How we handle your data.
Plain language. No surprises. Your data belongs to you, and we treat it that way.
Last updated: 13 July 2026
What we collect
**Account information**: When you sign up, we collect your name, email address, and organisation name. This lets you log in and helps us identify your account.
**Evidence and entries**: The reflections, evidence summaries, photos, voice notes, policy records, actions, and files you capture through Lighthouse QIP are stored so you can access them across devices and share them with your team.
**Usage data**: We collect basic information about how you use the app, such as which features you use, how often you log in, and any errors you encounter. This helps us improve the product.
**Contact form submissions**: When you fill in our contact or demo request forms, we collect the information you provide so we can respond.
What we do not collect
We do not knowingly collect information directly from children. Lighthouse QIP is designed for educators and leaders to document their own reflections, evidence, actions, and quality improvement work. Any references to children in your entries are your responsibility and remain under your control.
We do not sell your data to third parties. We do not use your data for advertising. We do not share your information with anyone except as described in this policy.
How we use your information
**To provide the service**: Your data powers the features you use, including dashboards, reports, action tracking, policy register workflows, and team collaboration.
**To improve the product**: We analyse usage patterns in aggregated, anonymised form to understand which features help and which need work.
**To communicate with you**: We use your email to send account notifications, respond to support requests, and occasionally share product updates. You can opt out of non-essential emails at any time.
**To keep things secure**: We monitor for suspicious activity and use your account information to verify your identity if you need support.
How we store and protect your data
**Secure cloud infrastructure**: Your data is hosted with trusted cloud providers, including Supabase, using security practices appropriate for Australian early learning services.
**Encryption**: Data is encrypted in transit using HTTPS/TLS and encrypted at rest where supported by our providers. Passwords are handled using industry-standard authentication services.
**Access controls**: Only authorised team members can access production data, and only for specific support or maintenance purposes. We keep access limited and purposeful.
**Backups**: Your data is backed up automatically. In the unlikely event of data loss, we can restore from backups taken regularly.
Your rights
**Access**: You can view the data available in your account by logging in or contacting us.
**Correction**: If any information is inaccurate, you can update it in your account settings or ask us to correct it.
**Deletion**: You can request account deletion. We will confirm the request and explain what will be removed and when.
**Export**: You can download entries, actions, and reports in standard formats where export tools are available.
**Complaints**: If you are unhappy with how we handle your data, contact us first so we can investigate. You may also have rights under applicable Australian privacy law.
Third-party services
We use Supabase for database hosting, authentication, and storage. Their privacy practices are governed by their own policy and security controls.
We use Vercel for website hosting. They process minimal data, primarily web traffic logs, and do not access your account information as part of normal website hosting.
We use Resend for transactional email delivery, such as account and notification emails.
Children's privacy
Lighthouse QIP is intended for use by adults working in early learning services. We do not knowingly collect personal information directly from children.
If you believe a child has provided us with personal information directly, please contact us and we will investigate promptly.
Changes to this policy
We may update this privacy policy as the product evolves or as regulations change. If we make significant changes, we will notify you by email or through the app.
The "Last updated" date at the top of this page shows when the policy was last revised.
Contact us
If you have questions about this privacy policy or how we handle your data, please contact us:
**Email**: info@lighthouseqip.com
**Location**: Australia
We aim to respond to privacy-related enquiries within 2 business days.