australian Information Commissioner.

13. Changes and contact

We may update this policy as our Service or legal obligations change. The current version will always be available on this page. For privacy questions, requests, or complaints, contact TAN FIT at privacy@tanfit.org. For general support, use the contact page.