Privacy Policy.

1. Who we are

Ask The Prof is the entity responsible for handling your personal information. We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

2. What we collect

• Identity and contact details (name, email, phone, school year)
• Account credentials and authentication tokens
• Newsletter and marketing preferences
• Usage data, device data and analytics
• Content you submit to our AI tools (prompts, answers, files)
• Payment metadata (handled by our payment processor — we do not store card numbers)

3. Why we collect it

To deliver tutoring and AI services, manage your subscription, send newsletters you have consented to, improve our products, and meet our legal obligations.

4. Who we share it with

We share limited personal information with trusted service providers who help us run the business: hosting and database (Lovable Cloud / Supabase), email and newsletter delivery (Brevo), AI model providers (Google, OpenAI via the Lovable AI Gateway) and analytics providers. Some of these providers store data outside Australia. We require them to protect your information to a standard consistent with the APPs.

5. AI inputs

Prompts you submit to our AI tools are processed by third-party AI providers via the Lovable AI Gateway. We do not knowingly use your inputs to train foundation models. We may store prompts and outputs to operate, debug and improve our service.

6. Children

Many of our students are under 18. We collect the minimum information needed and rely on parental consent at signup. Parents may request access to or deletion of their child's information at any time.

7. Security

We use industry-standard safeguards including encryption in transit, role-based access, and audit logging. No system is perfectly secure; we will notify you and the OAIC of any eligible data breach as required by law.

8. Your rights

You may request access to, correction of, or deletion of your personal information. You may also withdraw consent for marketing at any time via the unsubscribe link in our emails or by contacting us.

9. Complaints

Email theprof@asktheprof.com.au. If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner (oaic.gov.au).

10. Cookies & tracking

Ask The Prof uses cookies and similar technologies that are essential for the site to function (for example, session and authentication cookies). With your consent, we also load the following third-party analytics and advertising trackers to measure traffic, understand how the site is used, and run advertising campaigns:

• Google Analytics 4 (analytics and audience measurement)
• Google Ads (conversion measurement and remarketing)
• Meta Pixel — Facebook and Instagram (conversion measurement and advertising)
• TikTok Pixel (conversion measurement and advertising)

On your first visit you will see a banner asking you to accept or decline these non-essential trackers. We do not load them until you accept. You can withdraw consent at any time by clearing your browser storage for this site or by contacting us; we will honour the new choice on your next visit. These providers may set cookies on your device and process limited data (such as IP address, device and browser information, pages viewed, and events such as form submissions) on their own servers, which may be located outside Australia. We do not sell personal information.

11. Data retention

We keep personal information only for as long as we need it for the purposes set out in this policy, or as required by Australian law. As a general guide:

• Account & tutoring records — kept while your account is active and for up to 7 years after your last lesson, to meet tax, accounting and dispute- resolution obligations.
• Newsletter & marketing data — kept until you unsubscribe or request deletion. Unsubscribe records themselves are retained so we can honour your choice.
• Lead enquiries (people who contacted us but did not enrol) — kept for up to 24 months, then deleted or anonymised.
• AI prompts and outputs — kept for up to 12 months for service operation, debugging and quality improvement, then deleted or anonymised.
• Analytics & advertising data — retained per the provider's defaults (typically 14 months for Google Analytics 4) unless you withdraw consent sooner.
• Backups — may persist for up to 90 days after deletion from live systems before being overwritten.

You may request earlier deletion at any time by emailing theprof@asktheprof.com.au. We will comply unless we are legally required to keep the information for longer.

12. Changes

We may update this policy from time to time. Material changes will be notified by email or on this page.