Step Out Academy

Privacy Policy

Last Updated: 26 March 2026

Step Out Academy Pty Ltd (“Step Out Academy”, “we”, “our”, or “us”) respects your privacy and is committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use:

– the Step Out Academy website
– the Tour Management System (TMS)
– the Step Out Academy mobile application
– any associated services.

By using our services, you agree to the collection and handling of personal information as described in this policy. Please take a moment to read this policy to understand how we handle your information and ensure your privacy. If you have any questions, don’t hesitate to contact us at admin@stepoutacademy.com.au.

1. Types of Personal Information We Collect

The personal information we collect depends on how you interact with Step Out Academy services.

Tour Management Users

Administrators, organisations, partners or guides who create accounts in the Tour Management System may provide personal information including:

  • name

  • email address

  • organisation name

  • user role or permissions

  • account login credentials.

Login credentials are securely encrypted and managed through secure authentication services.

Website Users

When you visit our website we may collect technical information including:

  • IP address

  • browser type

  • operating system

  • referring website

  • pages viewed

  • date and time of visits.

Mobile Application Users

The Step Out Academy mobile application typically does not require users to create an account.

The application may collect limited technical information including:

  • device type and operating system

  • application usage data

  • approximate location data required to trigger location-based tour content

  • error logs and performance information.

The Step Out Academy mobile application does not collect names, email addresses, or other direct personal identifiers from app users.

Location data is used only to enable location-based tour experiences and is not used to track individuals or store historical movement data.

2. Children’s Privacy

Step Out Academy services may be used by children under the supervision of parents, carers, educators, or tour organisers.

The public mobile application does not require users to create accounts, and we intentionally limit the collection of personal information through the application. Children may optionally enter a name when starting a tour to personalise the experience. This information is processed locally within the application and is not stored by Step Out Academy.

The Tour Management System is intended for use by authorised adults such as administrators, organisations, educators, or tour guides.

3. How We Collect Personal Information

We collect personal information in several ways, including:

  • when a user registers for the Tour Management System

  • when users contact us via email or website forms

  • when the website or mobile application is used

  • through automated technologies such as analytics tools.

Some technical information may be collected automatically through cookies, analytics services or application monitoring tools.

4. Purpose of Collecting Personal Information

We collect personal information to:

  • operate and maintain the Step Out Academy platform

  • enable organisations to create and manage tours

  • deliver educational experiences through the application

  • improve platform performance and functionality

  • analyse usage trends and improve user experience

  • communicate with users and respond to enquiries

  • comply with legal and regulatory obligations.

5. Aggregated and De-Identified Analytics

Step Out Academy may generate aggregated and anonymised analytics about how tours are used.

These analytics may include information such as:

  • number of users starting a tour

  • number of stops viewed

  • average time spent at tour stops

  • general engagement patterns.

This information:

  • does not identify individual users

  • does not include personal identifiers

  • does not include device identifiers or personal location history.

Tour organisers may access these aggregated statistics through the Tour Management System to understand how tours are performing. These analytics are generated using de-identified usage data and cannot be used to identify individual users.

6. Cookies and Analytics Technologies

Our website and applications may use cookies or similar technologies to:

  • analyse website usage

  • improve user experience

  • monitor application performance.

Users may configure their browser settings to disable cookies; however this may affect some functionality of the service.

7. Disclosure of Personal Information

Step Out Academy does not sell personal information.

Personal information may be disclosed where necessary to operate the service, including to trusted third-party providers that support our platform infrastructure.

Personal information may also be disclosed where required by law, regulation or legal process.

8. Third-Party Service Providers (Sub-processors)

Step Out Academy uses trusted third-party service providers to host and operate the platform. These providers process data only as necessary to provide their services.

Provider Purpose Data Processed
Amazon Web Services (AWS) Cloud infrastructure, hosting and storage Account data, system data
Amazon Cognito Authentication and identity management Login credentials, user identifiers – Tour Management System Only
Google Analytics Website and application analytics Device information, usage data, IP address
Google Firebase Application infrastructure and analytics Device identifiers, application usage
Mapbox Maps and location services used within the application Device information, map tile requests, approximate location data

These providers are contractually required to process personal information only for the purpose of delivering services to Step Out Academy.

9. Overseas Disclosure of Personal Information

Step Out Academy primarily hosts and stores application data in secure cloud infrastructure located in Australia (AWS Sydney region).

Some third-party service providers used to operate the platform may process limited technical information through global infrastructure networks.

Step Out Academy takes reasonable steps to ensure these providers handle personal information in accordance with applicable privacy and security standards.

10. Security of Personal Information

Step Out Academy takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

Security measures include:

  • encrypted data transmission

  • secure cloud infrastructure

  • role-based access controls

  • monitoring and security logging

  • vulnerability scanning and security reviews.

11. Access and Correction of Personal Information

Individuals may request access to personal information held by Step Out Academy.

If personal information is inaccurate, incomplete or out of date, individuals may request correction.

Requests can be made by contacting us using the details provided in this policy.

12. Deletion of Personal Information

Individuals may request that personal information associated with their account be deleted.

We will respond to such requests in accordance with applicable privacy laws and within a reasonable timeframe.

13. Privacy Complaints

If you believe your privacy has been breached, you may contact Step Out Academy using the details below.

We will investigate complaints and respond within a reasonable timeframe.

If you are not satisfied with our response, you may contact the:

Office of the Australian Information Commissioner (OAIC)
https://www.oaic.gov.au

14. Data Retention

Step Out Academy retains personal information only for as long as necessary to provide services, comply with legal obligations or resolve disputes.

Operational system logs may be retained for security and compliance purposes for up to seven years in accordance with Step Out Academy’s internal security policies.

When personal information is no longer required, it will be securely deleted or anonymised.

15. Changes to This Privacy Policy

Step Out Academy may update this Privacy Policy from time to time.

Where significant changes occur, users may be required to review and accept the updated policy before continuing to use the service.

16. Contact Information

If you have questions about this Privacy Policy or wish to access or correct your personal information, please contact:

Step Out Academy Pty Ltd
Email: admin@stepoutacademy.com.au
Website: https://stepoutacademy.com.au

Contact Us

If you would like your data deleted, please email us by clicking the link below:

Take The Next Step