What we keep, and what we never ask for.
Last updated 23 August 2026. Beta notice; reviewed before public launch.
The short version, for students
- We know your name, your suburb, your age band (15, 16 or 17, 18 to 20, 21 and over), your mobile number, and the hours you are free. That is it.
- Employers see your full name only after you have both agreed to meet. Before that, a verified employer sees your first name and last initial.
- We never ask for your address, your date of birth, or a resume.
- If you upload a timetable photo, we read the free hours off it and delete the photo within 30 days.
- Employers cannot see who you are until a person has checked their business. Before that, they see "fits 2 of 2 shifts, nearby, eligible" and nothing else.
- Nobody can find your profile by searching. There are no ads.
- You can pause or delete your account from your profile. Deleting removes what identifies you; we keep only what the law makes us keep.
What we collect and why
Students. Mobile number (your login, and how we reach you), first and last name, suburb (never a street address), age band (never a date of birth), education type, availability grid, travel radius, job categories, and claimed certificates such as RSA or a Working with Children Check. Applications, messages with employers, and meetups are stored so both sides can see the same history, and so our moderators can act on a report.
Employers. Mobile number, business name, ABN, venue, and the details needed to verify the business. Payment is handled by Stripe; we store the payment method reference and your tax invoices, not card numbers. Email is optional and only used to send invoices.
Everyone. Device tokens for push notifications, and the technical logs any service keeps to run safely (request ids, error traces, rate-limit counters), kept for 30 days.
Child-protective defaults, for every account
Every student account gets the same protections whatever age is declared: no publicly discoverable profile, contact gated behind verified employers, coarse location only, and no marketing. Meetup locations for under-18 applicants are locked to the employer's verified venue when the invitation is written, not checked afterwards. Reports snapshot the conversation before anything else happens, so evidence survives a deleted message.
AI, and what it sees
We use a large language model to turn an employer's words into a listing, to read a timetable photo, and to draft a student's intro. Those calls run under zero data retention terms with the provider: nothing is kept or used for training. Drafts are shown to you before they go anywhere, and you can change every word.
Where it lives, and for how long
In Australia (AWS Sydney, with backups in Melbourne). Timetable photos are deleted within 30 days. Invoices are kept for seven years because the tax law says so. Closed conversations are de-identified after 12 months. When you delete your account, what identifies you is removed and the rest is de-identified.
Your choices
Pause or delete from your profile in the app, or delete from studentjobs.com.au/delete-account with just your mobile. Ask us for a copy of what we hold, or to correct it, from Help. Complaints go to us first and, if we do not sort it, to the Office of the Australian Information Commissioner.