Privacy Policy

[Registered legal entity name] (ABN [ABN]), [Street address, Suburb, State, Postcode], Australia. Privacy enquiries: privacy@ownmark.com.au.

• Account information — parent or teacher name, email address, password hash, and the plan attached to the account.
• Child profile information — first name or nickname, year level, state or territory, and the writing genres being practised. We ask parents not to provide a child's full name, school, address or date of birth.
• Learning content — drafts the student types, tutor dialogue, hint usage, self-assessments, marking results, rubric scores and weakness trends.
• Usage and technical data — pages visited, feature usage, AI credit consumption, device and browser type, and IP address in server logs.
• Support correspondence — messages you send us.

We do not knowingly collect sensitive information (as defined in the Privacy Act) and we do not ask students for it. Please do not type health, religious, biometric or other sensitive details into drafts or tutor chat.

Student accounts are created and controlled by a parent, guardian or authorised school staff member. The account holder consents to the collection described here on the child's behalf, can view all of the child's activity, and can delete a child profile at any time from the Family dashboard. We do not run behavioural advertising and we never sell or rent personal information.

• To provide the writing workbook, tutor feedback, marking and progress reports.
• To align feedback to the correct year level and curriculum authority.
• To meter AI usage against the plan on the account and prevent abuse.
• To keep the service safe, including automated safety filtering of prompts and drafts.
• To respond to support requests and send service notices.

Drafts and tutor messages are sent to third-party large language model providers via OpenRouter so the tutor can generate Socratic questions and marking. Content is sent for the purpose of returning feedback to the student. We do not authorise providers to use this content to train their models, and we minimise what is sent by running local checks first and batching requests where possible.

Our main service providers are:

• Supabase — database, authentication and file storage (data hosted in the selected region).
• OpenRouter and its upstream model providers — AI generation and embeddings.
• Cloudflare — application hosting, delivery and abuse protection.
• Email delivery provider — transactional email such as password resets.

Some providers process data outside Australia, including in the United States and the European Union. Before disclosing personal information overseas we take reasonable steps under APP 8 to ensure the recipient handles it consistently with the APPs, including through contractual data-protection terms.

Access to student data is restricted by row-level database policies so a family can only read its own records. Data is encrypted in transit (TLS) and at rest by our hosting providers. Administrative access is limited to staff who need it. Report a suspected vulnerability to security@ownmark.com.au.

We maintain a data breach response plan. If an eligible data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

• Drafts, tutor dialogue and progress records are kept while the account is active so progress tracking works over time.
• Deleting a child profile removes that child's drafts, feedback and progress records.
• Closing an account deletes account and learning data within 30 days, except records we must keep for legal, tax or dispute-resolution reasons.
• Backups age out on a rolling cycle of no more than 35 days.

You can view and correct most information in Settings and the Family dashboard. To request a copy of your data, correction, or deletion, email privacy@ownmark.com.au. We respond to requests within 30 days and may ask you to verify your identity.

We use a small number of essential cookies and similar storage. See the Cookie Policy.

If you believe we have breached the APPs, contact privacy@ownmark.com.au and we will investigate and respond within 30 days. If you are not satisfied, you may complain to the OAIC at oaic.gov.au or on 1300 363 992.

We may update this policy. Material changes will be notified by email or in-app notice before they take effect.