Skip to main content
Collective Learning← Back to home

Collective Learning AI Pty Ltd

Privacy Policy

Last updated: 8 Jul 2026

Introduction

Collective Learning AI Pty Ltd, also referred to as Collective Learning AI, CLAI, we, us, or our, is committed to protecting your privacy.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website, use our platform, interact with our AI-enabled learning tools, or communicate with us.

Collective Learning AI is a spin-out company from the Macquarie University Incubator. Certain intellectual property associated with the platform and related technologies is held by Macquarie University and may be licensed or otherwise made available to Collective Learning AI for development and commercialisation. This does not mean that Macquarie University automatically receives all personal information collected through our website or platform. Where Macquarie University is involved in a specific project, pilot, research activity, or deployment, additional terms or privacy notices may apply.

By accessing or using our website or services, you agree to the terms of this Privacy Policy.

Information We Collect

The type of personal information we collect depends on how you interact with us and our services. Personal information we may collect includes:

Contact information

Name, email address, phone number, organisation, role, and postal address.

Account and profile information

User account details, education background, professional interests, learning goals, career goals, skills, areas of expertise, and preferences.

Learning and platform information

Courses viewed, lessons completed, content generated, skill assessments, learning progress, feedback, collaboration activity, and platform usage data.

AI interaction information

Prompts, questions, responses, uploaded content, chat history, interactions with AI agents or expert avatars, and other information submitted through AI-enabled tools.

Contribution and collaboration information

Knowledge contributions, comments, expert input, ratings, peer interactions, submitted materials, and professional collaboration records.

Technical information

IP address, browser type, device information, operating system, essential cookies, and server log data (such as requests made and error records) generated when you use our website and platform. We use this information to operate, secure, and troubleshoot the service. We do not use third-party web-analytics or advertising-tracking services.

Blockchain or reward-related information

Where relevant, contribution records, verification events, reward transactions, digital credential references, or other records connected with blockchain-enabled trust, attribution, or reward mechanisms.

We may also collect aggregated, anonymised, or de-identified information for analytics, reporting, research, and platform improvement.

How We Collect Personal Information

We may collect personal information:

  • directly from you when you use our website, platform, forms, AI tools, or related applications;
  • when you create an account, complete a profile, submit content, or participate in learning activities;
  • when you communicate with us by email, forms, surveys, meetings, or events;
  • through essential cookies and server logs when you use our website;
  • from third parties, such as schools, universities, employers, organisations, integration partners, or authorised platform administrators, where appropriate.

If we receive personal information from a third party, we will take reasonable steps to make you aware of this where required or appropriate.

Cookies

We use only strictly necessary cookies — chiefly the secure, HTTP-only session cookie that keeps you signed in and protects the service against request forgery. We do not use advertising cookies, cross-site tracking technologies, or third-party web-analytics cookies.

You may disable cookies through your browser settings, but the sign-in and other authenticated features will not function without the session cookie.

Purpose of Collection

We collect, hold, use, and disclose personal information for purposes including:

  • providing and improving our website, platform, and services;
  • creating and managing user accounts;
  • delivering personalised learning experiences;
  • generating AI-supported lessons, courses, summaries, explanations, and content;
  • supporting expert-agent interactions and personalised upskilling pathways;
  • enabling collaboration between learners, educators, professionals, and subject-matter experts;
  • assessing skills, learning progress, and professional development needs;
  • supporting career development, workforce capability planning, and learning recommendations;
  • operating contribution, attribution, reward, or blockchain-enabled trust systems;
  • communicating with you about our services, updates, pilots, programs, or opportunities;
  • improving platform safety, quality, reliability, and performance;
  • conducting internal research, testing, and product development, using aggregated or de-identified information wherever practicable;
  • complying with legal, contractual, regulatory, and institutional obligations;
  • protecting our rights, systems, users, and platform integrity.

Where possible, we use aggregated or de-identified information for analytics, reporting, research, and product improvement.

AI-Enabled Services

Collective Learning AI uses Generative AI and related technologies to support personalised learning, content generation, knowledge sharing, expert-agent interaction, and professional development.

When you interact with AI features, the information you provide may be processed to generate responses, improve recommendations, maintain learning continuity, support user profiles, and enhance platform functionality.

You should not submit sensitive, confidential, or third-party personal information into AI tools unless you are authorised to do so and the feature is intended for that purpose.

AI-generated outputs may not always be accurate, complete, or appropriate for your circumstances. You should use your own judgement and seek professional advice where required.

Automated processing and human oversight

Our skill and career assessments are assistive and involve a human in the loop. They are designed to support decisions made by you, your educators, or (in a workplace deployment) your employer’s authorised staff — they are not automated decision-making that produces legal or similarly significant effects on you without human involvement. We do not use these outputs to automatically make employment, enrolment, or eligibility decisions about you.

Skill-state results are produced by deterministic logic over recorded evidence signals, and each result can be traced back to the evidence behind it. If you believe an assessment result is wrong, you can review the underlying evidence, add or correct information through reassessment, and raise the matter with your program administrator or with us using the contact details below. We keep an audit trail of how assessment results are produced so they can be explained and reviewed.

Direct Marketing

We may use your personal information to keep you informed about developments in our business, platform updates, events, programs, services, pilots, or opportunities that may be relevant to you.

We will only use your personal information for direct marketing where permitted by law. Direct marketing communications will include a simple way for you to unsubscribe or opt out.

We do not use sensitive information for direct marketing.

