Legal
Kestrel terms of use
For everyone who uses Kestrel. Version 1.0, 31 October 2026.
These terms apply when you use Kestrel. Please read them. You accept them when you first sign in to Kestrel, and by using Kestrel you agree to them.
In these terms, we, us and our mean Hoverpoint.io Pty Ltd (ABN 87 703 233 667) of Level 1, 60 Martin Place, Sydney NSW 2000, which provides Kestrel. You and your mean you, the person using Kestrel.
In short
- Your school gave you your account, and it decides what you can see and do in Kestrel.
- The records in Kestrel belong to your school.
- Open a record only when your role needs it.
- Keep your sign-in to yourself.
- Enter information only when you or your school are authorised to enter it.
- Kestrel keeps a record of what each user opens, changes and sends.
- Check what Kestrel shows you before you rely on it for a decision about a person.
- If these terms are broken, your school decides what happens to you, and we can suspend the account.
This summary helps you read the terms. The full terms below are the agreement.
Words used in these terms
- Subscriber means the school that subscribes to Kestrel under its subscriber agreement with us, including each campus and school entity covered by that subscription. In these terms, "your school" means the subscriber.
- User means any person the subscriber gives access to Kestrel. Users include the subscriber's employees, contractors and volunteers, its students, and parents, carers and other family members it gives access to the family portal.
- Records means all information entered into Kestrel, by any user or through any integration, and everything Kestrel produces from it.
- Integration means another system the subscriber connects to Kestrel, such as a finance system, a payment provider, a learning platform or a government reporting portal.
- Subscriber agreement means the agreement between us and the subscriber for Kestrel. It covers fees, the term of the subscription, service levels, security and liability.
How these terms fit with other documents
- Subscriber agreement: The contract between us and your school. You are not a party to it unless you sign it for your school.
- These terms of use: The agreement between us and you. It covers your account, how you may use Kestrel, and what you must not do.
- Privacy policy: How we handle personal information. Nothing in these terms reduces what we owe you under privacy law.
- Your school's own policies: Your school's rules for using its systems and caring for its students' information. They apply alongside these terms.
These terms do not change the subscriber agreement. If these terms and the subscriber agreement differ about what your school or we must do, the subscriber agreement applies.
Your school may also ask you to accept its own agreements in Kestrel, such as consents in the family portal. Those are between you and your school.
A device that signs in with a credential your school issues to it, such as a kiosk, is not a user's account. Your school is responsible for how it is used.
Accepting these terms
You accept these terms when Kestrel asks you to, the first time you sign in. Kestrel asks again when we publish a new version.
If you are a student, your school gave you your account for your schoolwork and your own information. Your school, or your parent or carer, may go through these terms with you.
If you create accounts for others, or accept these terms for your school, you confirm that the subscriber has authorised you to do so.
If you do not agree to these terms, do not use Kestrel, and tell your school.
Your account
Your account is yours alone. Do not share your sign-in, and do not let anyone else use your account.
You sign in the way your school sets up: with your school's own sign-in (single sign-on), with a passkey kept on your own device, or with a one-time code sent to your email address. Keep your sign-in details, devices and email account secure; never share a code. Lock your screen when you leave it, and sign out of shared devices when you finish.
You are responsible for what happens under your account.
If you think someone else has used your account, or your device, passkey, email account or school sign-in has been lost or compromised, tell your school straight away, and tell us at security@hoverpoint.io.
Your school sets your role, and your role sets what you can see and do. Your access ends when your school ends it, when you stop being someone your school gives access to, or when the subscription ends.
Acceptable use
The main rule
Open a record only because your role requires it. Being able to reach a record is not a reason to open it.
Kestrel stores information about children and families, including enrolment details, family circumstances, health information and wellbeing notes. Treat each record as you would want your own family's record treated.
If you are a student or a parent, your account is for your own information, or your child's, and for the things your school uses Kestrel for with you.
