Data sharing and collection information.

What personal data we collect and why we collect it

For students at Ao Tawhiti this website is where we store notes and information on your individual learning programme. This includes goals you set for yourself, progress towards them and anything else pertinent to your learning at Ao Tawhiti.

This information is only accessible by you,  your caregivers and staff at Ao Tawhiti. An authenticated student account can only view another user’s names and homebase code. No student information is viewable without authentication.

 

Google Authentication

If you have an account on this website, we provide the ability to use Google OAuth to authenticate yourself when logging in.  Other than your email address, we do not use or store any information from your Google profile.

 

Cookies

If you have an account and you log in to this site, this website may use cookies to retain authentication details and login information. These cookies will last no longer than a month.

 

Artificial Intelligence & Automated Summaries

To support teachers and students in reflecting on progress, this website uses Google’s Enterprise Gemini API to draft graduate portraits based on celebrations.

  • What data is processed: Excerpts of student celebrations and projects are sent to the API to generate summary text.
  • Data protection & privacy: We use Google's Enterprise AI service, which guarantees enterprise-grade privacy and security. Your data, prompts, and generated summaries are not used to train Google’s AI models, nor are they shared across other Google services.
  • Data storage: Notes sent to the Gemini API are processed in real time to generate the summary and are not permanently retained by Google after processing.

 

Who we share your data with

We do not sell or share your data with third parties for commercial or marketing purposes.

To provide core website services, student data is transmitted securely to the following enterprise service providers:

  • Google Cloud (Enterprise Gemini API): Student learning notes are transmitted securely via encrypted API calls solely for generating graduate summaries under strict enterprise data protection terms.
  • Kamar Directory Service: We sync user information from Kamar nightly. We only sync usernames, email addresses, and IDs required for this site.

 

How long we retain your data

Your data is retained through your schooling. When you leave Ao Tawhiti your account access is changed and you may no longer add new content. You will still be able to access and view all your content.

For users that are registered on our website, we also store the personal information they provide in their user profile. Website administrators and staff can also see and edit that information.

 

What rights you have over your data

If you have an account on this site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

 

Who to contact with questions or concerns

Email Derek: derek.thatcher@aotawhiti.school.nz or speak to any Learning Advisor at Ao Tawhiti.