1. Overview
This Privacy Policy explains how Brylabs Pty Ltd, trading as Lesson Lab, collects, holds, uses and discloses personal information when you use the Lesson Lab website, app, support channels and connected integrations.
Lesson Lab is built for teachers and education workflows. That means our privacy approach is designed to cover account data, lesson-planning inputs, uploaded teaching materials, lesson exports, billing records and support requests, while also recognizing that some users may handle information relating to students, parents or school staff.
This policy is intended to reflect current Australian privacy expectations, including the Australian Privacy Principles, and to follow common edtech and SaaS practices around transparency, security, retention and user control.
2. Information we collect
We collect information you provide directly, information generated through your use of the service, and information received through third-party integrations or payment processors.
- Account and profile information, such as your name, email address, school or organisation, password credentials and subscription settings.
- Lesson workspace content, such as prompts, lesson briefs, refinement requests, uploaded files, generated lessons, versions, student notes and export actions.
- Billing and transaction information, such as plan details, subscription status, invoice history and limited payment-related metadata supplied by payment providers.
- Support and communications information, such as emails, contact forms, bug reports, feedback and account support requests.
- Technical and usage information, such as IP address, browser type, device information, pages visited, activity timestamps, referring pages and app diagnostics.
- Connected service information, such as Google account metadata used for sign-in or any future optional integrations you choose to enable.
3. How we collect information
We collect information when you create an account, complete lesson forms, upload resources, connect third-party services, pay for a subscription, contact support or otherwise interact with Lesson Lab.
We also collect certain information automatically through cookies, server logs, analytics tools, application events and security monitoring. Some information may be supplied by service providers that help us operate billing, hosting, email, analytics, authentication or file integrations.
4. How we use information
We use personal information to provide the service, operate subscriptions, respond to support requests, secure the platform, improve product performance and meet legal obligations.
- Create and manage your account and subscription.
- Generate lessons, revisions, student notes and related teacher workflows you request.
- Provide requested connected-service actions if we introduce future optional integrations or classroom-sharing features.
- Send service messages about billing, access, security, updates and legal changes.
- Monitor performance, reliability, abuse, fraud, misuse and security incidents.
- Improve our products, interfaces and workflows, including through aggregated or de-identified usage analysis where permitted by law.
- Comply with legal obligations, enforce our terms and protect Lesson Lab, our users and third parties.
5. When we disclose information
We do not sell personal information. We disclose information only where reasonably necessary to operate Lesson Lab, comply with law or complete user-requested actions.
- Hosting, storage, infrastructure, email, analytics, customer support and payment service providers.
- AI or automation providers where prompts, uploaded materials or other inputs must be processed to deliver lesson-generation features.
- Third-party integrations you choose to connect, such as authentication or optional classroom tools, where disclosure is required to complete the requested workflow.
- Professional advisers, auditors, insurers or potential acquirers where reasonably necessary for legitimate business operations and subject to confidentiality controls.
- Regulators, law enforcement or courts where required by law or where reasonably necessary to investigate misuse, fraud, infringement, security incidents or threats to safety.
6. Student and school data responsibilities
Lesson Lab is designed for teacher use. If you upload or enter personal information about students, parents or other third parties, you are responsible for ensuring you have the necessary authority, notices, permissions and legal basis to do so.
We recommend that users avoid uploading unnecessary sensitive information and avoid placing direct student identifiers into prompts or uploads unless clearly required and appropriately authorised by the relevant school or organisation.
Where Lesson Lab is used under a school or organisational arrangement, that customer may remain responsible for notices, consents, classroom permissions and education-record obligations that apply to its users and data.
7. Security
We take reasonable technical and organisational steps to protect the information we hold from misuse, interference, loss and unauthorised access, modification or disclosure. These measures may include access controls, authentication protections, encryption in transit, logging, least-privilege permissions, vendor reviews and incident-response processes.
No method of transmission or storage is completely secure. While we work to protect information appropriately, we cannot guarantee absolute security.
8. Retention
We retain personal information for as long as reasonably necessary to provide the service, keep business records, resolve disputes, enforce agreements, investigate incidents and comply with legal obligations.
Account, lesson and subscription information may be retained while your account remains active and for a reasonable period afterward for backup, audit, legal and support purposes. Billing records may be retained for taxation, accounting and compliance periods required by law. Information that is no longer required may be deleted, de-identified or aggregated.
9. Cross-border storage and processing
Some of our service providers may store or process information outside Australia. Where cross-border disclosures occur, we take reasonable steps to work with providers that maintain appropriate privacy, confidentiality and security protections for the services they deliver.
Because Lesson Lab may rely on global cloud, analytics, AI or support tooling, personal information may be processed in jurisdictions including Australia, the United States and other countries where our providers operate.
11. Access, correction and choices
You may request access to personal information we hold about you, ask us to correct inaccurate or out-of-date information, or ask about the way we process your information.
You may also unsubscribe from marketing communications, although we may still send service, security, billing or legal notices that are necessary to operate your account.
We may need to verify your identity before completing a request. In some cases, the law may allow or require us to decline a request, but if so we will explain the position where required.
12. Complaints and contact
If you have a privacy question, access request, correction request or complaint, contact us at support@brylabs.com. Please include enough detail for us to identify your account and understand the issue.
We will investigate privacy complaints and aim to respond within a reasonable time. If you are dissatisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner.
13. Changes to this policy
We may update this Privacy Policy from time to time to reflect product changes, legal developments, security practices or operational changes. The current version will always be posted on this page with its effective date.
If we make a material change, we may provide additional notice through the website, app or email where appropriate.