Privacy at JoeyLoop
Last updated 9 October 2026. JoeyLoop is a product of LoanLoop Pty Ltd (ABN 77 696 406 112).
JoeyLoop handles some of the most sensitive data there is: information about young children. We take that seriously, and we build for it from day one.
Australian data residency
Every JoeyLoop record — children's profiles, photos, voice recordings, observations and documentation — is stored in Australia, in Microsoft Azure's Australia East region. Voice recordings are transcribed in Australia too, by Azure AI Speech in the same region.
There is no exception — and this page used to say there was
An educator speaks or types a few notes, and JoeyLoop uses an AI model to turn them into a draft observation that she then edits and approves. That step runs in Australia, in Australian data centres. Voice recordings are transcribed in Australia too. No part of a child's record is sent overseas.
Until 4 October 2026 this page said the opposite, because it was true. That step used to run outside Australia, and we said so here rather than leave it unsaid. We have now changed the product, and we have kept this paragraph so you can see what changed instead of finding a quiet edit.
We still remove children's names before that text is sent at all. Running the model in Australia and sending less about a child are two different protections, and we keep both — one is about where your information goes, the other about how much of it travels. Audio recordings and photographs are never sent to the model.
There is no overseas fallback. If the Australian service cannot answer, the drafting step stops and the educator writes the note herself. It does not quietly go somewhere else.
Privacy Act and the APPs
We are committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, including a documented child-data handling policy, granular guardian consent controls, and records-retention schedules aligned with the Education and Care Services National Regulations.
Your data stays yours
Services own their data and can ask us for a copy of it at any time. Self-service export is being built. We don't sell data, and we don't use your service's data to advertise to families.
What we hold, and why
A childcare service uses JoeyLoop to keep the records the law already requires it to keep. On its behalf we hold: a child's name, date of birth and enrolment details; the people authorised to collect them; care needs, allergies and medical plans where a family has given them; observations of a child's learning, including photographs and the voice recording an educator spoke; attendance; and records of incidents, injuries and illness.
We also hold accounts for the service's own staff — a name, a role, a sign-in credential. Educators who only use a shared iPad have no email address with us at all.
We collect none of it from families directly. Everything reaches us because a service entered it, or an educator recorded something during the day. We do not advertise, we do not profile children, and we do not sell or share any of it with anyone for their own purposes.
Who the record belongs to
The childcare service has the relationship with your family, and the record is theirs. We hold and process it for them. To see, correct or ask about your child's record, ask your service first — they can act on it directly, and they know your family. If they cannot help, write to us and we will work with them.
How long it is kept
Australian childcare records have retention periods set by law, not by us, under regulation 183 of the National Regulations. They are long, and they are long on purpose.
- Most of a child's record is kept for three years after they leave.
- Records of an incident, injury, trauma or illness are kept until the child turns 25 — so that a person can find out what happened to them as a child.
JoeyLoop classifies every record against those rules and works out when each becomes due for disposal, so a service can see what it holds and why. Disposal is then carried out on the service's instruction rather than automatically — we would rather a person decided than have a scheduled job remove a record nobody had looked at.
Correcting or removing something
Ask your service. Under the Australian Privacy Principles you may ask to see the personal information held about you or your child, and to have it corrected if it is wrong. Your service can do both inside JoeyLoop.
What we will not do is pretend a record can vanish when the law says it must be kept. If a retention period applies we will tell you which one and when it ends, rather than quietly doing nothing. Where no retention period applies, a record can be removed on the service's instruction.
We also keep a log of what was done in the system — who published a record, who signed in, who changed a setting. That log is append-only and is not deleted, because a record of what was done is only trustworthy if it cannot be edited afterwards. It holds identifiers and actions, and we work to keep children's names and words out of it.
Who else touches it
Two services, both inside Australia, both under contract, neither permitted to use anything for its own purposes:
- Microsoft Azure — hosting and storage, Australia East.
- Amazon Web Services — the AI model that writes the first draft of an observation, constrained to Australian regions.
No part of a child's record is sent outside Australia, and no third-party analytics, advertising or tracking service is built into JoeyLoop at all.
Who we are
JoeyLoop is operated by LoanLoop Pty Ltd (ACN 696 406 112, ABN 77 696 406 112), an Australian company. LoanLoop Pty Ltd is the entity responsible for personal information handled through JoeyLoop, and is the contact for any privacy question, access request or complaint.
Questions
Contact us any time at info@loanloop.com.au.