1. Who we are
Sub-a-Saint is operated by Kyle Driscoll (ABN 61 832 423 243) of 74 Waratah Pde, Narraweena NSW 2099 ("Sub-a-Saint", "we", "us", "our"). We provide a software platform (the mobile app and this website, together the "Service") that lets Catholic schools post casual and relief teaching shifts and lets casual teachers find and claim them.
This policy covers everyone who uses the Service: school administrators ("school admins") and casual/relief teachers ("teachers"), together "you".
2. Information we collect
What we collect depends on your role.
If you're a teacher, we collect: your name, email and phone number; the suburb you work from and the subjects/year levels you teach; a short bio and your skills/attributes; your NESA ID and right-to-work or visa status, if you choose to add them; your day-to-day availability; the schools you link with; and any documents you upload — CV, qualifications, evidence of teaching experience, Working With Children Check (WWCC), anaphylaxis certificate, or other supporting documents. If you add references, we also collect the name, relationship, phone number and email of the referees you list — personal information about someone else that you've given us, which is your responsibility to have their agreement for.
If you're a school admin, we collect: your name, a username you choose, and a recovery email address (used only for account recovery, never for signing in); your school's name and address; and, once billing is switched on, the student headcount you provide for pricing and details of your subscription status via our payment processor, Stripe (we never see or store your card details — see "Who we share it with" below).
From everyone, we collect account credentials (your password is hashed by our authentication provider — we never see it in plain text), the shifts, postings, applications and news items you create or respond to, a push notification token if you enable notifications, and standard technical data your device or browser sends automatically (like IP address and basic device/browser information).
3. How we collect it
Mostly directly from you — when you sign up, fill in your profile, upload a document, or use a feature of the app. We collect referee details directly from teachers, not from the referees themselves, and rely on teachers to have their referee's agreement before adding them. Some technical data is collected automatically by the app, the website, and our infrastructure providers as part of running the Service.
4. Why we collect and use it
- To create and run your account, and let schools and teachers find and connect with each other.
- To let school admins see a teacher's contact details and documents when deciding whether to link with, invite, or approve them for a shift.
- To send you notifications — push and email — about shifts, applications, approvals and account activity.
- To process and manage school subscription payments.
- To operate, secure, troubleshoot and improve the Service.
- To meet our legal obligations, and to investigate misuse or resolve disputes.
We don't sell your personal information, and we don't use it for anything beyond what's described in this policy.
5. Who we share it with
Between users of the Service, by design: a teacher's phone number, email address, and every document on their profile (CV, WWCC, qualifications, evidence, certificates) are visible to any school admin using Sub-a-Saint — not only schools that teacher has linked with. This is intentional: it lets a school browse the full pool of registered teachers to decide who they might want to link with or hire, before a relationship exists. A teacher's subjects, skills, bio, NESA ID, right-to-work status and references are visible to any signed-in user of the Service (both teachers and admins). If you'd rather a specific teacher profile not be actively surfaced to schools, use the in-app "pause" toggle — an inactive teacher keeps their existing school links but is excluded from the browsable directory and from notifications.
With our service providers, who process personal information on our behalf, only for the purposes described in this policy:
- Supabase — hosts our database, file storage, and handles authentication.
- Stripe — processes school subscription payments. We never receive or store card details ourselves.
- Resend — delivers transactional emails (notifications, password resets, registration codes).
- Expo, Apple and Google — deliver push notifications to your device.
We may also disclose personal information where required by law, to protect the rights or safety of Sub-a-Saint or others, or as part of a business transfer (for example, a sale of the business), in which case we'd take reasonable steps to ensure it continues to be protected consistently with this policy.
6. Disclosure overseas
Some of the service providers listed above are based overseas (including in the United States), and our hosting infrastructure may store or process data on servers located outside Australia. Before disclosing personal information to an overseas recipient, we take reasonable steps to satisfy ourselves that the recipient handles it consistently with the Australian Privacy Principles — including relying on their own privacy and security commitments. By using the Service, you consent to this overseas storage and processing where the APPs require your consent for it.
7. Direct marketing
We don't currently send promotional marketing. If that changes, we'll only do so with your consent where required, and every marketing message will include a clear way to opt out — account and service-related notifications (shift alerts, approvals, security notices) aren't marketing and will continue regardless, as they're part of the Service itself.
8. Data security and retention
We use reasonable technical and organisational measures to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure — including encrypting data in transit, restricting database access with row-level security policies scoped to your account and role, and limiting who can view sensitive fields like a teacher's contact details or documents to the audiences described above. No system is perfectly secure, and we can't guarantee absolute security.
We keep personal information for as long as your account is active, and for a reasonable period after that where we have a legitimate business or legal reason to (for example, financial records for tax purposes). You can ask us to delete your account and associated personal information at any time — see "Access and correction" below, or read exactly what gets removed (and when unlinking a school doesn't) in our Data Retention & Deletion Policy.
9. Access and correction
You can view and update most of your own information directly in the app (your profile, documents, availability, references). For anything you can't change yourself — including requesting a copy of the personal information we hold about you, correcting it, or deleting your account — contact us using the details below. We'll respond within a reasonable time, and won't charge you for making a request. We may need to verify your identity first, and there may be circumstances where the Privacy Act lets us decline part of a request (for example, where it would unreasonably impact someone else's privacy) — if so, we'll explain why.
10. Complaints
If you think we've mishandled your personal information, contact us first using the details below — we'll investigate and respond. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC): 1300 363 992, oaic.gov.au.
11. Cookies and similar technology
The website uses strictly necessary cookies to keep you signed in and remember your session — nothing beyond what's needed to run the Service. We don't currently use third-party advertising or analytics cookies.
12. Children's privacy
The Service is built for adults — school administrative staff and casual/relief teachers — and isn't directed at or knowingly used by children. We don't knowingly collect personal information from anyone under 18.
13. Changes to this policy
We may update this policy from time to time as the Service changes. We'll update the "last updated" date above when we do, and let you know of any change we consider material.
14. Contact us
Questions, requests, or complaints about your personal information: email info@sub-a-saint.com.au.