Privacy Policy
Version 1.0 · Effective 5 July 2026 · Claritute — Angelo Hanna, ABN 85 699 365 957 · hello@claritute.com.au · 0420 718 200
1. Who we are
Claritute is operated by Angelo Hanna (sole trader, ABN 85 699 365 957), a registered NSW secondary mathematics teacher, in New South Wales, Australia. "You" means the parent/guardian who holds the family relationship with us; "your child" means each student you authorise to use the platform.
2. What we collect
About parents/guardians: name, email, phone (if provided), enquiry details, payment records (via Stripe — §5), and the link to your child's account.
About children: first name (and surname where you provide it), school year and stage, a login email (usually an alias of the parent's email), a password (stored only as a secure hash — we can never read it), and their learning records: lesson views, progress and mastery estimates, Gap Finder diagnostic results, practice-exam attempts and scores, tutor-set work, and conversations with the AI study assistant.
Bookings: session times, focus notes, files you choose to upload, and — for in-person sessions only — the address you give us.
Photo tutor (bring-your-own-problem): if your child photographs a maths problem to get help with it, we collect that photo and a text transcription of the maths in it (the question and any working shown). Photos should be of the maths only — please teach your child to keep names, faces and other people's work out of frame; we never run face detection or analyse anything except the mathematics.
School programs: where a school provides a roster we deliberately collect the minimum — first name and last initial only, plus class name.
Tutor applicants: contact details, experience, qualifications, WWCC number, ABN, referees.
Free Gap Check (no account): the Gap Check runs without login and needs no personal details to use. If you ask us to email your results, we collect the email you provide and store the child-name-free result summary so we can send the report and, with your consent, follow up. Ask us to delete it any time.
Automatically: essential login cookies, basic analytics (§6), and — when you consent at signup — the date, policy version, IP address and browser identifier of that consent, so we can prove it was given. We don't knowingly collect sensitive information; please don't enter it in free-text fields, and ask us to remove it if it appears.
3. Children's information and parental consent
A child's account may only be operated with the consent of a parent or guardian. Consent is recorded at signup (who, when, which policy version, from which device) and re-requested if this policy materially changes. If a student signs up themselves, we ask for a parent/guardian email and invite that parent to their own linked account; the account is offered on the basis that a parent/guardian has agreed. Parents can review or close a child's account at any time. Parent visibility is a feature: your parent account shows your child's progress, diagnostics, exam history and AI-assistant conversations. Anyone we engage for child-related work holds a valid, verified NSW Working With Children Check.
4. How we use personal information
To run the service: accounts and security; lessons, diagnostics and practice; personalising your child's learning path; tutoring bookings; payments and receipts; enquiries and service emails; keeping parents informed; improving the product using aggregate, de-identified usage; and legal obligations. We do not sell or rent personal information, use children's data for advertising, send marketing to children, or disclose data except to the providers below or where the law requires.
5. Who we share information with
| Provider | Purpose | What they process | Where |
|---|---|---|---|
| Supabase (on AWS) | Our database, logins and file storage | Account and learning records described in §2 | Hosted in Australia — AWS Sydney region |
| Vercel | Hosts the website | Standard web-request logs (IP address, browser) | Global infrastructure (US company) |
| Stripe | Payments and subscriptions | Payer name, email and card details — card numbers are held by Stripe only and never touch our servers | US company, global infrastructure |
| Resend | Sends our automatic emails | The content of service emails (e.g. your enquiry details, your family's welcome pack) | US company |
| Anthropic (Claude) | The AI study assistant | Only the conversation text and lesson context — no names, emails or account identifiers. Under Anthropic's commercial terms, API data is not used to train their models | US company |
| ElevenLabs | Generates lesson narration audio | Lesson scripts only — no personal information | US company |
| Basic analytics (GA4) and web fonts | Anonymous usage events and standard web signals; analytics cookies. We never pass names, emails or account IDs to analytics | US company | |
| ImprovMX / Gmail | Receiving email sent to hello@claritute.com.au | The emails you send us | US/EU companies |
Overseas disclosure: our primary database — where accounts and learning records live — is hosted in Australia (AWS Sydney). Some supporting providers process limited data outside Australia (mainly the United States) for their specific function — payments, email delivery, the AI assistant, analytics. We take reasonable steps to ensure they handle personal information consistently with the Australian Privacy Principles — each is a major provider bound by published privacy and security commitments, and our agreements with them restrict use to providing the service. (Updated 5 July 2026: database migrated from AWS Tokyo to AWS Sydney.)
