Privacy Policy.

Introduction

PocketTutor is operated by PocketTutor Australia Pty Ltd (ABN 39 698 457 331), the entity responsible for handling your personal information. We are committed to protecting your personal information and handling it in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what information we collect, how we use it, who we share it with, where it is stored, and the choices you have.

Information we collect

• Account information. Your name and email address, captured when you sign up. Authentication is handled by our identity provider (see "Sharing your information" below).
• Payment information. If you subscribe to a paid plan, your billing details are collected and processed by our payment provider. We do not store credit-card numbers on our servers.
• Learning activity. Topics you explore, conversation history with the tutor, quiz answers and results, study-plan goals and progress, calendar events, and any documents you upload to use with the tutor.
• Technical information. IP address, browser type, device characteristics, and other diagnostic data collected automatically when you use the service.
• Usage analytics. Pseudonymous information about how the app is used, collected via our analytics provider - page paths, event names, and categorical or numeric properties (such as subject codes or quiz scores). This does not include your name, email, or anything a learner types.
• Local device storage. Preferences (theme, sidebar state) and short-lived session data stored in your browser.
• Notification data. If you turn on study reminders, we store the push subscription your browser or device generates so we can deliver the notifications you've opted into. It carries no learning content, and you can turn reminders off at any time.
• We also record actions you take in the app, including any feedback you give us about the AI's responses and your acceptance of age and policy requirements at signup.

How we use your information

We use your information to:

• Provide the tutoring service: generate personalised responses, quizzes, study plans, and feedback.
• Manage your account, including authentication and subscription status.
• Process payments through our payment provider.
• Send essential administrative communications (e.g. account, billing, or service updates).
• Send parents / account owners a weekly email about their learners' progress so they can support their learning.
• Enforce rate limits and prevent abuse.
• Understand how the service is used and measure the effectiveness of our advertising, so we can improve PocketTutor and reach families who would benefit from it.

Sharing your information

We share data with the following third-party providers, each bound by contractual privacy obligations:

Clerk Authentication & identity · United States

Email, name, password hash, session tokens.

Stripe Payment & subscription management · United States, Australia

Payment details (handled directly by Stripe - never stored on our servers), email, billing country.

Vercel Hosting, database, blob storage · United States, European Union

All application data.

OpenAI AI tutoring responses, content moderation, image generation, transcription, and content-matching (embeddings) · United States

Topic, conversation context, uploaded document text, learner age band (a number, not a date of birth). Inputs are not used to train OpenAI's models on our paid API tier.

Anthropic Diagram generation (Mermaid / SVG) · United States

Diagram subject strings only.

Deepgram Voice input (speech-to-text) and read-aloud narration (text-to-speech) · United States

For voice input, a learner's spoken audio when they choose to dictate a question or answer using the microphone - available to every signed-in learner. For narration, short paragraphs of generated tutoring text. Audio and transcripts are processed transiently and are not used to train Deepgram's models.

Resend Transactional emails · United States

Your email address and the emails we send you, such as sign-in codes, our replies to your help requests and weekly progress summaries.

Sentry Error monitoring and safety/feedback review · United States

Sanitised error events (request bodies for AI routes are stripped; emails are redacted), plus your sanitised feedback comments when you rate a response.

Mixpanel Product usage analytics · United States

Pseudonymous usage events tied to the account, not the individual child profile: page paths, event names, and categorical or numeric properties only (such as subject codes, quiz scores, subscription state). No name, email, or learner-typed content.

Google Advertising conversion measurement (Google Ads) on our marketing website only · United States

Click identifiers (such as gclid), first-party measurement cookies (such as _gcl_aw), IP address, and basic browser metadata. Used to measure whether visits from our advertising lead to signups. Not loaded inside the tutoring app.

Browser push services Study-reminder delivery, via your browser's own push service (Apple, Google, Mozilla, Microsoft) · United States

If you turn on study reminders, an anonymous push subscription (an endpoint your browser generates) and the notification itself - a short title and message only, with no learning content. Used solely to deliver reminders you have opted into; the message is encrypted so the delivery service cannot read it, and we hold no account with these services.

