For schools, the DoE & reviewers

Compliance & data protection.

This page brings together how Ninja Maths handles student data, where it's stored, how it's secured, and how we approach child safety — for school leaders, IT reviewers, and Department of Education risk assessments.

BusinessNinja Maths

ABN28 576 242 915

Hosting regionAustralia (Sydney)

Contactsupport@ninjamaths.com.au

The short answers

What schools and the Department of Education ask us most.

What data is collected?

First name, class, year/group, and learning data (scores, missions, quiz results). No email, date of birth, address, phone number or photo is collected from students.

Where is it stored?

In Australia — Firebase/Firestore, Sydney (australia-southeast1) region, with automated backups and point-in-time recovery enabled.

How do students log in?

Via a teacher-issued class code and name/avatar selection. No student passwords, self-registration, or student email addresses are used.

Who can see a student's data?

Only the student, their teacher, and authorised school administrators — enforced by role-based, default-deny Firestore security rules.

Is there any messaging or chat?

No. There is no chat, no direct messaging, no public profiles, and no way for a student to be contacted through the platform.

Advertising or tracking?

None. Ninja Maths is ad-free, with no third-party advertising or behavioural tracking of children.

What about deletion requests?

Deleting a student cascades across related records (scores, results) to close data-erasure gaps, handled by a dedicated server-side function.

What about child safety?

Our approach is mapped to the National Principles for Child Safe Organisations, documented in our Child Safety Statement.

What curriculum is it aligned to?

The Australian Curriculum v9.0 maths strands, with reporting using the current NAPLAN four-band language (Exceeding / Strong / Developing / Needs Additional Support).

What privacy law applies?

Ninja Maths is designed to align with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

In more detail

How data is handled, secured, and governed.

Data minimisation

We collect the minimum needed to run the learning experience.

No student email, DOB, address, phone or photo
First name, class code and learning/progress data only
No location data or device fingerprinting

Access control

Access is enforced server-side, not just in the interface.

Role-based access: student, teacher, org admin, super admin
Default-deny Firestore security rules
Covered by an internal automated rules test suite

Hosting & resilience

All infrastructure is Australian.

Firebase Hosting & Firestore, Sydney region
Automated backups with point-in-time recovery
No offshore data replication

Child safety

Designed with a child-safe-by-default posture.

No chat, messaging or public profiles anywhere in the product
Leaderboards show first name only
Mapped to the National Principles for Child Safe Organisations

Curriculum & reporting

Built around how Australian schools actually report.

Aligned to Australian Curriculum v9.0 maths strands
NAPLAN four-band reporting language (2023+)
School improvement reports for leadership teams

Vendor & legal documentation

A documentation pack is maintained for procurement and risk-assessment processes.

Privacy Policy and Terms & Conditions
Child Safety Statement
Data Processing Agreement and vendor information pack

Documentation pack

Download the full documentation.

For schools, the Department of Education, and school boards conducting a risk assessment or procurement review.

📄 Privacy PolicyWhat we collect and why 📜 Terms & ConditionsTerms of use for schools 🔒 Information Security OverviewHow data is protected 🛡️ Child Safety StatementNational Principles mapping ✍️ Parental Consent InformationInformation sheet for families 📑 Data Processing AgreementTerms for schools

This documentation reflects Ninja Maths' current design and vendor commitments. Schools remain responsible for their own assessment against their jurisdiction's requirements. For a Third Party Risk Assessment, procurement form, or any document not listed here, contact support@ninjamaths.com.au.