What you must not do
You must not: - use Kestrel in a way that breaks the law or infringes anyone's rights; - open, search, download, copy or share a record beyond what your role requires; - let anyone who is not a user use Kestrel, or make Kestrel available to anyone else; - take records out of Kestrel, for example by export, screenshot, printing or personal email, except as your school allows; - enter information that you or your school are not authorised to enter; - use Kestrel to harass, bully, threaten or discriminate against anyone, or to send a message that is offensive or misleading; - pretend to be someone else, or use another user's account; - get around any access control, permission, rate limit or usage limit; - use scripts or other automated tools to reach Kestrel, other than the integrations your school has authorised; - upload anything harmful, such as malware, or do anything that interferes with Kestrel working for anyone else; - try to reverse engineer, decompile or copy Kestrel, or work out its source code; - use Kestrel, or anything it produces, to build a competing product or to train an artificial intelligence model; or - test Kestrel's security without our written permission.
Screens others can see
School office screens face counters, and staffroom computers are shared. When you show Kestrel on a projector or share your screen in a meeting, open only the record the meeting is about.
When something looks wrong
If you can see a record you should not be able to see, stop and tell your school. Do not keep looking to work out how far the problem goes.
If you find a security weakness in Kestrel, write to us at security@hoverpoint.io with enough detail for us to reproduce it. Reporting a weakness in good faith is not a breach of these terms. Reading someone's records to confirm a weakness is a breach, so stop as soon as you know the weakness exists.
Your school's rules
This section is the minimum standard. Your school's own rules can set a higher standard, and you must follow them too.
Records and the information you enter
Your school owns all records entered into Kestrel, and everything Kestrel produces from them. They do not belong to us, and they do not belong to you personally.
When you enter information into Kestrel, including personal information about anyone, you confirm that you or your school are authorised to enter it, and that it is accurate as far as you know.
Your school is responsible for collecting personal information lawfully, and for telling each person that their information is kept in Kestrel and provided to us as its technology provider.
Enter health, wellbeing, child protection and other sensitive information only as your school's policies allow, and at the access level your school sets.
We hold records only to provide Kestrel to your school. We do not sell them, and we do not use them to train artificial intelligence models or to build products for anyone else.
When your access ends, your school keeps its records. You do not have a personal right to take a copy. To ask about personal information Kestrel stores about you, contact your school.
What Kestrel shows and produces
Kestrel produces reports, statutory returns, attendance figures, fee calculations, invoices, messages and findings from the records your school has entered and the settings it has chosen. What Kestrel produces is only as accurate as those records and settings.
Check what Kestrel shows you before you rely on it to make a decision about a person, to submit a statutory return, or to send a message or invoice to a family.
Some features of Kestrel use artificial intelligence. Each one is off until your school turns it on in Kestrel's settings, so your school decides, under its own policy on artificial intelligence, whether and how they are used. When a feature is on and you use it, Kestrel sends your request, and the information from your school's records needed to answer it, to the artificial intelligence provider set in your school's settings. It sends only information you are allowed to see. Neither we nor the provider use it to train artificial intelligence models. The answers can be wrong or incomplete, so check them before you rely on them.
Kestrel supports your work and does not replace your professional judgement. Your duties, and your school's, stay with you and your school. These include duty of care, child protection and mandatory reporting, and statutory reporting.
When Kestrel acts on your school's settings
Kestrel can carry out steps for your school, such as sending messages and invoices, collecting payments, exchanging information with integrations, submitting returns and running scheduled checks.
Each of these runs only where your school has turned it on and set it up. Your school decides who can use each one and what must be approved before it takes effect.
When Kestrel sends something to a family, a government agency or another organisation, or changes information in an integration, it does so in your school's name and follows the approvals your school has set.
Integrations
Your school may connect integrations to Kestrel. When you set up or authorise an integration, you confirm that: - your school has authorised you to set it up; - your school has the licence or subscription it needs for that system; and - connecting it to Kestrel does not breach your school's agreement with the provider of that system.
Once an integration is authorised, Kestrel reads from it and writes to it for your school, within the scope your school has set.
Where an integration offers a secure connection method, such as a token, use it. Do not give us a person's username and password for another system.
Tell your school if an integration should be disconnected, including when you stop being authorised to use the other system.
