Privacy policy

What we collect, and why

• Your name and email address, so you can sign in and so we know whose work we are looking at.
• Your year level, subjects and set texts, so the tutoring matches the syllabus you are actually being assessed against.
• A parent or guardian's email address, so they can be given their own sign-in and, if you are in Year 11 or below, so they can confirm your account.
• Everything you type into the tutor, the practice questions, the mock exams and the assignment help, including your own draft work.
• The marks, feedback and progress figures the system produces from that work.
• A record of when you signed in, and a short device label such as “Chrome on Windows”.
• A count of ten things: that the front page was viewed, that a call to action was pressed, that the free-diagnostic booking page was opened, that a diagnostic request was left, and, once you have an account, that you finished setting up, answered your first question, had your first answer marked, sent your first tutor message, started your first mock exam, and came back on a later day. Nothing else about those moments is recorded: not what you typed, not what you answered, not what the mark was.
• The four before you have an account carry no identifier at all: no cookie, no session, nothing that could link them to you or to each other. The six after it are attached to your account id, which is an internal number and never your email.

We collect the things listed above because Eruvio needs them to work, and for nothing else. We do not sell your information, we do not rent it, and we do not use it to advertise to you. If we ever want to use it for a new purpose we will ask you first, and if you are under 18 we will ask your parent or guardian too. You can ask us what we hold about you at any time.

What we do not collect

• We do not store your IP address. It is used briefly, in memory, to stop someone guessing passwords, and it is never written down.
• We do not collect your location.
• We do not track you anywhere else on the internet. There is no advertising network, no third-party analytics service and no tracking pixel in this product: the ten counts described above are written to our own database and are never sent to anyone else.
• We do not use cookies to measure anything, and we do not build a profile of how you move around the app. There is no record of which pages you looked at or how long for.
• We do not hold your payment details. Payment is arranged directly with Thomas and never passes through this site.
• We used to store the full technical description your browser sends on every request. We stopped, because nothing in the product ever read it and it could be used to identify your device. See PRIVACY-BEST-INTERESTS.md in the source code.

Marks are produced by a computer, not a person

• Every mark, every criterion judgement and every piece of feedback in this product is produced automatically by an AI model. No person checks a mark before you see it.
• That automated mark also feeds the completeness estimate on assignments, your progress figures, your subject scores, and what your parent sees.
• It is an estimate, not a result. It is not a QCAA mark, no school has seen it, and it has no standing in your actual assessment. Research measuring AI marking against human markers finds it agrees less often than two human markers agree with each other, and that it tends to flatter weaker work and undersell stronger work.
• If you think a mark is wrong, use the “Disagree” button next to it. Your mark and your reason are recorded alongside the AI's and your tutor sees both. The AI's number stays as the one your progress is calculated from, and the screen says so: recording your disagreement is not the same as changing the mark, and we would rather be straight with you about which is which.
• Marks the system was not confident about are flagged for your tutor to look at.

Your marks and written feedback are produced by an AI. No person checks them before you see them. They are an estimate to help you practise: they are not a QCAA result, not a grade and not a prediction of your ATAR. If you think a mark is wrong, say so: Thomas can record a different mark, and both his and the AI's are kept so the disagreement stays visible. Nothing in Eruvio makes a decision about your schooling on its own.

