Privacy Policy — AspireAI

1. Introduction

AspireAI ("we", "our", "us") is committed to protecting your privacy and handling your personal information in a transparent and secure manner.

This Privacy Policy explains how we collect, use, store, and protect your information when you use the AspireAI mobile application ("App") and related services.

By using AspireAI, you agree to the terms outlined in this Privacy Policy.

2. Who This Policy Applies To

This policy applies to:

Students using AspireAI
Parents or guardians accessing student progress dashboards
Users who interact with the AspireAI app
Visitors to our website

If you are under 18, you should review this policy with a parent or guardian.

3. Information We Collect

We collect information necessary to provide personalised AI-powered learning support.

3.1 Information You Provide

When you register and set up your profile, we collect:

First and last name
Email address or phone number (used as your login identifier)
Password (stored securely using industry-standard hashing)
State or region
School
Year level and syllabus
Subjects selected for study
User type (student or parent)

3.2 AI Conversations

When you use our AI tutor feature ("Ask AI"):

Your messages are sent to OpenAI for processing and are not stored on our servers
Conversation history is held in memory only during your active session
Once you close the conversation or the session ends, the chat history is discarded
The subject and topic context is sent alongside your message to provide relevant responses

We do not retain, log, or store your AI tutor conversations. OpenAI's use of this data is governed by their API data usage policy, under which API inputs are not used to train their models.

3.3 Learning & Usage Data

To personalise your learning experience, we collect:

Quiz and practice question responses (including selected answers, correctness, and response time)
Topic mastery levels and accuracy rates
Time spent in different areas of the app (practice, exams, AI chat)
Performance analytics and progress over time
Feedback ratings and comments you submit

3.4 Device & Technical Data

We automatically collect:

Device type and model
Operating system and version
App version
Timezone
Crash logs and error reports
App performance metrics (e.g. launch time, responsiveness)

This information is used to improve performance, diagnose issues, and ensure compatibility.

3.5 Camera Access

The app requests camera access solely for QR code scanning, which allows parents to link their account to their child's student account. No photos or videos are captured or stored. The camera feed is processed in real time for QR recognition only.

4. How We Use Your Information

We use your information to:

Provide personalised, curriculum-aligned practice questions
Generate AI-powered feedback, explanations, and revision strategies
Track subject strengths and weaknesses over time
Provide mastery dashboards for students and parents
Manage your subscription and account
Improve our AI algorithms and learning models
Diagnose and fix technical issues
Communicate important service updates

We do not sell your personal information.

5. AI-Generated Content

AspireAI uses artificial intelligence to:

Generate practice questions aligned to your syllabus
Provide instant feedback on your answers
Answer your study questions via the AI tutor
Suggest revision strategies based on your performance
Analyse mastery trends across topics

AI tutor conversations are not stored on our servers and exist only during your active session. AI-generated outputs are designed for educational support and may not replace professional tutoring or teacher guidance.

6. Data Sharing & Third Parties

We use the following categories of third-party service providers to operate our app:

Cloud hosting: Google Cloud Platform — for hosting our servers and storing data securely
Identity verification: Twilio — for sending one-time verification codes via SMS, email, WhatsApp, or voice call during registration and login
Crash reporting: Firebase Crashlytics (Google) — for collecting crash logs and diagnostic data to fix issues
Analytics: Firebase Analytics (Google) — for collecting anonymous app usage statistics to improve performance
AI services: OpenAI — for powering our AI tutor feature (conversation data is sent to OpenAI for processing)
Payment processing: Apple App Store and Google Play — for managing subscriptions (we do not see or store your credit card details)

All third-party providers are required to maintain strict confidentiality and data protection standards. We only share the minimum data necessary for each service to function.

We do not sell or rent personal information to advertisers or any other third parties.

7. Data Storage & Security

We take reasonable steps to protect your information through:

Encrypted data transmission (HTTPS/TLS)
Secure cloud storage with Google Cloud Platform
Encrypted on-device token storage
Restricted access controls
Regular security monitoring

Your authentication tokens are stored securely on your device using encrypted storage (iOS Keychain / Android Keystore). Passwords are never stored in plain text.

However, no system is 100% secure. We encourage users to protect their login credentials.

8. Children's Privacy

AspireAI is designed for secondary school students. We:

Do not knowingly collect unnecessary personal information
Encourage parental involvement through the parent dashboard feature
Allow parents to link their account to their child's account via secure QR code scanning
Collect only the information necessary to provide the educational service

If you believe a child has provided personal data without parental consent, please contact us.

9. Subscription & Payment Information

If you purchase a subscription:

Payments are processed entirely through Apple App Store or Google Play
We do not see, collect, or store your credit card or bank details
We store your subscription status, plan type, transaction identifier, and expiry date to manage your access to premium features

10. Data We Do Not Collect

AspireAI does not collect:

Precise location (GPS) data
Photos, videos, or audio recordings
Contacts or address book data
Advertising or device tracking identifiers
Health or fitness data
Financial information (credit cards, bank accounts)
Browsing history outside the app

11. Data Retention

We retain your data:

While your account remains active
For a reasonable period after account deletion for administrative and legal purposes

AI tutor conversations are not stored and are discarded when your session ends. You may request deletion of your account and associated data at any time.

12. Your Rights (Australian Privacy Principles)

Under Australian privacy law, you have the right to:

Access your personal information
Request corrections to inaccurate data
Request deletion of your account and data
Withdraw consent (where applicable)
Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise these rights, contact us using the details below.

13. Account Deletion

You may request account deletion by:

Using the in-app deletion feature (if available), or
Contacting us at: contact@aspireai.au

Upon verified request, we will delete or anonymise your data within 30 days, unless retention is required for legal obligations.

14. Updates to This Policy

We may update this Privacy Policy from time to time.

We will notify users of material changes through the app or website. Continued use of the app after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or your data, please contact:

Email: contact@aspireai.au
Business Name: AP Education Services
Location: Melbourne, Australia