Privacy Policy
Last updated: 23 June 2026
This Privacy Policy explains how Kiwiland Education Limited ("we", "us", "Kiwi123") collects, uses, and protects personal information when you use the Kiwi123 website and activities at kiwi123.co.nz (the "Service"). We handle personal information in accordance with the New Zealand Privacy Act 2020.
Who we are
Kiwi123 is a New Zealand structured-maths website for children. The Service is operated by Kiwiland Education Limited. If you have any questions about this policy or your information, contact us at [email protected].
Information we collect
We collect only what we need to run the Service:
- Teacher / parent accounts: your name, email address, and a securely hashed password. If you subscribe, our payment provider gives us a customer reference so we can manage your subscription.
- Student profiles: created by a teacher or parent — a student's first name (or nickname), an optional avatar, and a short login code. We do not collect student email addresses or passwords.
- Learning progress: which mysteries a student has tried and solved, stars earned, and attempt counts, so progress can be saved and shown on the dashboard.
- Technical data: standard information your browser sends (such as IP address) used by our hosting and security providers to deliver and protect the Service.
You can try the free mysteries with no account and we will not collect personal information beyond standard technical data.
Children's information
Student profiles are set up and managed by a responsible adult (a teacher or parent), who is responsible for obtaining any necessary consent and for the accuracy of the information they enter. We keep student information to a minimum (a first name/nickname, a login code, and learning progress) and never require a child's email address. We do not knowingly collect more personal information from children than is needed to provide the Service.
How we use information
- To create and manage accounts and student logins.
- To save and display learning progress and the teacher dashboard.
- To process subscriptions and send service emails (for example, confirming your email address or resetting your password).
- To keep the Service secure and prevent abuse.
We do not sell personal information, and we do not show advertising.
Service providers we use
We share limited information with trusted providers only so they can perform services for us:
- Cloudflare — website hosting, database, and bot protection (Turnstile).
- Stripe — payment processing for subscriptions. Card details are entered directly with Stripe; we never see or store your full card number.
- Resend — sending account emails such as email confirmation and password resets.
These providers may store data outside New Zealand. We take reasonable steps to ensure they protect your information.
Cookies and local storage
We use your browser's local storage to keep you signed in and to remember your progress. We do not use third-party advertising or cross-site tracking cookies. Our bot-protection provider may set a token to tell humans from bots.
How long we keep information
We keep account and student information for as long as the account is active. When you delete a student, their progress is deleted. When you delete your account, your classes, students, and their progress are removed and any active subscription is cancelled.
Your rights
Under the Privacy Act 2020 you may ask to access or correct your personal information. Teachers and parents can edit or delete student profiles and their own account at any time from the dashboard and account pages. To make any other request, email [email protected].
Security
We protect information with measures including encrypted connections (HTTPS), hashed passwords, and access controls so each account can only see its own data. No system is perfectly secure, but we take reasonable steps to protect your information.
Changes to this policy
We may update this policy from time to time. We will post the updated version here with a new "last updated" date.
Contact & complaints
Questions or concerns? Email [email protected]. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner (New Zealand) at privacy.org.nz.