Privacy Policy

Last updated: March 2026. Training Wallet is built on a private-by-default principle — your credentials belong to you, not us. This policy explains exactly what data we hold, why we hold it, and how you stay in control.

Introduction

Training Wallet is a product of Search Training Pty Ltd (ABN to be published). We operate a web wallet and Progressive Web App (PWA) that lets learners store, manage, and selectively share their vocational training credentials. This Privacy Policy applies to all users of the Training Wallet platform, including learners, verifiers, and Registered Training Organisations (RTOs) who issue credentials through our system.

Information We Collect

We collect the minimum data needed to operate the platform:

Account identity

Name, email address, and contact details you provide when creating an account.

Credential records

Training outcomes, qualifications, unit completions, and certificates issued by RTOs to your wallet.

Sharing history

A log of which credentials you have shared, with whom, and any expiry windows you set.

Device & usage data

IP address, browser type, and anonymous usage analytics used solely to improve platform reliability.

How We Use Your Information

  • Account management — to register your account, respond to support requests, and send security notices.
  • Credential storage — to securely hold the credentials issued to you by RTOs in your personal wallet.
  • Verification — to generate time-limited verification links when you choose to share a credential with an employer or third party.
  • Platform improvement — to identify reliability issues and improve the product using aggregated, anonymised analytics.

Credential Privacy

Our user-first data ownership model:

Credentials stored in Training Wallet are owned by you, not by us. We act as a secure custodian. No employer, RTO, or third party can view a credential in your wallet unless you explicitly share it via a verification link.

All credentials are private by default. You decide when and with whom to share them.

Consent-Driven Sharing

When you choose to share a credential, Training Wallet generates a unique verification link. You control:

  • What is shared — only the specific credential you select, never your full wallet.
  • Who can view it — links can optionally be locked to a named recipient.
  • For how long — you may set an expiry date after which the link returns no data.
  • Revocation — you can invalidate any active link at any time from your wallet dashboard.

Verifiers who follow a link see only the credential status — not your name, contact details, or any other credentials in your wallet.

Data Security

We use industry-standard security practices to protect your data:

Encrypted at rest

Credential data is stored with AES-256 encryption.

Encrypted in transit

All connections use TLS 1.2 or higher.

Access controls

Role-based access limits who can view platform data internally.

Anonymised & Aggregated Data

We may analyse anonymised, aggregated data (e.g. which credential types are most commonly issued, or average time-to-verify) to improve the platform and produce sector-level insights. This data cannot be traced back to any individual user or specific credential.

Your Rights

Under Australian privacy law, and where applicable the GDPR, you have the right to:

  • Access your personal data held by Training Wallet.
  • Correct inaccurate or incomplete information in your account.
  • Delete your account and the personal data associated with it (credential records issued by RTOs may be subject to their own retention obligations).
  • Portability — request an export of your credential data in a structured format.
  • Object to any processing beyond what is strictly necessary to operate the service.

All rights can be exercised directly from your account dashboard or by contacting us at the address below.

Data Retention

We retain your account and credential data for as long as your account is active, or as required by applicable law. If you close your account, personal data is deleted within 30 days. Note that RTOs are independently required to retain regulated student records in accordance with their relevant training authority obligations — deletion from Training Wallet does not affect the RTO’s own record-keeping.

Contact Us

Questions or concerns about this Privacy Policy? Contact our Privacy Officer:

privacy@trainingwallet.com.au