Privacy Policy

Clarby is operated by Benjamin Arthur Flakemore, trading as Clarby (ABN 44 811 088 371), based in Victoria, Australia. For any privacy question, or to make an access, correction, or deletion request, contact support@clarby.com.au.

This Privacy Policy explains how Clarby collects, uses, stores, and protects your personal information, in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

• Account information: name, email address, password (stored hashed by our authentication provider)
• Profile information: year group, subjects studied
• Academic content: notes, uploaded documents, flashcards, quiz answers, homework questions and answers, past-paper answers, AI tutor conversations, and AI-generated study aids
• Usage data: pages visited, features used, session duration, study patterns, and your email address as an account identifier (collected via PostHog analytics)
• Technical data: IP address, browser type, device information, error logs (collected via Sentry error monitoring — submitted academic content is stripped from these before they are sent; see section 6)
• Payment information: if you subscribe to a paid plan, payment details are processed directly by our payment processor (Stripe) — we do not store your full card details ourselves

We use your information to:

• Provide and personalise the Service (e.g., AI tutor context, flashcard generation, capability tracking)
• Process payments for subscriptions
• Send service-related communications (account confirmations, important updates)
• Send optional marketing communications (only if you opt in)
• Monitor and improve the Service, including analysing aggregate usage patterns
• Detect and prevent misuse, fraud, or safety issues (including our content moderation system for AI chat features)
• Comply with legal obligations

When you use an AI feature — flashcard or quiz generation, the AI tutor, homework guidance, visual study aids, past-paper marking, or textbook and notes extraction — the content you submit for that feature (text you type, and text extracted from files you upload) is sent to Anthropic, PBC (“Anthropic”) and processed through its API to produce the result you requested. A brief automated safety check on messages sent to our AI chat features is also processed by Anthropic.

Anthropic processes this content as our service provider and does not use content submitted through its API to train its models. Anthropic’s handling of this data is governed by its Commercial Terms of Service.

We do not use your academic content to train any AI model.

Your data is stored using Supabase, a cloud database and file-storage provider. Our Supabase database and the files you upload are hosted in Supabase’s Sydney, Australia region.

Access is enforced at the database level. Row-level security policies restrict every record — your subjects, topics, notes, flashcards, quizzes, homework, past-paper work, AI tutor conversations, and capability scores — so that only your account can read it. Files you upload are held in a private storage bucket and are reachable only through short-lived links issued to your authenticated session; they are not publicly accessible.

Our error-monitoring tool (Sentry) is configured to strip submitted text — homework answers, tutor messages, uploaded or extracted content — out of error reports and diagnostic breadcrumbs before they are sent, so your academic content is not captured in our error logs.

We also use encryption in transit and rate limiting on our AI features.

We share limited data with the following service providers, solely to operate the Service:

• Supabase (database and file hosting)
• Anthropic (AI processing of study content you submit for AI features — see section 5)
• PostHog (product analytics — usage patterns and your email as an account identifier, not academic content)
• Sentry (error monitoring — technical logs, with submitted academic content stripped out)
• Stripe (payment processing)

We do not sell your personal information to third parties.

Clarby is intended for secondary and tertiary students. You must be at least 13 years old to create an account.

When you sign up, you tell us whether you are 18 or older. If you indicate you are under 18, we ask you to confirm that a parent or guardian is aware of and comfortable with your use of Clarby before you continue. This is a self-declared confirmation — we do not separately verify a guardian’s identity or obtain their signature.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact support@clarby.com.au and we will delete it.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data (available directly in Settings, or by contacting us)
• Export your data (available directly in Settings via the Export Data feature)
• Opt out of non-essential communications

We respond to access, correction, and deletion requests within 30 days of receiving them.

We retain your account information and academic content for as long as your account remains open.

When you delete your account — through Settings, or by asking us — we immediately and permanently remove your personal information and academic content from our live systems: your subjects, topics, notes, flashcards, quizzes, homework and past-paper work, AI tutor conversations, uploaded files, capability scores, study history, and your login credentials. Any copies held in routine encrypted backups are overwritten within 30 days as those backups rotate. We retain a minimal record beyond this only where the law requires it, or to resolve an open billing dispute.

In the event of a data breach that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches (NDB) scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

Our database and the files you upload are stored in Australia. Some of our other service providers (Anthropic, PostHog, Sentry, Stripe) process data outside Australia, including in the United States. We take reasonable steps to ensure these providers maintain appropriate data protection standards.

We use analytics tools (PostHog) that may use cookies or similar technologies to understand how the Service is used. You can control cookie preferences through your browser settings.

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notification.

For privacy questions, access requests, or complaints: support@clarby.com.au

You may also contact the Office of the Australian Information Commissioner (OAIC) if you have unresolved privacy concerns: www.oaic.gov.au