MyMahi Privacy Policy

Effective date: September 1st, 2024

At MyMahi, we care deeply about the safety, security, and privacy of our users when they use our website and any of our online services (“Service”). Our goal is to provide a digital toolbox to support you in your education and employment journey.

Privacy Policy

This Privacy Policy covers our collection and use of your personal information. We might update our Privacy Policy from time to time, in which case we will update the link to the Privacy Policy on our website. If we make material changes to our Privacy Policy, we’ll provide you with prominent notice as appropriate under the circumstances, e.g., by displaying a prominent notice within the Service and, if required by applicable data privacy laws, by sending you an email. We may notify you in advance if required to comply with applicable data privacy laws.

This Privacy Policy will cover the following:

  1. What personal information we may collect about you (and how we collect it)
  2. How long we keep your personal information for and where we store it
  3. How we may use the information we collect
  4. Whether we will give your information to anyone else
  5. Your rights and responsibilities
  6. Where you can find more information
  7. Information about links
  8. Our contact details

This policy has been written in accordance with the General Data Protection Regulations (GDPR), the Australian Privacy Act (including the Australian Privacy Principles), the New Zealand Privacy Act 2020, and US data protection laws (including the Children’s Online Privacy Protection Act of 1998 and its rules, or “COPPA” and the California Consumer Privacy Act, or “CCPA”). Information for parents of children under age 13 can be found in the section: Rights and responsibilities for parents of children under the age of 13.

What Personal Information We May Collect About You

We may have collected personal information about you from the following people or places (including within the last twelve months):

Learners/Students

From Your School/Organisation: If you use MyMahi through your school, then your school may provide the following information about you so that we can provide you with extra features:

  • Your legal given and family names
  • Your date of birth
  • Your photo
  • Name of your school
  • Your school ID
  • Your classes and groups
  • Your timetable and attendance
  • Your assessment results

Your teacher/staff may also contact us on your behalf if there are questions about your personal data or to let us know if there are any problems with the Service.

From You: When you first sign up to our service, we will ask you to provide us with your email address by logging in with a third party identity provider such as Google or Microsoft. You will also be asked to provide your given and family names, and your country so we can provide you with the functionality available for you.

We will collect any information you choose to provide while using features provided by the Service. You can add and remove collected information using tools and options within the features.

We may also collect information about you when you contact us for help so that we can answer your questions (including details about your questions and an email address to contact you with the answers if required).

From Our Website: When you visit our website, it will automatically collect some information about you:

  • Your use of the website (for example, when you log in and how long you spend using features)
  • Details about your device (for example, your internet (IP) address, your location, and the type of browser that you use, and its identity in the form of a “cookie”).

Teachers/Staff

When we sign you and your school/organisation up to the Service, we will also collect some of your personal information (e.g., given and family names, job and title, school name and address, school ID, email address, and contact number, and billing or account details).

Information collected will be the same as a Learner/Student if Learner/Student features are used.

Parents

We may collect your email address (either directly or via the relevant school), name, and details of which student is your child. In some cases, we may also collect login details for you if you log in to the Service.

Information collected will be the same as a Learner/Student if Learner/Student features are used.

How Long We Keep Your Personal Information For and Where We Store It

We will keep your information while you are an active user of the Service and we may keep it for up to 3 years to enable you to keep your account while not actively using the Service. We regularly review our information retention rules to make sure we are not keeping it for longer than we need to, but you can ask us to remove your information at any time (see below for more details).

An element of the service that MyMahi provides is the ability to track your education and employment journey across multiple years. We will retain your account and historic data to ensure that if you return in the future, the work you have previously completed is still available and associated with your account. If your account remains inactive for a period of 3 years, we will delete your account and anonymize or delete your data so that it can only be used in a non-identifying manner for analysis by your school/organisation or to improve our products. You may notify us that you no longer require us to retain data before this 3-year period has passed, in which case we will take this action sooner.

Our company is established and headquartered in New Zealand with operations and offices elsewhere in the world. We may use third parties in other countries to process data for us and may securely transfer your personal information from time to time to our offices or to our third-party data processors only where necessary in connection with our operations and providing the Service to you. We will always endeavor to keep your data safe whenever we move it and transfer and deal with your personal information carefully and in accordance with your country’s applicable laws.

How We May Use the Information We Collect

Learners/Students

For the purpose of providing services:

We will use the information that we have collected about you to:

  • Maintain a record of your learning: For example, copies of your completed projects so that these can be reviewed by your teachers/staff and so that you have a record of your work.
  • Keep you updated about your activity on the Service: For example, to remind you of due dates for homework tasks, to let you know if there are any new discussion messages, and to update you on your performance in assignments and competitions.
  • Help your journey: By sharing your activity with your teachers/staff and parents (e.g., that you have received reward points, your completion of project sections, and your career aspirations).
  • Email you: For example, to inform you of upcoming changes to the Service, or to notify you of activity within the Service.
  • Provide complementary services: For example, we may partner with third party providers, such as banks, universities, and superannuation, to offer services or deals which you engage with after providing your consent.
  • Maintain and improve the Service: For example, we can use statistical information about how long all students spend on a lesson, or the number of people who have interacted with a particular feature, or to make decisions on where to focus our efforts. Such information will only ever be used on a grouped basis so that you will never be identified individually.
  • Improve your experience while using the Service: For example, to identify that it really is you.
  • Identify you when you call us for help: For example, if you report a problem with our website or the content.

