Overview
ATARprepAI ("we", "us") is an AI-powered study tool for Australian high school students. This policy explains what personal information we collect, why we collect it, and how we handle it — in plain language.
By creating an account, you confirm you have read this policy and agree to our Terms of Service. If you are under 18, a parent or guardian should also review this document.
Information we collect
Account information: When you create an account, we collect your email address and a securely hashed version of your password (never stored in plain text). You may add a display name and choose an avatar; both are shown publicly (see "What other people can see"). If you sign up as a teacher, we record that role.
Study data: We store your quiz statistics, streak history, achievements, and the questions you answered incorrectly (your "mistake bank"), synced to your account so you can pick up across devices. When signed in, your recent study answers also sync: the question, response, marking feedback, course context, result, hint or self-marking use, and answer date. We keep up to 50 recent answers within a storage limit; older answers expire as you study. These are private account records, not public posts or analytics events. Unfinished study sessions remain on your browser. Account deletion removes this saved account history. We also record when you were last active, to understand engagement.
Things you create & share: If you publish a quiz or flashcard deck to the community library, take part in the Course Community pilot, vote or report content, or join or host a live class game, we store the content you submit along with your reactions and reports, any class enrolment, and the nickname you use in a live game. The course pilot's audience and deletion rules are explained below.
Product analytics: Our first-party system records limited, allow-listed product and funnel events—for example, opening the app or homepage, signup and login-code steps, starting a study activity, viewing feedback, generating a quiz, sharing, and pricing or upgrade actions—with a random guest identifier or account link and small fixed context such as the selected tool or signup method. These general events are kept for about 90 days. We also record a small completion record when you finish a quiz, master a flashcard review, finish a targeted retry, or receive essay feedback. It contains the completion type, an event identifier used to prevent duplicate counts, your Australian local calendar date, the feature, whether a completed quiz had mistakes, and—when available—a curriculum and subject category. A completion record cannot store the questions, topic, notes, answers, essay text, feedback, email, or display name. Signed-in records are linked to your account; a guest record uses a separate, short-lived random browser identifier so work completed just before sign-in can be joined to the account. We replace that analytics identifier when you sign in or out; it is not the longer-lived cookie used to enforce the guest product allowance.
Optional Cloud analytics: Separately, PostHog Cloud receives a fixed page category and the same limited study lifecycle categories (plus feature and whether a completed quiz had mistakes). This is on unless you turn it off — use the switch below, or Settings in the app. It is anonymous by default. If you explicitly switch analytics on while signed in, we attach a random opaque identifier so the anonymous journey and signed-in journey can be joined; it is never derived from your account number or email. If your browser sends "Do Not Track" or Global Privacy Control, we do not load PostHog. We use session storage, disable click and form capture, and do not send URLs, queries, referrers, study content, or profile details. We do not use advertising trackers, and we never sell your activity.
We could not save that. Please try again.
Payment information (Pro): If you subscribe to a paid plan, payment is handled by Stripe. We never see or store your full card details, only a customer reference and your subscription status.
Referrals: If you invite a friend or arrive via an invite link, we record who referred whom and whether a new invited account completed a practice quiz to award one-time referral milestones. We keep qualification counts and reward dates, not friends’ answers. Inviters see aggregate progress only, never friends’ identities or study content.
How we use your information
- To authenticate your account and keep your study data in sync across devices
- To personalise your experience (e.g. remembering your preferred timer settings)
- To send essential service emails — such as login codes and, if you opt in, streak reminders
- To understand and improve the service using first-party product analytics and limited PostHog Cloud analytics (which you can turn off)
- To run community and classroom features you choose to use (publishing, live games, classes)
We do not use your data for advertising and we never sell it. We share it only with the service providers we rely on to run the app (listed below), and, for content you choose to publish or the nickname you use in a live game, with other users as described in "What other people can see". You can turn off reminder and update emails any time via the unsubscribe link in any email or in Settings.
What other people can see
Most of your data is private to you. A few things are visible to others by design:
- Display name and avatar: shown on leaderboards, on any quiz or deck you publish, and to the teacher of a class you join.
- Published quizzes and decks: public in the community library with your display name as the author. You can unlist or remove them at any time.
- Course Community: reviewed questions, replies, your display name and any answer you explicitly include are visible to all signed-in ATARprepAI accounts. Course discussions require sign-in and are not indexed by search engines.
- Live class games: the nickname and avatar you use are visible to the host and other players for that game.
- Class rosters: if you join a class with a code, the teacher who runs it can see your display name.
Community content is moderated. Items awaiting review stay hidden from the public until they are checked.
Course Community privacy and deletion
The optional course pilot stores your question title, post or reply, course/topic, display-name association, timestamps, Helpful reactions and private reports. If you attach a study question, we store its selected context and any answer you explicitly choose to include. The preview shows the proposed discussion before you publish.
Your scores, marking report, weakness history and other private study data are not added automatically. You can remove question context or leave your answer out. Keep personal details out of any text you write yourself.
