Privacy Policy

1. Who We Are

Empress Rising ("we", "us", "our") is an online empowerment program for girls aged 11–14, operated by Allison Stummer. We are committed to protecting the privacy of our users, particularly the young people who participate in our program.

2. Information We Collect

We collect the following types of information:

• Parent/Guardian Information: Full name, email address, phone number, relationship to child, billing address, and payment details (processed securely via Stripe).
• Student Information: Student account information includes first name, age, username, securely hashed password, account identifiers and links to the parent and enrolled programme. We do not ask students to provide surnames or personal contact details when creating their account. Optional profile features can store an onboarding answer, a birthday month/day and a profile photo. A photo requires parental consent.
• Usage Data: Lesson progress, video watch time, community posts, and session attendance for the purpose of delivering the program.
• Student-generated Information: Where these features are used, the platform stores journals and mood tags; mood, energy and confidence check-ins and optional notes; lesson reflections; Time Capsule letters; personal toolkit entries, saved notes and practice responses; community posts and replies; Ask Allison messages and replies; and questions or conversation text entered in AI-assisted tools. Free text may contain identifying or sensitive information even though we do not ask for it.
• Programme Administration and Safety Records: Consent acknowledgements, enrolment and payment references, downloads, RSVP and attendance, moderation status, staff family notes, follow-up tasks and support-handling records.
• Technical Data: IP address, browser type, and device information for security and performance purposes.

3. How We Use Your Information

• To deliver the Empress Rising program and track progress
• To process payments and manage subscriptions
• To communicate with parents about their child's participation
• To moderate community spaces and ensure safety
• To improve our program and services
• To comply with legal obligations

4. Children's Privacy

Student registration details are separate from the student-generated, programme and technical information described above. Student accounts must be created and managed by a parent or legal guardian with authority to provide consent. Students must not create accounts independently.

Under our community rules, student contributions require moderation before publication. We do not sell children's personal information. Information is handled by contracted service providers where needed to deliver the service and may be disclosed where required by law. Community contributions are visible to authorised participants in the relevant programme space. Ask Allison messages and replies are available to the requester and authorised staff.

5. Data Security

We implement appropriate technical and organisational measures to protect personal information, including encryption in transit (TLS), secure password hashing, and access controls. Payment-card details are entered in Stripe's hosted checkout and are not collected by our checkout form. We store payment and transaction references, amounts, status and instalment records to administer enrolments.

6. Data Retention

We retain personal information for as long as necessary to provide our services and comply with legal obligations. Parent accounts and associated student data can be deleted upon request. Progress data is retained for the duration of the program plus 12 months. The end of access to paid lessons and associated resources seven days after the official cohort end date does not itself delete personal information. Progress retention is separate from resource access. This access deadline does not promise automatic deletion of journals, messages, community content or other stored records. Existing deletion-request and withdrawal rights remain.

7. Your Rights

You may make the following requests. These offered request rights do not limit any rights available under applicable privacy law:

• Access the personal information we hold about you or your child
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Withdraw consent for your child's participation at any time
• Lodge a complaint with the Office of the Australian Information Commissioner

8. Third-Party Services

The platform uses the service categories described below. Additional feature-related flows apply where those features are used or configured:

• Stripe: Hosted payment processing, including parent contact details and enrolment, student-profile and transaction references used for payment administration. Where entered, practical assistance notes are also included in checkout metadata sent to Stripe
• Bunny.net: Video content delivery, including video/library identifiers and browser connection information when a video is loaded
• Zoom: Live community sessions
• Email Delivery: Where configured, email services process recipient addresses, message content and attachments. Operational parent messages can include a student's first name and programme or support information. The source includes a Resend email integration.
• Hosting, Database, Storage and Authentication: Configured platform services process stored records and files, account and session identifiers, and technical connection information needed to operate the platform.
• Notifications: Where notifications are used, delivery services process message content and delivery references. Optional browser push uses the browser's selected push service and stores subscription details.
• AI-assisted Features: Where an AI-assisted feature is used, submitted questions, selected practice responses or conversation text may be sent through a configured model gateway. Conversation records may also be stored. This description is not a promise that all model providers have identical retention or training settings.
• Browser Services: The website loads web fonts and supports configured analytics scripts. Requests to these services include browser connection information; the applicable processing depends on configuration. This does not authorise student advertising retargeting.

Each service has its own privacy policy and data handling practices. These descriptions do not grant parents access to private journals, moods or reflections, and do not permit sale of children's information or new advertising uses. They do not represent that all information is processed only in Australia.

9. Contact Us

For privacy-related enquiries, please contact us at: hello@empressrising.com.au