Acceptable Use Policy

1 Who this applies to

Every person who signs in to the service.

1.1School staff. Teachers, school administrators and principals, using a staff account issued by their school.

1.2Students. Years 1 to 6, using a card issued by their school. The student version says the same things in language a child can read; where the two differ, this one governs the school's obligations and that one governs what we ask of a child.

1.3Reason Education founders and contractors. Who are additionally bound by the access control rules in our Security Policy and by the Child Safety and Reportable Conduct Policy.

2 What the service is for

2.1The permitted purpose. Setting maths assessments, recording what a child answered and how they worked it out, and helping a teacher decide what a child understands against the Victorian Curriculum 2.0 (derived from AC V9.0).

2.2And that is the whole of it. Anything the service happens to make possible but that does not serve that purpose is not permitted use.

3 What schools and staff must do

Accounts

• One account, one person. Staff accounts are not shared, not passed to a relief teacher, and not left signed in on a shared machine. Every view of a child's work is logged against the account that viewed it, so a shared account destroys the only record that says who looked.
• Second factor stays on. Staff sign-in uses a password and a TOTP code. The code is not to be photographed, shared or stored beside the password. For school administrator and principal accounts the second factor is mandatory and cannot be turned off; for teachers it is enrolled by the person or required school-wide by the school.
• A lost second factor is recovered, not worked around. Tell your school administrator; if the lost factor is the administrator's or the principal's, email policies@reasoneducation.com.au. We verify the request, then let that person enrol a new factor. We never hand over access and we never turn the password off.
• Tell us when someone leaves. A school removes a departing staff member's access itself; where it cannot, it tells us on policies@reasoneducation.com.au the same day.

Student sign-in cards

• Cards are printed, handed out and stored by the school. A card is a credential — it is not left in a tray, photographed for a parent group, or posted on a wall.
• A lost card is reported to the school and reissued. Reissuing invalidates the old one.
• A child's card is not used by an adult to enter work on the child's behalf. The record must say what the child did.

Assessments and working out

• Teachers tell students to write their maths on the drawing space, and not to write their name on it. The canvas has no name field and the instruction appears in the run notes, because a name written on a page is the one thing our controls cannot prevent.
• A teacher reviews a child's working out before releasing anything to that child. Nothing reaches a child until a teacher releases it, for that child.
• Where the AI is provisioned, the model's reading is a description a teacher checks. The system marks the answer, the AI describes the method, the teacher decides. A teacher who disagrees overrules it, and the record shows they did.

Content

• Assessment content, question text, badge names and any free text a staff member enters must be appropriate for primary-aged children and must not identify a child by anything other than their name.

4 What no one may do

• Use the service to monitor children. It records work a child deliberately submits in an assessment. It is not an attendance, behaviour, activity or location system and must not be described or used as one.
• Sign in as another person, or use a child's card or number to look at their work as them.
• Attempt to reach another school's data, another class's data outside your role, or any record you have no teaching reason to open.
• Probe, scan, load-test or attempt to break the service without our written agreement in advance. Report a weakness instead — see section 6.
• Extract data in bulk, scrape pages, or automate the interface.
• Upload or enter data we do not ask for — no health information, no disability diagnoses, no family or custody details, no photographs of children, no government identifiers, no parent contact details. We do not hold these fields and there is nowhere safe for them to go.
• Make a clinical or diagnostic claim using our output. The product does not identify learning difficulties, screen for any condition, or predict future performance, and its output must not be presented as though it does.
• Copy a child's work or a report to anyone outside the school without the school's own authorisation, including into a general-purpose AI tool.
• Reuse our content commercially, resell access, or give access to a third party without a written agreement with us.
• Write anything on a child's screen or in a badge that is abusive, discriminatory, sexual, or otherwise inappropriate for a child.

5 What we do

So that the obligations are not all one way.

5.1Australian hosting. We hold student data in Melbourne, Australia, on Microsoft Azure — from date golive — to be confirmed. Until then nothing but synthetic test data exists anywhere.

5.2A log a school can ask for. We log every change and every view of a child's work, and a school may ask for the log entries relating to its own students.

5.3No training on school data. We do not train any model on school or student data. It is a contractual term with our model provider.

5.4No selling, no trackers. We do not sell, rent or share school or student data, and we run no analytics, trackers or ad networks on any page.

5.5Early, plain notice. We tell a school promptly when something goes wrong that affects it, in plain language, before we have finished investigating.

5.6A named person for every complaint. We give a school a named person and a stated timeframe for every kind of complaint — see Support and Complaints.

6 Reporting a problem or a weakness

Full owners, timeframes and escalation are in Support and Complaints.

7 When this policy is breached

7.1We tell the school — the principal, or the school's nominated contact. The school deals with its own staff and students under its own policies. We do not discipline a school's people.

7.2We suspend the account where student data is at risk, where an account is being used by someone other than its holder, or where a child may be at risk. Suspension happens first and is explained in writing the same day.

7.3We treat it as an incident where data was or may have been exposed, under our incident response plan.

7.4We treat it under the child safety policy where a child safety matter is involved, including suspending access before any investigation begins — see Child Safety and Reportable Conduct.

7.5We terminate access where a breach is serious or repeated. Under the school agreement, with notice, and with the school's data returned or destroyed on its instruction — see the Terms of Service.

8 Where this policy can be read

8.1Attached to the school agreement and provided to every school before any account is created. This is the position today, and the honest answer today is that it is provided prior to use, not published on a website.

8.2Published at reasoneducation.com.au/acceptable-use from date golive — to be confirmed.

8.3Linked from the staff portal footer and from the sign-in page, from date golive — to be confirmed.

8.4The student version is provided to schools as a printable one-page sheet for classroom display, and shown on the student sign-in screen from date golive — to be confirmed.

9 Changes

9.1We tell schools in writing before a material change takes effect, and the version and date at the top of this document change with it. A school that does not accept a change may end its agreement under the terms of that agreement.

10 The same rules, in a child's words

What follows is the student version, reproduced exactly as a child in Years 1 to 6 reads it on screen and on the printed classroom sheet — the same rules, in the words we ask a child to read.

Notes for teachers

• Read this with the class the first time they sign in. It is written for Year 1, so an older class can read it alone.
• The line that matters most is "if something feels wrong or scary, tell your teacher". A child in this product cannot message anyone, so a teacher in the room is their route to an adult. That is by design.
• The drawing space is not checked by the app for what is on it. A person has to look. That is why the rule about maths-only drawing is in a child's own words, and why a teacher reviews working out before releasing anything.
• If a child draws or writes something that worries you, follow your school's child safety process first. If you tell us as well, use policies@reasoneducation.com.au. What we do next is in Child Safety and Reportable Conduct, section 5.
• The full policy for schools and staff is sections 1 to 9 above.

11 Contact

12 Version history

• 1.018 August 2026First issue, with the student version for Years 1 to 6 issued alongside it.