The provider of each integration is responsible for its system, and its own terms apply to it. We are not responsible for an integration being available, accurate or working properly.
The record of what you do
Kestrel records what each user opens, changes, sends and exports, and when. Your school can see this record. It is used to keep Kestrel secure, to look into misuse, and to meet your school's legal duties.
The record stays after your access ends, for as long as your school's retention settings require.
Our intellectual property
We own Kestrel, including its software, its documentation and its user guide. You may use Kestrel only as these terms allow. Nothing in these terms gives you ownership of it.
You may use our name or logo only as we permit in writing.
If you give us feedback or a suggestion, we may use it without owing you anything. Do not include anything confidential in feedback.
Confidentiality
Records are confidential to your school. Keep what you learn from them confidential, and use it only for the purpose your school gave you access for. This duty continues after your access ends.
Keep confidential any information about us or Kestrel that is not public and that you come across while using Kestrel.
This does not apply to information that is public through no fault of yours, or that the law requires you to disclose, including under child protection and mandatory reporting laws.
Privacy
We handle personal information in line with our privacy policy at /privacy. It explains what we collect, why, where we store it, and how to ask us about it.
Most personal information in Kestrel is in your school's records. We handle it for your school and on its instructions. If someone asks about their information in your school's records, direct them to your school.
Nothing in these terms reduces what we owe you, or anyone else, under privacy law.
Availability and changes to Kestrel
We improve Kestrel regularly, so we may add, change or remove features.
Kestrel may sometimes be unavailable, including for maintenance.
Any commitment about availability or support is in the subscriber agreement and is owed to your school.
Suspending or ending your access
We may suspend or end your access if: - you breach these terms; - we reasonably believe your account is being used by someone else, or that your access puts at risk the security of Kestrel or anyone's information; - your school asks us to; or - your school's subscription ends or is suspended.
When we suspend an account, we tell your school the same day and say why. We also tell you, unless your school asks us not to or telling you would be unsafe or unlawful.
Your school decides what happens to you if these terms are broken. Some misuse of a record is also a criminal offence or a notifiable data breach. In that case your school has duties to those affected and to regulators, and we give your school what it needs to meet them.
You may stop using Kestrel at any time. To close your account, ask your school.
Your rights under Australian Consumer Law
Nothing in these terms excludes, restricts or modifies any guarantee, condition, warranty, right or remedy you have under the Competition and Consumer Act 2010 (Cth), including the Australian Consumer Law, or under any other law, where doing so would be against the law.
Where we are allowed to limit our liability for a breach of such a right, our liability is limited, at our option, to supplying the services again or paying the cost of having them supplied again.
This section applies over every other section of these terms.
Liability
This section is subject to the section on your rights under Australian Consumer Law.
Our responsibilities for providing Kestrel are owed to your school under the subscriber agreement.
Neither of us is liable to the other for indirect or consequential loss, or for loss of profit, revenue, savings, goodwill, opportunity or data.
Our total liability to you personally under these terms is limited to $1,000. This limit does not affect anything we owe your school under the subscriber agreement.
We do not limit our liability for death or personal injury caused by our negligence, for fraud, or for anything that cannot be limited at law.
Each of us must take reasonable steps to reduce any loss.
Changes to these terms
We may change these terms. When we publish a new version, Kestrel shows you what changed and asks you to accept it the next time you sign in. We tell your school's administrators at least 30 days before a new version applies. A change does not apply to anything that happened before it.
If you do not accept a new version, you will not be able to keep using Kestrel. Tell your school.
The current version is always available in Kestrel.
General
We may send you notices by email to the address on your account, or in Kestrel.
If part of these terms is invalid, that part is removed and the rest continues.
If we do not enforce a right straight away, we do not give it up.
These terms are governed by the law of New South Wales, and each of us submits to the exclusive jurisdiction of the courts of New South Wales.
For questions about what your role lets you do, start with your school. For a question about these terms, write to support@hoverpoint.io. For a question about personal information, write to privacy@hoverpoint.io. To report a security weakness, write to security@hoverpoint.io.