How we keep AI tutoring safe

We mitigate risks related to AI-generated content in several layered ways, including:

• Crisis routing. If a learner's message suggests distress, self-harm, suicide, abuse, an eating disorder, or bullying, PocketTutor immediately shows the learner an appropriate response with details on how to access support, such as Kids Helpline (1800 55 1800), Lifeline (13 11 14), 1800 RESPECT, Butterfly Foundation, and the eSafety Commissioner, and signposts them to talk to a trusted adult.
• Content filtering. Learner messages are checked by a content-moderation service against categories that indicate inappropriate content before they reach the tutor. If a message is flagged, the tutor declines to respond.
• Age-appropriate output. The tutor is calibrated to the learner's year level. It is instructed not to produce inappropriate content.
• Reporting. Every AI response carries a thumbs-down with an "Inappropriate" category. Any reports are reviewed by our team.

Children (under 13) and parents

Signing up

PocketTutor is built for Australian learners in Foundation through Year 12. At signup we ask which year level the learner is in:

• If the chosen year is Foundation–Year 6, the learner cannot create their own account. We direct them to a parent or carer who can set up a household account and add the child as a learner profile.
• If the chosen year is 7 or 8 (where students may be either side of 13), we require the learner to confirm they are 13 or older before continuing. We record the date and time of that confirmation as compliance evidence.
• From Year 9 onwards the standard signup applies.

Parent or carer control

When a household account is set up, the parent or carer is the consenting party. They can:

• Add or remove learner profiles for their children.
• Set a PIN on each learner profile so the child can use the app independently.
• Remove the PIN at any time and sign in as the child to review all chat history, quiz results, and any feedback the child has filed.
• Delete a learner profile at any time, which permanently and immediately removes all of that learner's data.
• Set a topic blocklist for each learner profile.

Cookies, analytics & advertising

Strictly necessary storage. We use cookies and browser local storage that are essential to keep you signed in and to remember your preferences (such as theme and sidebar state).

Analytics. We use a product-analytics service (Mixpanel) to understand how the app is used, in a pseudonymous form (see the table above). This helps us improve the service.

Advertising. On our marketing website (getpockettutor.com.au) we also load Google's advertising tag, which sets first-party measurement cookies (such as _gcl_aw) to record that you arrived from one of our Google Ads and to attribute whether that visit led to a signup. These cookies are scoped to our domains, are not used to build advertising profiles of children, and are not loaded inside the tutoring app itself.

International transfers

Some of our processors are based outside Australia (see the table above for the country of each). When we share your data with them, it leaves Australian jurisdiction.

How long we keep your information

We keep your account and learning data for as long as your account is active, so PocketTutor can remember your progress over time.

• A parent or carer can delete a learner profile at any time. This permanently and immediately removes that learner's chat history, quiz results, study plans, and related data.
• To close an entire household account, or to request a copy of the data we hold about you or a household member, contact us at hello@getpockettutor.com.au and we will action your request.

How we keep your information safe

We apply industry-standard security measures including encryption in transit, restricted access controls, and monitoring for unusual activity. Payment data is handled directly by our payment provider and never stored on our servers. No system is perfectly secure; if we become aware of a data breach affecting your personal information, we will notify you and the relevant authorities in line with the Privacy Act 1988 (Cth).

Your privacy rights

Under Australian privacy law you have the right to access the personal information we hold about you, correct it if it is inaccurate, and request that we delete it.

• You can update most of your information directly in the app.
• You (or a parent/carer) can delete individual learner profiles yourself in the app.
• To close your whole account or request a copy of your data, email us at hello@getpockettutor.com.au and we will action it.

If you are not satisfied with how we have handled your information, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Updates to this policy

When we make a material change to this policy - for example, when we add a new provider, change how long we keep your data, change where it is stored, or change how we handle children's data - we will show you a banner the next time you sign in and ask you to acknowledge the new version before continuing.

Contact us

For any privacy-related questions, contact us at hello@getpockettutor.com.au or via the Help & Feedback section in the app.