What we keep about children

Checked against how KindyStudio works on 25 October 2026. Next full review: October 2027.

The one thing we can hold

• A child's first name, if the educator chooses to type one. It must be a single given name: one word, letters only, up to 20 characters. Surnames and initials are refused.
• It is stored once, in one place, against the resource it was typed for. Delete the resource and the name goes with it.
• Before the first name is used the educator confirms the family's consent. We record the date and the policy version of that confirmation, never the name itself.
• Age is never asked about a child. An educator can say who a resource is for as a room band (0 to 2, 2 to 3, 3 to 5 or mixed), which is a setting on the resource, not a detail about anyone.

What we never accept

The forms and the studio assistant check what is typed before it is saved or sent anywhere, and refuse:

• surnames, initials, dates of birth and ages of a child;
• photos, video or voice recordings of a child (there is nowhere to upload them, and the app never uses a camera);
• health, diagnosis, medication or allergy details about a child;
• family circumstances, and behaviour incidents that name a child;
• enrolment, Centrelink (CRN) or Medicare numbers, addresses, phone numbers and email addresses.

What happens to what you type

• The sentence an educator types to start a resource is replaced by the resource's title once the plan is written (a name pack keeps its theme, because the name pack is about the name).
• The instructions used to make each picture, narration and clip are cleared as soon as that piece is made.
• Picture and video instructions never carry the child's name: the character is described by appearance. The name is used only where it has to be: in the words of the story, in the narration that reads it aloud, and on a certificate or name pack where it is printed.
• Resources that fail or are cancelled are deleted, with their files, after 30 days.
• Error logs, usage records and the studio's own monitoring never hold names, topics or instructions. Usage records hold counts and a scrambled account reference, not content.
• Conversations with the studio assistant are not stored by us. They live in your browser tab and are gone when it closes.

Where it goes

• Your account, your resources and any first name are stored in Sydney, Australia. The app itself runs in Sydney too.
• Writing (the story, the plan, the assistant's answers) is done by a US AI provider. We send each request with storage turned off and, to the best of our knowledge under that provider's published terms for business use, requests are not used to train its models. If that provider is unavailable, the writing falls back to our media partners (below).
• Pictures, narration, songs and video are made by our media partners overseas. They receive picture instructions without the child's name; narration receives the words it reads. We have asked our media partners for written confirmation that requests are deleted after processing and never used for training. We do not have that confirmation yet, and we will say so here until we do.
• So, plainly: not everything stays in Australia. The finished resource comes back to our storage in Sydney.

Share links

• Every resource is private until the educator turns sharing on.
• Share pages are hidden from search engines, and the pictures and sound on them are served through links that expire after one hour.
• Turning sharing off kills the link for everyone, straight away. If a name is in the resource, the educator is asked to confirm before a link is made.
• A family does not need an account to have a shared resource taken down. Every share page has the link “Is your child in this? Ask for it to be taken down”. It turns the link off at once, and the educator is told.

Deleting

• Deleting a resource deletes its pictures, sound and video from our storage.
• Closing an account (Settings, Delete my account) deletes every resource and file and cancels any subscription. The money history is kept for tax law, without any child's details.
• A family can also ask us directly at the contact below, and we will remove a resource that names their child.

Who can see it

• The educator who made the resource, and anyone they give a share link to.
• The person who runs KindyStudio can see a list of resource titles in an admin view, to give support and to act on reports. We do not browse resources.

What we will never build

Child profiles, class lists or rosters, attendance, observations, learning stories, portfolios or assessments of a child, child accounts, photo libraries, analytics on what resources say, or stored AI conversations. Those are records about children; KindyStudio makes things for them.

For directors

A printable summary for your service's policy folder, with answers to the questions in ACECQA's online safety guidance on AI, is on For directors and approved providers. The full detail is in our Privacy Policy and How we use AI.

Changes to this page

• 25 October 2026. Page published. Families can now ask for a shared resource to be taken down from the share page, without an account.
• 5 October 2026. A child's first name moved to its own column; picture and video instructions no longer carry the name; instructions are cleared once each piece is made; failed resources are deleted after 30 days; share links serve 1-hour media links.

Questions or a request

Email [CONTACT EMAIL]. We acknowledge every request within 7 days.