Disclosure of Personal Information

We may disclose personal information to third parties where reasonably necessary for the operation of our website, platform, and services, including:

  • AI model providers that process content you submit to AI features (see the AI-Enabled Services section);
  • transactional email providers, for account and service communications;
  • backup-storage providers (currently Amazon Web Services S3, in Sydney, Australia), which hold only encrypted copies of our data and cannot read the contents;
  • payment processors, if and when paid plans are enabled;
  • schools, universities, organisations, employers, or institutional partners using our services;
  • authorised administrators, educators, mentors, or program managers;
  • professional advisers, including legal, accounting, insurance, and compliance advisers;
  • regulators, government agencies, courts, or law enforcement bodies where required by law.

Where we use service providers, we take reasonable steps to ensure they handle personal information securely and only for authorised purposes.

We do not sell personal information to advertisers.

Macquarie University and Intellectual Property Context

Collective Learning AI is connected with the Macquarie University innovation ecosystem. Certain intellectual property used in or related to the platform may be owned by Macquarie University and licensed or otherwise made available to Collective Learning AI.

This Privacy Policy applies to personal information handled by Collective Learning AI. Macquarie University may have its own privacy obligations and policies. Where a project, pilot, research activity, or service involves Macquarie University, additional privacy notices, consent forms, agreements, or participant information statements may apply.

Blockchain and Contribution Records

Collective Learning AI may use blockchain or related technologies to support transparency, decentralisation, contribution recognition, rewards, credential verification, intellectual property attribution, or trust mechanisms.

Where blockchain features are used, we aim to avoid placing unnecessary personal information directly on public or immutable ledgers. We may instead use hashes, tokens, identifiers, metadata, or off-chain references where appropriate.

Because blockchain records can be difficult or impossible to alter or delete, users should understand that certain transaction or verification records may be persistent.

Security, Access, and Correction

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

Security measures may include access controls, encryption, authentication, audit logs, secure cloud infrastructure, monitoring, data minimisation, and internal policies.

When we no longer require personal information for the purpose for which it was collected, we will take reasonable steps to destroy, anonymise, or de-identify it, unless we are required or permitted to retain it by law, contract, audit requirements, security obligations, or technical constraints.

You may request access to the personal information we hold about you. You may also request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading. The Australian Privacy Principles include rights relating to access to personal information and correction of personal information.

To request access or correction, please contact us using the details below.

Where Your Information Is Stored and Processed

Collective Learning AI is hosted in Australia on infrastructure we own and operate. Your account, learning, and assessment data are stored on that Australian infrastructure, and encrypted backups are kept in Australia.

Some specific processing involves service providers located overseas, and this is disclosed to you here:

  • Conversational AI processing. Content you submit to AI features (for example chat messages and material you provide for assessment) is currently processed by Google’s Gemini API, which may process that content in the United States. Google is a disclosed service provider for this purpose. We have an on-premises AI migration in progress that, once complete, will move this processing onto AI models we host in Australia; we will update this policy and our subprocessor register when that occurs.
  • Sign-in with Google (optional). If you choose Google sign-in, Google processes your account identity for authentication. You can instead sign in with email.
  • Transactional email. Our email provider processes your email address and message content to deliver service communications.

We maintain a current list of these service providers (our “subprocessors”) and make it available to organisational customers on request. Where personal information is disclosed overseas, we take reasonable steps under the Australian Privacy Principles to ensure appropriate protections apply, unless an exception applies under law.

GDPR

In some circumstances, the European Union General Data Protection Regulation may provide additional rights to individuals located in Europe.

Where GDPR applies, you may have rights including:

  • the right to access your personal data;
  • the right to request correction of inaccurate personal data;
  • the right to request deletion of your personal data in certain circumstances;
  • the right to request restriction of processing;
  • the right to data portability;
  • the right to object to certain processing activities.

To exercise these rights, please contact us using the details below.

Workplace Deployments

Where your employer provides you with access to Collective Learning AI, your activity within your employer’s workspace — such as assigned courses, completions, attestations, and skill assessments you complete for your employer — is recorded and made available to your employer’s authorised administrators and managers, together with aggregated reporting. Your personal workspace on the platform (personal learning and career exploration you undertake outside your employer’s programs) is kept separate and is not visible to your employer unless you explicitly choose to share it.

To the extent this recording constitutes surveillance of employees under the Workplace Surveillance Act 2005 (NSW) or a comparable law in another state or territory, your employer is responsible for giving you the notices that law requires (generally, written notice at least 14 days before the surveillance starts, under a workplace surveillance or monitoring policy). Collective Learning AI provides employers with accurate descriptions of what the platform makes visible to them, keeps any optional behavioural-capture features turned off by default for employer workspaces, and does not enable additional monitoring of an employer’s workspace without that employer’s written instruction.

Children and Students

Collective Learning AI may provide services to schools, universities, students, and education providers.

Where our services are used by minors, we may require consent from a parent, guardian, school, university, or authorised institution, depending on the context and applicable law.

We encourage parents, guardians, educators, and institutions to supervise and guide young users when using AI-enabled learning tools.

Complaints

If you have a complaint about how we handle your personal information, please contact us using the details below.

We may ask you to provide further information so we can properly understand and respond to your concern. If we agree that your complaint is well founded, we will take reasonable steps to address the issue.

If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updated version will be posted on our website with a revised “Last updated” date. Your continued use of our website or services after changes are posted will indicate your acceptance of the updated Privacy Policy, where permitted by law.

How to Contact Us About Privacy

If you have any questions, seek access to your personal information, request correction, or have a complaint about our privacy practices, please see the contact details on our home page. Privacy enquiries can be addressed to the Privacy Officer at our registered address.