Privacy Policy

This Privacy Policy explains how Clarby collects, uses, stores, and protects your personal information, in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

• Account information: name, email address, password (encrypted)
• Profile information: year group, subjects studied
• Academic content: notes, uploaded documents, flashcards, quiz answers, homework questions and answers
• Usage data: pages visited, features used, session duration, study patterns (collected via PostHog analytics)
• Technical data: IP address, browser type, device information, error logs (collected via Sentry)
• Payment information: if you subscribe to a paid plan, payment details are processed directly by our payment processor (Stripe) — we do not store your full card details ourselves

We use your information to:

• Provide and personalise the Service (e.g., AI tutor context, flashcard generation, capability tracking)
• Process payments for subscriptions
• Send service-related communications (account confirmations, important updates)
• Send optional marketing communications (only if you opt in)
• Monitor and improve the Service, including analysing aggregate usage patterns
• Detect and prevent misuse, fraud, or safety issues (including our content moderation system for AI chat features)
• Comply with legal obligations

Your data is stored using Supabase, a secure cloud database provider. We use industry-standard security measures including encryption, row-level security policies, and rate limiting to protect your information. Academic content you upload is only accessible to you and, where relevant, processed by our AI provider (Anthropic) to deliver features you’ve requested.

We share limited data with the following service providers, solely to operate the Service:

• Supabase (database hosting)
• Anthropic (AI processing of study content you submit for AI features)
• PostHog (product analytics — usage patterns, not academic content)
• Sentry (error monitoring — technical logs, not academic content)
• Stripe (payment processing, once integrated)

We do not sell your personal information to third parties.

Clarby is designed for use by secondary and tertiary students. If you are under 18, we recommend a parent or guardian is aware of your use of the Service. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, please contact us to have it removed.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data (available directly in Settings, or by contacting us)
• Export your data (available directly in Settings via the Export Data feature)
• Opt out of non-essential communications

We retain your data for as long as your account is active. If you delete your account, we remove your personal data and academic content from our active systems, except where retention is required by law.

In the event of a data breach that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches (NDB) scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

Some of our service providers (Anthropic, PostHog, Sentry) may process data outside Australia, including in the United States. We take reasonable steps to ensure these providers maintain appropriate data protection standards.

We use analytics tools (PostHog) that may use cookies or similar technologies to understand how the Service is used. You can control cookie preferences through your browser settings.

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notification.

For privacy questions, access requests, or complaints: support@clarby.com.au

You may also contact the Office of the Australian Information Commissioner (OAIC) if you have unresolved privacy concerns: www.oaic.gov.au