Privacy policy
Effective date: 21 October 2026
LessonWrap is lesson admin software for private tutors in Australia. It is run by LessonWrap (ABN 62 160 967 968), a sole trader business based in Victoria ("we", "us"). We may be exempt from the Privacy Act 1988 as a small business, but we follow the Australian Privacy Principles anyway.
The short version
- LessonWrap is used by tutors. Students and parents don't have accounts.
- A tutor's records about their students belong to the tutor. We use them only so the tutor can use LessonWrap.
- Records are stored in Australia.
- We don't sell personal information, show ads, or use tracking or analytics.
- Tutors can download everything at any time, and delete their account.
Who this covers
- Tutors who use LessonWrap. We decide how this information is used.
- Students, parents and payers whose details a tutor records. The tutor decides what to record and is responsible for it; we look after it for them.
- Anyone who contacts us or visits our website. You can browse the website without telling us who you are.
What we collect
From tutors:
- your name, email address and password (we never store the password itself);
- business details you add, such as your business name, phone, ABN, and the bank or PayID details you want on your invoices;
- a security log of events such as sign-ins and password changes, with the date and internet (IP) address;
- counts of how you use LessonWrap, such as how many lessons you wrap up (never what your records say);
- feedback and support messages you send us;
- for paid plans, limited billing details from our payment processor, such as your plan and the last four digits of your card. We never see your full card number.
Entered by tutors about students and families: names, school year and subjects; a household's contact and payer details; a student's own email and mobile, if the tutor adds them; lessons, attendance, payments, notes, homework (including worksheet files) and progress; and invoices and receipts. Sent by families through their family page: lesson requests and bookings, and completed homework files. Tutors should record only what they need, and leave out health or other sensitive details unless they are genuinely needed and the family has agreed.
Cookies. We use only essential cookies: to keep you signed in, to recognise a phone or computer you've used before (so we can warn you about a new sign-in, and so families don't need a new code every time they open their family page), and to help prevent misuse of free trials. We don't use advertising or analytics cookies.
How we use it
We use tutors' information to run LessonWrap and keep accounts secure, to send the emails you need (such as password resets and account notices), to bill you, to answer support requests, to improve LessonWrap using usage counts only, and to meet our legal obligations. We also use sign-up details to keep to one free trial per tutor. Any possible repeat is reviewed by us, never refused automatically.
We use student and family information only to provide LessonWrap to the tutor who entered it. That includes these things a tutor can choose to switch on:
- Emails and texts to families, such as lesson summaries, invoices, reminders and online lesson links. If the tutor chooses, a student can also get their own copy of summaries and joining links. They come from LessonWrap with the tutor's name, and replies go to the tutor. Every email to a parent lets them choose which ones the family keeps getting.
- A private family page showing a household its lessons, summaries, homework and what's owed, where the family can ask to change a lesson, book a time the tutor has opened, download worksheets and send back completed work. The first time it is opened on a new device, we email the family a code. It never shows the tutor's private notes or anything about other families.
- A calendar link, which lets the tutor's own calendar app show their lesson times.
- Card payments, when the tutor connects their own Stripe account. The family pays on Stripe's page, and card details go only to Stripe. We keep the amount, the date and whether it succeeded, so the tutor's records show it.
We don't look at student and family information unless the tutor asks us to help with a problem, it is needed to keep LessonWrap secure, or the law requires it. We never use it for marketing, never combine it across tutors (except the one check below, to stop misuse), and never use it to train artificial intelligence.
Delivery records and limits. To stop LessonWrap being used for spam and to keep sending costs under control, we record each email, text and file upload LessonWrap handles: what kind it was (for example a lesson summary or a password reset), which tutor account it was for, when, its size (text parts or file size), and whether it was sent. We don't record the message or file itself. For emails and texts we also keep a scrambled form of the recipient's email address or mobile number (a hash). A hash is not anonymous: anyone who already knows an address could work out that it matches, so we protect it like other personal information. We compare these hashes across all tutor accounts for one purpose only: limiting how many messages one address or number can receive from LessonWrap in a day, so no one person can be flooded and no account can use up a shared allowance. We don't use them to link families between tutors or for anything else. Separately, each tutor's account keeps a log of the emails and texts sent to its own families (kind, date and a hash of the address), so the same message isn't sent twice.
Who we share it with: only the companies that help us run LessonWrap (hosting, email and text sending, and payments), who may use it only for that purpose; our professional advisers; authorities where the law requires; and a buyer of the business, who must keep to this policy (we would tell tutors first).
Overseas. Records and backups are stored in Australia. Some of the companies that help us run LessonWrap are based overseas, mainly in the United States, and payment details may be processed overseas. Emails you send us (support, feedback and business email) may also be stored overseas.
Marketing. We only send marketing emails to tutors who have agreed, with an unsubscribe link in each. We never market to students, parents or payers.
Keeping it safe
All connections are encrypted, records are stored encrypted, each tutor can only ever see their own records, and only the business owner can access our systems. If a data breach is likely to cause serious harm, we will contain it, tell affected tutors quickly (aiming for within 72 hours) so they can tell families, and notify the Office of the Australian Information Commissioner (OAIC) where required.
How long we keep it
- Your account and its records: until you delete your account. Deleting is scheduled 7 days ahead so you can change your mind; after that everything is deleted for good, including from our backups within 35 days.
- After a plan or free trial ends: the account becomes read-only, and we keep it for 12 months after a paid plan or 3 months after an unpaid free trial, so you can download your records. We email you when it ends and before anything is deleted. Choosing a plan in that time keeps everything.
- Accounts never confirmed: 7 days.
- Security log IP addresses: 12 months.
- Delivery records used for limits: the hashed recipient address is removed after 2 days (our daily clean-up can take up to one more day). The rest of each record (kind, account, time, size, result) is deleted after 400 days. When an account is deleted, its delivery records stay only as counts, without the account. Counts of refused attempts are deleted after 400 days, or with the account. Backups hold copies for up to 35 days longer.
- A tutor's own log of emails and texts to their families: with the account, as above.
- Billing records: as long as tax law requires.
- A student a tutor deletes: their name, contact details, notes and homework are deleted straight away. The lesson dates, charges, payments and invoices stay with the tutor's records, without the student's name on new screens, because tutors need them for tax.
Children's information
LessonWrap is for adult tutors; account holders must be 18 or over. Much of what tutors record is about children, so it is used only to provide the service to their tutor, never for marketing or profiling, and never shared with other tutors.
Seeing or correcting information
Tutors can see, correct and download everything in Settings → Your data → Download everything, and can ask us for anything else we hold about them.
Students, parents and payers should ask their tutor, who can view, correct or delete their records straight away (money records a tutor needs for tax are kept, as above). If you can't reach the tutor, contact us and we'll help, usually by passing your request on.
We respond within 30 days and don't charge for requests.
Questions and complaints
Contact us at support@lessonwrap.com. We'll acknowledge a complaint within 5 business days and aim to resolve it within 30 days. If you're not satisfied, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.
Changes
We'll post changes here and update the date. For significant changes, we'll email tutors at least 30 days beforehand.