← Back to ReadTrack

Privacy Policy

Last updated June 2026

ReadTrack is a reading assessment tool for teachers. Using it means we hold information about you, and about the children you assess. This page explains exactly what we hold, why, and what you can ask us to do with it.

ReadTrack is operated by Johnson Keast, trading as ReadTrack, based in New Zealand. You can contact us at our contact page or by email at admin@readtrack.nz.

Who is responsible for what. Your school decides that a child should be assessed and holds the relationship with that child's family. When you record a reading, you are doing so on your school's behalf. ReadTrack stores and processes that information for you — we do not decide which children are assessed, and we do not contact families.

What we collect

About you, the teacher

  • Your name, email address and the username you log in with
  • Your password, stored only as a cryptographic hash — we cannot read it
  • A phone number, if your account was set up by an administrator who supplied one
  • Which reading framework you use, and which plan you are on
  • The date you confirmed your school authorises you to record students
  • If you subscribe, a customer reference from our payment provider

About the students you assess

  • First and last name
  • Date of birth
  • Your school's student identifier and class name
  • A photograph, only if you choose to upload one

About each reading

  • An audio recording of the child reading aloud
  • The text transcribed from that recording
  • The passage the child was asked to read
  • Accuracy, rate, self-corrections and the individual errors identified
  • The date and the text level you tagged it with

Why we collect it

Solely to produce reading assessment results for you, and to let you compare a reader's progress over time. We do not use student information to advertise anything, we do not sell it, and we do not use it to train any machine learning model.

Who can see it

Student records are visible only to the teacher account that created them. Other teachers using ReadTrack cannot see your students or their recordings.

Our own staff can access stored information where it is genuinely necessary to operate the service — investigating a fault you have reported, or restoring data after a failure. We do not browse student records otherwise.

Where your information is stored

ReadTrack runs on infrastructure provided by Render, with data held in Singapore. Information is therefore stored outside New Zealand and is subject to the laws of that country. We rely on our provider's contractual protections to keep it secure.

Other companies involved

How recordings are turned into text

To work out what a child read, the recording is sent to OpenAI, who convert speech to text and return it to us. They receive the audio and nothing else — no name, no date of birth, no school, and no results. They do not know whose voice it is.

OpenAI do not use data sent through their API to train their models. The recording itself stays with us, in the storage described above.

The services we do use

  • Render — hosting, database and file storage. Holds everything described above.
  • Stripe — subscription payments. Receives your name, email and card details. Card numbers are handled by Stripe and never reach us. Stripe receives no student information.
  • OpenAI — converts recordings to text, and generates practice passages when you ask for one. It receives the audio of a reading, and the level and topic for a passage. It receives no student names, no dates of birth, no school details and no results.
  • [email provider] — sends account emails such as confirmation and password reset links. Receives your email address and name. Receives no student information.

How long we keep it

Student records and recordings are kept while your account is open, so that progress over time remains meaningful. You can delete a student at any time from their reports page — this removes their details, every recording and every result immediately and permanently, from storage as well as from your account.

You can close your account yourself from the account menu. Doing so immediately deletes your students, their recordings, their results and your own details, and cancels any subscription. Some information may remain in encrypted backups for up to 365 days before those backups are overwritten. We keep basic billing records for as long as New Zealand tax law requires.

Your rights

Under the Privacy Act 2020 you can ask us to:

  • Tell you what information we hold about you
  • Correct anything that is wrong
  • Delete a student's records, or your whole account

Contact us and we will respond within 20 working days, as the Act requires. If you are unhappy with how we have handled your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Requests about a specific child should normally come through the school that holds the relationship with that child's family.

Keeping it secure

  • All traffic is encrypted in transit using HTTPS
  • Passwords are stored as hashes, never as readable text
  • Audio can only be played back by the teacher whose student it belongs to
  • Access to production systems is limited to those who operate the service

No system is perfectly secure. If a breach occurs that could cause serious harm, we will notify affected users and the Privacy Commissioner as the Privacy Act requires.

Children

ReadTrack accounts are for teachers. Children do not have accounts, do not log in, and are never contacted by us.

Changes to this policy

If we make a significant change we will update the date at the top and let account holders know by email before it takes effect.

Terms of Service · Contact us · Home