Privacy Policy

This Privacy Policy explains how iAchieve (“we”, “our”, or “us”), operated by Starla Digital, collects, uses, discloses, and protects your personal information when you use our website and AI tutoring service at iachieve.com.au.

We are committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Please read this policy carefully. By creating an account or using iAchieve, you consent to the practices described here.

1. Who We Are

iAchieve is operated by Starla Digital, a sole trader registered in Queensland, Australia. We provide AI-powered tutoring to Australian school students from Year 3 to Year 12 (approximately ages 8–18).

Contact us:
Email: info@starladigital.net
Website: https://iachieve.com.au

2. Information We Collect

2.1 Account Information

• Email address — used to create and secure your account, and to send important service notices.
• Display name — a name you choose to appear within the app (need not be your legal name).
• Year level — so we can tailor content to your curriculum level.
• Password — stored as a secure hash via Firebase Authentication; we never see your plain-text password.

2.2 Usage Data

• AI tutor conversation history — your questions and the AI responses you receive are stored in Google Firestore to provide continuity between sessions and to improve your learning experience.
• Subject progress and session data — records of which subjects you have studied, question counts, and session timestamps.
• App interaction logs — feature usage and error logs to help us diagnose problems and improve the service.

2.3 Optional Data (Paid Users)

• Photo uploads — paid subscribers may optionally upload a photo of a problem (e.g. a handwritten maths question) for the AI to analyse. These images are processed and may be stored temporarily.

2.4 Payment Data

All subscription billing is handled by Stripe, Inc. iAchieve does not store your credit card number, CVV, or full banking details on our servers. Stripe may collect and store payment information in accordance with its own privacy policy and PCI-DSS compliance standards. We receive only a non-sensitive subscription status and customer identifier from Stripe.

2.5 Data We Do NOT Collect

• GPS location or device location data
• Camera access (photos are user-initiated uploads only)
• Microphone or audio data
• Government identifiers (e.g. Medicare number, Tax File Number)
• Biometric data

3. How We Use Your Information

We use the information we collect to:

• Create and manage your iAchieve account
• Deliver AI tutoring responses personalised to your year level
• Track your learning progress and display it back to you
• Process and manage your subscription via Stripe
• Send transactional emails (account verification, password reset, subscription receipts)
• Respond to support requests sent to us
• Improve and maintain the iAchieve platform and AI capabilities
• Comply with our legal obligations under Australian law

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Third-Party Services

4.1 Google Firebase (Google LLC)

We use Google Firebase for authentication, database storage (Firestore), and hosting infrastructure. Your account data and conversation history reside on Firebase servers, which are operated by Google LLC. Data may be stored in data centres located in the United States or other regions where Google operates.

Google acts as a data processor on our behalf, bound by Google's Data Processing Agreement. Learn more at firebase.google.com/support/privacy.

4.2 Anthropic (AI Responses)

The AI tutoring functionality is powered by Anthropic's Claude AI model. When you ask a tutoring question, your question text is sent to Anthropic's API to generate a response. Anthropic may process this data in accordance with its own privacy policy.

We do not intentionally send your name or email address to Anthropic — only the question content and sufficient context to provide a helpful educational response. Learn more at anthropic.com/privacy.

4.3 Stripe (Payments)

Stripe, Inc. processes all subscription payments. When you subscribe, you are interacting with Stripe's secure payment interface. iAchieve does not store payment card details. Stripe's privacy policy is available at stripe.com/au/privacy.

4.4 Vercel (Hosting)

The iAchieve web application is hosted on Vercel Inc. infrastructure. Vercel may process request logs (IP addresses, browser type) as part of standard web hosting. See vercel.com/legal/privacy-policy.

5. Children's Privacy

• Under 13 years of age: A parent or legal guardian must create the account on behalf of the child, or must provide explicit consent before the child uses the service. By registering an account for a child under 13, the parent/guardian consents to the collection and use of the child's information as described in this policy.
• Ages 13–17: Students may register themselves, but we encourage parents/guardians to review this policy and supervise usage.
• We do not knowingly collect information from children under 13 without verifiable parental consent.
• Parents may review their child's account data, request corrections, or request deletion by contacting us at info@starladigital.net.
• We do not use children's data for advertising or marketing profiling.

6. Data Storage and Security

Your data is stored on Google Firebase / Google Cloud infrastructure, which is protected by industry-standard security controls including encryption at rest and in transit (TLS/HTTPS). Firebase Authentication uses secure, hashed credential storage.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, including:

• HTTPS/TLS encryption for all data in transit
• Firebase Security Rules to restrict database access to authenticated users
• No storage of payment card numbers or sensitive financial data on our servers
• Access to production systems restricted to authorised operators only

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention and Deletion

We retain your personal information for as long as your account is active, or as necessary to provide the service and comply with our legal obligations.

• Account deletion: You can delete your iAchieve account directly within the app. Upon deletion, your profile, conversation history, and progress data will be permanently removed from our active systems within 30 days.
• Backup retention: Residual copies may remain in encrypted backups for up to 90 days before being purged.
• Stripe data: Billing records held by Stripe are retained in accordance with their policy and applicable financial regulation.
• Legal holds: We may retain certain information if required by law or for legitimate dispute resolution purposes.

To request data deletion or export, contact us at info@starladigital.net.

8. Your Rights Under the Australian Privacy Principles

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate, outdated, or incomplete information
• Delete your account and associated data (subject to legal retention obligations)
• Complain about how we handle your personal information

To exercise any of these rights, contact us at info@starladigital.net. We will respond within 30 days.

If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

9. Cookies and Tracking

iAchieve uses session cookies and browser local storage to keep you logged in and maintain your preferences. We do not use third-party advertising cookies or tracking pixels.

Our third-party services (Firebase, Stripe, Vercel) may set their own functional cookies as part of their operation. You can control cookie preferences in your browser settings, though disabling cookies may affect your ability to log in.

10. International Data Transfers

As noted above, your data may be stored or processed outside Australia (e.g. on Google Cloud, Anthropic, or Vercel servers located in the United States). By using iAchieve, you consent to this transfer. We take steps to ensure any overseas recipients of your data handle it in a way that is consistent with the Australian Privacy Principles.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or by displaying a notice in the app. The updated policy will take effect 14 days after posting unless you object.

We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact:

Starla Digital (Operator of iAchieve)
Email: info@starladigital.net
Website: https://iachieve.com.au