The scope is the platform
Rodcha brings together public research utilities, account-based courses and private student or subscriber tools. This policy addresses those services, including registration, purchasing, progress, certificates and optional directory profiles. The information handled depends on which services you use. Public local-processing tools do not require an account.
1. Operator and contact
Rodcha is operated by Thinkedu Pty Ltd, an Australian business. Rodcha is the international platform associated with Brad Lyons' training and research-tool work. Thinkedu is our Australian training site.
Contact [email protected] for privacy enquiries. We handle personal information in accordance with laws that apply to our activities, including the Privacy Act 1988 and the Australian Privacy Principles where applicable. Using an international service does not remove mandatory protections available to you under applicable law.
2. Registration and account information
When you register, the account information includes your full name, email address, phone number and a password stored in a securely hashed form. Account records may also include verification status, account changes, login and security events, permissions and course or tools entitlements.
We use account information to identify the learner, verify email access, authenticate users, respond to support requests, protect accounts and deliver the purchased services. Information required for registration is distinguished from optional profile information. If necessary registration information is not supplied, we may be unable to create or maintain the account.
Do not send passwords, verification codes or payment card details in support messages. We may ask for reasonable information to verify an account-related request, but not for your existing password.
Course, assessment and certificate records
For course services, records may include enrolments, purchased subjects, access start and end dates, lesson progress, assessment submissions, feedback, results and completion status. Certificate records may include the learner's name, course title, issue date, identifier and information needed to confirm its authenticity.
We use these records to provide access, support learning, assess work, issue or correct certificates and deal with disputes. Any certificate-verification service must disclose what it makes visible. Your assessment work and account contact information are not automatically made public.
3. Purchases and tools subscriptions
Course purchasing and tools subscriptions use Stripe payment services. Payment information handled for administration can include the Stripe customer identifier, checkout or subscription identifiers, purchased items, amount, currency, tax or billing details, transaction status, receipts, renewal status and cancellation records.
Stripe handles card collection through its payment interfaces. Do not send card details to Rodcha by email. We use payment confirmation and subscription records to grant the appropriate access, manage renewals, provide receipts, resolve payment issues and meet financial record obligations. Stripe handles information under its privacy policy as well as the arrangements applicable to the service.
Course access and a tools subscription are separate entitlements. A subscriber can use a tools plan without purchasing a course. Student tools are provided according to the relevant course or entitlement, not automatically according to every subscription feature.
4. Public and private tool information
Public local-processing utilities
The public search builders, variant generators and checklist utilities in the free toolkit process their inputs in your browser. They do not send those inputs to Rodcha or save them in browser storage. Copying output uses your device's clipboard only when you select the copy control.
Search and lookup launchers prepare external links. A query or public image URL is supplied to an external service only when you choose its link. That service can receive the query, your connection information and information it normally collects. Its own terms and privacy policy apply. Rodcha does not automatically upload a private image file.
Account-based and provider-backed tools
Private tools may process submitted identifiers, queries, uploaded material, research results or saved work, depending on the feature. Information required for a provider-backed lookup may be sent to the named service used for that lookup. Collection notices and feature instructions should explain what leaves the platform, what is saved and any retention or provider conditions before use.
Only submit information you are authorised to use for a lawful purpose. Do not submit live case files, sensitive information, private credentials or another person's confidential material without an appropriate basis and a suitable secure workflow. Public availability does not remove privacy obligations.
Research data is used to provide the requested feature and support its security, not to create public profiles of investigation subjects. If an AI-assisted feature is offered, its provider handling and any significant automated-decision use must be explained before personal information is supplied. Do not assume that a tool output is verified or suitable for a consequential decision without human review.
5. Optional public student directory
Directory participation is opt-in. A profile is published only when you explicitly choose to appear. Public fields can include the display name, professional bio, services offered and optional city or region that you choose to publish. Registration email and phone details are not automatically published.
Published information is visible to other visitors and may be indexed, copied or cached by third parties. Withdraw directory visibility or update the profile through account settings, or contact us for help. Removing a profile from Rodcha may not remove copies already held by search engines or other people.
