Privacy Policy

1. Who we are

iAchieve is operated by Starla Digital (ABN registered in Australia). We provide an AI-powered tutoring platform for students in Years 5–13 across Australia and New Zealand. Contact us at info@starladigital.net.

2. What information we collect

• Account data: email address, display name, year level, and country at sign-up.
• Usage data: subjects studied, questions asked, session history, progress, achievements, and XP earned.
• Payment data: subscription status and billing history via Stripe. We never store card numbers — Stripe handles all payment processing.
• Device data: browser type, approximate location (country/region), and usage timestamps for security and performance.
• Photos: images you optionally upload for photo-analysis questions. These are sent to our AI provider for processing and are not stored beyond the session.

3. How we use your information

• To provide and personalise the tutoring experience.
• To enforce subscription limits and process payments.
• To track your progress and generate study plans.
• To improve our AI responses and curriculum coverage.
• To send important account or service emails (not marketing without consent).

4. Third-party services

We use the following trusted third parties to operate iAchieve:

• Firebase (Google): user authentication and database storage. Data is stored in Google Cloud infrastructure.
• Anthropic Claude: powers Aiden, the AI tutor. Your questions and session history are sent to Anthropic for processing. Anthropic's privacy policy applies to this data.
• Stripe: payment processing. Stripe is PCI-DSS compliant.
• Vercel: web hosting and edge network.

We do not sell your data to any third party for advertising or marketing purposes.

5. Children's privacy

iAchieve is designed for students aged 10 and above. Users under 13 should have parental or guardian consent before creating an account. We do not knowingly collect personal information from children under 10. If you believe a child under 10 has registered, contact us at info@starladigital.net and we will delete the account promptly.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, your personal data and session history are permanently removed within 30 days. Anonymised, aggregated usage data (no personal identifiers) may be retained for product improvement.

7. Your rights

Under Australian Privacy Act 1988 and New Zealand Privacy Act 2020, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent for data processing (which will require account closure).

To exercise any of these rights, email us at info@starladigital.net.

8. Security

All data is transmitted over HTTPS. Firebase enforces strict security rules ensuring each user can only access their own data. API endpoints are protected by cryptographic token verification. We take reasonable steps to protect your information but no system is 100% secure — if you suspect a breach, please contact us immediately.

9. Cookies

We use essential cookies for authentication (Firebase session tokens). We do not use advertising or tracking cookies. Analytics, if used in future, will be privacy-first and disclosed here.

10. Changes to this policy

We may update this policy from time to time. We'll notify you of significant changes via email or an in-app notice. Continued use of iAchieve after changes means you accept the updated policy.