6. Cookies and analytics
Essential cookies keep you signed in — the site doesn't work without them. Analytics (Google Analytics 4): we count page views and anonymous events to understand what's working; our analytics calls exclude names, emails and account identifiers, and you can block analytics cookies without losing any functionality. We also keep our own first-party counters (e.g. "someone started the Gap Check today") — these contain no identifiers at all, not even a cookie.
Advertising measurement (Meta Pixel): on our public marketing pages only — the landing page, enquiry form, Gap Check, sign-up, schools and worksheets pages — we use the Meta (Facebook) Pixel to measure whether our advertising works (page views, enquiry submissions, account sign-ups, Gap Check starts and sample-worksheet downloads; no names, emails or account identifiers are sent). Meta sets a cookie on those pages. The pixel never runs inside the learning platform — signed-in students and parents are not tracked by it, and blocking it changes nothing about how the site works. (Added 6 July 2026; measured-event list updated 13 July 2026.)
We don't use session recording, advertising pixels inside the learning platform, or cross-site tracking.
7. The AI study assistant and photo tutor — exactly what happens
Typed questions: when your child asks the assistant a question, the text they type, the recent conversation, and the lesson content are sent to Anthropic's Claude API to generate the reply. No name, email or account identifier is included. Conversations are stored in your child's account so you can read them.
Photographed problems (the photo tutor): when your child photographs a maths problem, the photo is sent to Anthropic's Claude API once, to transcribe the mathematics only — the question and any working shown. It does not solve at that step (your child confirms the transcription first), and it performs no face detection or analysis of anything except the maths. The photo is stored in a private area only your family and we can access, and it is automatically deleted when the tutoring session ends — only the text transcription is kept (visible to you) so your child's learning history works. Ask your child to photograph the problem only, keeping names, faces and other students' work out of frame.
For both features: Anthropic's commercial API terms provide that this data isn't used to train their models; no names, emails or account identifiers are ever included in what we send; and please remind your child not to put personal details into a chat or a photo — the tutor doesn't need them. Our AI features never produce parent-facing academic reports without teacher review.
8. Security
All traffic is encrypted (HTTPS). Passwords are stored as secure hashes. Database access uses row-level security — each student sees only their own records, parents only their linked children, tutors only their assigned students. Card data is handled exclusively by Stripe. Temporary passwords must be changed at first sign-in.
9. Data breach response
We follow the Privacy Act's Notifiable Data Breaches scheme: if a breach is likely to result in serious harm we'll promptly contain and investigate it, notify affected families in plain language with practical steps, and notify the Office of the Australian Information Commissioner (OAIC).
10. Retention and deletion
Photo-tutor images are deleted automatically at the end of each session (with a scheduled sweep as a backstop); only the text transcription of the maths is retained, in your child's account.
Records are kept while the account is active so your child's history works. Deletion on request is complete — the profile, all learning records, chats, bookings and family links, and the login itself are permanently removed (short-lived backups expire on our provider's standard cycle). Financial records are retained as tax law requires. Enquiries that don't proceed and unsuccessful tutor applications are deleted after 12 months.
11. Access, correction and deletion
Email hello@claritute.com.au to get a copy of the personal information we hold about you or your child, correct it, or delete the account and its data. We verify you're the account's parent/guardian, then act — normally within 30 days, usually much faster. No charge.
12. Complaints
Email hello@claritute.com.au ("Privacy complaint") or call 0420 718 200 — you'll deal with Angelo directly. Acknowledged within 7 days, answered within 30. Not satisfied? You can complain to the Office of the Australian Information Commissioner — oaic.gov.au · 1300 363 992.
13. Changes
Changes are posted here with a new version number and effective date. For material changes affecting children's data, we'll email parents and ask you to re-confirm consent before the change applies to your family.
Claritute · Angelo Hanna · ABN 85 699 365 957 · NSW, Australia · Version 1.0 · See also the Terms & Conditions.