Directory participation is not a background check, professional licence, endorsement or guarantee of a person's services. We may moderate profiles for lawful use, accuracy or compliance with platform rules.
6. Enquiries, technical records and collection
We collect correspondence you send, such as a course enquiry, support message, feedback or complaint. We generally collect information directly from you, from an authorised representative or through your use of the service. An organisation arranging team enrolment may supply agreed learner contact details.
Website and security systems may record IP addresses, requested routes, browser or device information, access times and security events. These records are used for service delivery, fault diagnosis and abuse prevention. Avoid putting sensitive information in a URL or account profile.
You may make a general enquiry anonymously or under a pseudonym where practical. Identified account, purchase, assessment or certificate services may require sufficient information to provide the service or verify a request.
8. Sharing and overseas processing
Information may be handled by service providers for hosting, payment processing, transactional email, customer support, backups, course delivery or requested tool functions. Professional advisers may receive information where reasonably necessary. We seek appropriate confidentiality and security arrangements and limit sharing to the relevant purpose.
We may also disclose information where required or authorised by law, to respond to a serious security issue, or to establish, exercise or defend a legal claim. We do not sell personal information or automatically publish learning records.
Stripe, hosting, email and other service providers may process information outside your country, including outside Australia. Processing locations depend on the actual provider and product arrangements. Information about current providers and applicable locations can be requested before you use a service.
Where overseas disclosure occurs, we take reasonable steps required by applicable law to protect the information and identify likely recipient countries where practicable. A visit, enquiry or account registration is not blanket consent to waive cross-border privacy protections. Any required international transfer arrangements must reflect the actual services used.
9. Security and retention
We take reasonable steps appropriate to the information and risk to protect against misuse, interference, loss and unauthorised access, modification or disclosure. Platform safeguards include controlled access, password hashing, secure sessions, request validation, payment confirmation checks and provider security arrangements. No internet service can be guaranteed completely secure.
Information is retained for as long as reasonably needed to provide the service, maintain access and learning records, administer certificates, address complaints, prevent fraud or meet legal obligations. Financial records and evidence relevant to disputes may need to be kept after account closure. Operational logs, backups and provider records have their own documented retention periods.
When information is no longer needed and there is no applicable requirement to retain it, we take reasonable steps to delete or de-identify it. We assess security incidents, act to contain them and notify affected people and regulators where legally required.
10. Access, correction and privacy choices
You can request access to information we hold about you, ask for correction, request account closure or deletion, change optional directory visibility, or withdraw consent for optional uses. Contact [email protected]. We may verify your identity using only information reasonably needed for that purpose.
We aim to respond within 30 days, or the period required by applicable law. If additional time is needed, we will explain why. There is no charge to make a request or to correct information. If a lawful, reasonable access cost applies, we will explain it before proceeding.
Requests may be limited by legal obligations, security requirements, the rights of others or permitted exceptions. If a request cannot be met, we will explain the reasons where lawful and the complaint options. Account deletion is distinct from cancelling a subscription and may affect access to learning records, so we will explain the practical effect.
If applicable law provides additional rights, these may include restriction, objection, portability or a complaint to a local supervisory authority. We will assess requests according to the law applicable to the service and your circumstances.
11. Adults and assessment decisions
The platform is directed to adult learners and professional users. Do not register a child or submit a child's personal information through ordinary course or tool workflows without an expressly agreed and lawful arrangement. Contact us if you believe a child's information has been supplied inappropriately.
Course completion rules and any automated assessment or certificate process should be explained in the course requirements. Where a decision has a significant effect, we provide the information and review avenues required by applicable law. A learner may raise an assessment or certificate concern with support.
12. Complaints and policy updates
Send a privacy complaint to [email protected]. Describe the issue, relevant dates and the outcome you are seeking. We will acknowledge the concern, investigate it and aim to provide a written response within 30 days. If more time is needed, we will keep you informed.
If the complaint is unresolved, you may contact the Office of the Australian Information Commissioner where it has jurisdiction, or another relevant regulator in your location.
We may update this policy when services, providers or legal requirements change. The current version and date appear here. Significant changes receive additional notice or consent where required. A new provider-backed tool or AI feature must have suitable privacy information before launch.