Privacy Policy
Last updated: 7 May 2026
1. Who we are
EduWizz (“EduWizz”, “we”, “us”) is an AI-assisted learning platform for students, parents, and teachers. This policy describes what information we collect, why we collect it, and how it's used.
This is a first-pass document drafted in plain language. If anything here is unclear, please reach out at support@eduwizz.ai and we will explain or update.
2. What we collect
- Account information: name, email, date of birth, role (student/parent/teacher), school (optional), year level (students), state and country.
- Authentication: a password hash (never the password itself) and session JWTs.
- Activity: questions you attempt, answers you give, mastery scores, lesson-generation usage, and gamification stats (XP, streaks).
- Content you create: flashcards, quizzes, notes, uploaded documents (PDF / text), and any text you paste into the AI tutor or generators.
- Parent-child links: when a parent links a child by email, we record the relationship.
- Lead capture: email addresses entered into the “try 10 free questions” trial flow or the newsletter signup form.
3. Children under 13
If a registering student is under 13 (computed from their date of birth), the account is created but cannot be used until a parent or guardian provides consent by clicking the link we email them.
- Under-13 accounts can't log in until consent is granted.
- We do not run live AI generation for under-13 accounts. They see pre-moderated cached lessons.
- A parent can revoke consent and delete the account at any time by contacting us.
4. How AI is used (and what reaches AI providers)
We use third-party AI providers — currently Anthropic (Claude) — to generate lessons, study materials (flashcards, quizzes, notes), and AI-tutor responses. When we call these providers we send the following:
- The topic, year level, subject, chapter, and difficulty for the question or lesson.
- The text of the document or paste you have asked the AI to summarise / build flashcards from.
- The question body and your written answer when you ask the tutor to explain working.
We do not send your account information (name, email, phone), your historical attempts, scores, mastery data, or any identifier we can use to single you out, to the AI providers.
What this means in practice: if you paste text into the AI generator that contains personal information about yourself or someone else, that text is sent to the AI provider as part of the generation request. Don't paste anything you wouldn't want the AI to read.
5. Content moderation
For under-18 students we apply a content filter on the input and output of the AI generators, on top of the model provider's own safety controls. No filter is perfect — if you ever see output that's inappropriate, please report it (see Contact below) and we will remove it and improve the filter.
6. How we store and protect your data
- Hosting: Google Cloud (Cloud Run, Cloud SQL, Cloud Storage). We host in Australia where possible.
- Encryption: data is encrypted in transit (HTTPS) and at rest by the cloud provider.
- Access: only a small number of staff have production access. Access is logged.
- Backups: routine database backups, retained for a limited period.
7. Your rights
You can, at any time:
- Access — see the data we hold about you (see your account settings, or email us).
- Correct — fix anything that's wrong about your profile.
- Delete — close your account and have your data removed (a small amount may be retained for legal / accounting purposes; we'll be specific on request).
- Withdraw consent — parents can revoke under-13 consent.
- Complain — to us first, then to the relevant privacy regulator (in Australia, the OAIC).
8. Cookies and analytics
We use a small number of cookies for authentication (the auth-token cookie that keeps you logged in) and we use a privacy-friendly analytics tool (Plausible) that does not set tracking cookies, does not collect personal data, and is not used to build behavioural profiles. We do not run third-party advertising trackers.
9. Sharing with third parties
We share data only with the service providers necessary to run EduWizz — the AI provider above, our cloud host, our email sender, and our payments processor (when you subscribe to a paid feature). We do not sell or rent your data to anyone.
10. Changes to this policy
If we make material changes we'll email registered users and post a note on the home page. Otherwise, the “last updated” date at the top of this page will reflect the most recent edit.
11. Contact
Questions, deletion requests, or content reports: support@eduwizz.ai. We aim to reply within 5 business days.