Teachers/Staff

For the management and administration of our contract:

We will use the information that we have collected about you to provide the Service and to carry out administrative tasks such as managing our relationship with your school and for billing and invoicing purposes, as may be necessary in order to perform our contract with your school/organisation.

For marketing purposes and our legitimate business interests:

We will also use the information to communicate with you where we have a legitimate interest to do so – for example, sending you information about new learning resources and products that are being made available. You can opt-out of receiving such communications at any time by clicking the unsubscribe link or following the instructions in the email.

For the purpose of providing services:

Information collected about you will be used the same as a Learner/Student if Learner/Student features are used.

Parents

For the purpose of providing services:

We will use your contact information to keep you updated about your child’s performance on the Service, where this option has been exercised by the child and you. Information collected about you will be used the same as a Learner/Student if Learner/Student features are used.

Whether We Will Give Your Information to Anyone Else

We may also need to use your information to protect ourselves from criminals or fraudsters and in some circumstances, we may also need to share or use your information to make sure that we follow the law. We may also use or transfer your information to a successor entity in the event that we sell or transfer all or a portion of our business or assets (including in the event of a merger, reorganization, spin-off, dissolution, or liquidation) and we will endeavor to ensure that the successor entity applies this policy to such information.

We will keep your personal information safe and will not give it to any third party except as explained in this policy or where we are allowed to do so by law.

In respect of third parties who use Artificial Intelligence (“AI”) we do not provide personal information about you to a third party for use of that personal information in AI.

Other than as described above, we have not disclosed personal information for a business purpose to other third parties. We do not sell personal information.

Your Rights and Responsibilities

While we do our best to keep your personal information safe and private by following high standards, no security and safety system is 100% secure. You have to play your part in ensuring that your account is kept safe, and tell us when your account has been accessed without permission.

You may have the right to ask us to:

  • Give you a copy of your personal information that we have collected.
  • Update or correct any personal information about you that is wrong.
  • Stop collecting your personal information.
  • Remove your personal information from our records.

Just let your school/organisation know your concerns or drop us a message at support@mymahi.com.

If you think we are not doing a good job with your personal information, you also have the right to make a complaint by sending us an email at support@mymahi.com. If you lodge a complaint with us, we will respond promptly and then determine what action needs to be taken (if any) to resolve the complaint. We will respond to your complaint within the shorter of 20 working days or 30 calendar days (or as otherwise required by law).

You also have the right to make a complaint to the government bodies that regulate us. More details are available here:

We will not discriminate against you for exercising any of your rights.

Rights and Responsibilities for Parents of Children Under the Age of 13

COPPA provides certain rights and responsibilities to parents of children under the age of 13 that provide us personal information. This section of the policy only applies to children under the age of 13.

We do not permit children under the age of 13 to create an account or provide us personal information without the parent’s or the school’s consent unless the child is allowed to provide consent in accordance with your country’s applicable laws. Such consent may be provided, for example, through teachers/staff sending an invite email to permit a learner/student to join the school/organisation within the Service. If you believe we have collected information from a child under age 13 without such consent from a parent or school/organisation, please contact us at support@mymahi.com so that we may delete the information as soon as possible.

We will not require a child under the age of 13 to provide us with more information than is reasonably necessary to use our site and services.

At any time, you may review your child’s personal information maintained by us, including requiring us to correct or delete the personal information and/or withdrawing and refusing to permit us from further processing your child’s information. You can do this by sending us an email at support@mymahi.com. To protect the privacy and security of your child, we may require you to take certain steps to verify your identity.

Where You Can Find More Information

If you have any questions about our Privacy Policy, please ask your teachers/staff or parents for guidance. Or, you can reach out to us directly at the contact details below and we would be more than happy to help.

If you receive marketing communications from us (as further explained in this Privacy Policy), you will always have the option to “unsubscribe” by simply clicking the link in the relevant email or by contacting us.

Information About Links

Our website might link to external websites, which we have no control over. Please be careful to protect your privacy when visiting these websites.

Control of Information

In cases where you are using the Services for features provided on behalf of your school/organisation, we will be what is called a “data processor” in relation to your personal data provided by the school/organisation because we will only use the provided data on the instructions of your school to provide you the Services.

Your school/organisation will be what is called a “data controller” so if you have questions about the use of your personal data provided by your school/organisation, you should ask your teachers/staff first.

For information collected outside of features provided on behalf of your school/organisation, we will be a “data controller” so if you have any questions about non-school/organisation provided data you can contact us using the contact details below.

Subprocessors

MyMahi contracts the services of third parties known as “subprocessors” to process information as required by us. You can find a list of these subprocessors in our Trust Centre.

Our Contact Details

You can always contact us at the following details if you do have any questions.

MyMahi Ltd 4 Joseph Street, Palmerston North 4412, New Zealand Email: support@mymahi.com Phone: (NZ) +64 6 888 3015, (AU) +61 482 096 661