New questions and replies are visible only to their author and the moderator until reviewed. Approved contributions are visible to all signed-in ATARprepAI accounts. Reports, reporter identities and moderation reasons are never shown to other participants.
Deleting a question or reply: its title, text and any attached question or shared answer are erased from the active community database when deletion completes. Deleting a discussion also erases its replies and their Helpful reactions. There is no recovery window. A small record without the contribution text remains to prevent delayed requests from restoring deleted content; you do not need to delete your account.
Provider backups: deleted content may persist temporarily in provider backups according to the applicable backup retention period. These copies are not available through the active product and expire through the provider's backup lifecycle.
Separate safety records: existing private reports and moderator decisions about course contributions may remain to handle complaints and investigate abuse; deleting a contribution does not create a copy of it in those records. Their written details are cleared by scheduled maintenance after 30 days from creation. Basic account links, categories, decisions and timestamps may remain to track reports and enforce participation restrictions. Reasons for participation restrictions and the history of those decisions may be kept separately while needed to apply or review a restriction; they should describe the relevant conduct and rule, not reproduce deleted posts. Only the moderator can access these records. Report details can contain personal information, so they are not treated as anonymous.
Deleting your account: we remove your authored discussions, replies, selected shared answers and Helpful reactions through the account-deletion process below. Replies beneath a discussion you authored and reports about the removed content are also removed. Reports you made about other people's remaining content may be kept with your account link removed; any remaining written details still follow the same 30-day cleanup rule. Private moderation records about remaining content may also be kept with the deleted account's actor link removed. Removing an account link does not guarantee that free-text details contain no personal information.
The pilot uses human moderation and does not send discussion text to an AI service for moderation. If you return to the existing AI study tools, their usual processing rules apply. Limited first-party events, such as opening the course or starting a challenge, measure use without including post, answer or report text.
For a correction, removal request or concern about information in a retained report, contact privacy@atarprepai.com. Read the Course Community sharing rules before participating.
Third-party services
OpenAI: When you generate a quiz or have an answer graded, the notes or topic you enter are sent to OpenAI's API to generate questions. OpenAI processes this data under their own Privacy Policy (opens in new tab). Please don't paste content containing personal or sensitive details.
Vercel: The app is hosted on Vercel's infrastructure, which also provides privacy-friendly, cookieless web analytics. Vercel's Privacy Policy (opens in new tab) applies at the hosting level.
PostHog (product analytics): Unless you turn Cloud analytics off, PostHog processes the limited page and study lifecycle categories described above on our behalf. We configure it with no session recordings, click capture, form capture, surveys, feature flags, error tracking, performance tracking, or person profiles. PostHog necessarily receives technical browser and network information, including IP address, when your browser connects to it. Analytics are hosted in the PostHog Cloud region configured for our project (US or EU). Read PostHog's Privacy Policy (opens in new tab).
Amazon Web Services (AWS): Your account and study data are stored in a managed PostgreSQL database hosted on AWS in the Asia-Pacific (Tokyo) region.
Resend: We use Resend to send transactional emails (login codes and optional streak reminders).
Sentry: When enabled, we use Sentry for error monitoring to find and fix crashes. We limit error reports to exception types and code locations. Request bodies, passwords, student work, cookies, local variables and breadcrumbs are excluded.
Stripe: If you subscribe to a paid plan, Stripe processes your payment under its own Privacy Policy (opens in new tab). We receive only a customer reference and your subscription status, never your full card number.
Google: If you choose "Sign in with Google", Google shares a stable account identifier and an email address. Returning sign-ins use that identifier. We require account ownership proof before linking an existing account, under Google's own Privacy Policy (opens in new tab).
Microsoft: If you choose "Sign in with Microsoft", Microsoft shares a stable Microsoft account identifier and may share an account email or username. We ask you to verify an email address you control before creating the account, rather than treating Microsoft's username as proof of email ownership. Microsoft's Privacy Statement (opens in new tab) applies.
Data retention
We keep your account, synced study data, and minimal account-linked study completion dates for as long as your account is active. Deleted Course Community contributions and separate moderation notes follow the shorter deletion rules above. General first-party funnel events and unclaimed guest completion records are kept for about 90 days. If you delete your account, we remove your account, study data, and linked completion records from our systems within 30 days, and queue erasure of any PostHog data linked to your opaque analytics identifier. PostHog analytics otherwise follow the retention period configured for our PostHog project.
Your rights (Australian Privacy Act 1988)
Under the Australian Privacy Act, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and data
To exercise any of these rights, including checking or expediting erasure of PostHog analytics linked to your account, email us at privacy@atarprepai.com and we'll respond within 30 days. You can turn analytics off at any time — in Settings in the app, or with the switch in "Information we collect" above.
Security
Passwords are hashed using industry-standard algorithms before storage, and all data in transit is protected with HTTPS. No system is perfectly secure, though — please use a unique password for this account.
Changes to this policy
If we make material changes to this policy, we'll notify you by email or by showing a notice the next time you log in. Continuing to use the service after changes are posted means you accept the updated policy.
Contact
Questions about this policy? Email us at privacy@atarprepai.com.