Who can see your work

• Thomas, your tutor, can see your chat transcripts, your answers, your marks and your progress. This is the point of the product rather than a side effect of it: the tutoring works because the same person sees the sessions and the lessons.
• A parent or guardian with their own sign-in sees a fixed set of things, listed in full below. They do NOT see your chat messages with the AI tutor, not the questions, not the answers, and not how many there were.
• Your parent can see: Marks and scores from practice questions and mock exams, and the criteria each mark was based on.
• Your parent can see: The most recent marked exam in full — the questions, the marks, and the marker's feedback on them.
• Your parent can see: Which topics have been covered, the self-rating given to each, and the measured mastery figure.
• Your parent can see: Hours of study logged, and how many questions and exams were completed each week.
• Your parent can see: The study plan, the calendar and subject goals — including anything written in the notes field of a study session or a calendar event.
• Your parent can see: A short summary of all of the above, emailed to them once a week on Sunday evening. You can see exactly what it says on your profile page, and they can stop it at any time.
• Your parent can see: That an assignment was worked on: its subject, its type and when it was last edited.
• Your parent can see: Mentoring sessions with Thomas: when the next one is, what it will focus on, and the summary he writes after each one.
• Your parent cannot see: Chat messages with the AI tutor. Not the questions asked, not the answers given, and not how many there were.
• Your parent cannot see: Assignment drafts, or the AI feedback written on them.
• Your parent cannot see: Notes and flashcards written for personal study.
• Your parent cannot see: Anything typed and not submitted.
• One figure is an estimate rather than a record: total hours on the platform adds a rough allowance for time spent chatting. It moves with how much the AI tutor is used, but the messages themselves are never shown.
• The same list is shown to your parent on their own page, so you both know where the line is.
• Nobody else. Your work is not shown to other students, is not used to train any AI model, and is not sold or shared for advertising.
• If you are flagged as possibly at risk, Thomas is told, and he is told what you wrote. The tutor page says this before you type anything.

Thomas can see your work: that is what the tutoring is. If your parent or guardian has an account they can see the progress figures, your marks and the notes Thomas writes for them; they cannot read your tutor conversations. Nobody else has access. We will not hand your information to anyone else unless the law requires it, or unless we believe someone is at risk of serious harm.

Where your information is processed

• Supabase: the database. Everything above is stored here. Region: Sydney, Australia (AWS ap-southeast-2).
• Render: the servers that run the site. Region: Singapore.
• Anthropic: the AI. Your messages, your answers and your assignment text are sent here to be responded to or marked. Processed in the United States.
• Resend: sends password resets and parent invitations. Sees email addresses. Processed in the United States.
• Netlify: delivers the pages you are reading, from servers around the world. It has no access to the database and never sees your work.

Some of the companies above handle your information outside Australia. Australian privacy law calls that a cross-border disclosure and requires us to say so plainly, which is what this section is. Before using an overseas provider we take reasonable steps to satisfy ourselves it handles personal information to a standard comparable to the Australian Privacy Principles, and we choose Australian hosting where we reasonably can. If you are not comfortable with your information leaving Australia, we cannot offer you Eruvio, and you can close your account at any time.

How long we keep it

• Chat transcripts are deleted after about 1.5 years. That covers your senior years plus the following year's revision.
• Records of how much AI time your account used are deleted after about 1.1 years. They contain no part of what you wrote.
• Expired sign-in sessions are deleted 30 days after they expire.
• Password reset links are deleted 1 day after they stop working.
• Your marks, your answers and your own work are kept while your account exists, because they are yours and you need them. They are deleted when your account is.
• Safety flags are kept while your account exists. They are not deleted on a timer, because a pattern over time is the thing that matters in keeping someone safe.

The periods above are enforced automatically, not by someone remembering. When your account is closed we delete your work, your marks and your conversations. We may keep a record longer where the law requires it, for example after a safety incident, and we will tell you if that applies to you. If you want something deleted sooner than the schedule above, ask, and we will do it unless we are legally required to keep it.

Your choices

• You can see everything we hold about you, by count and category, on your profile page.
• You can delete your account and everything attached to it from the same page. It is immediate and it cannot be undone.
• A parent or guardian can ask for the same deletion by emailing admin@eruvio.com.au.
• Nothing is shared with your tutor for marketing, and no product email is sent unless you turn it on. Both are off unless you switch them on.

You can ask to see everything we hold about you, ask us to correct anything wrong, ask us to delete your account, or withdraw your consent. If you are under 18 your parent or guardian can do all of that as well. Ask us and we will act within 30 days, and it costs nothing. Withdrawing consent means we can no longer run Eruvio for you, so it closes your account: we will tell you that before it happens, not after.

Questions and complaints

• The person responsible for privacy at Eruvio is Thomas Druve, admin@eruvio.com.au.
• If you are not satisfied with how a privacy question was handled, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Questions and complaints about your privacy go to Thomas Druve at tommy.druve@gmail.com. We will acknowledge you within 7 days and answer within 30. If you are not satisfied with our answer you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. You do not need our permission to do that and it costs you nothing.