Privacy notice

Draft for the pilot, pending privacy review. Version 2026-09-28-draft.

Who we are

TrackATAR is a small pilot run from Perth, Western Australia, to help ATAR students and their families understand schoolwork and support each other. Contact: hello@trackatar.com.

What we collect

Account details: names, email addresses and passkey public keys (never your fingerprint or face).

School details you add: school, year, subjects, study set, and marked assessments you photograph or upload, including marks and teacher comments.

What the student writes in practice (answers and explanations), and the feedback the app gives.

Basic technical records: sign-in sessions, notification subscriptions, and logs of AI requests (timings and sizes, not content).

Who can see what

Families choose. By default, parents see school results, study they set, and summaries of practice, while the student's own practice answers stay private to the student. Only the student can choose to share everything with their parents, and anyone can switch back.

If a student writes something suggesting they may be at risk of harm, we show support contacts and email the parents a short alert that doesn't include what was written.

Where it's stored and who processes it

Our database and uploaded files are stored in Sydney, Australia (Neon and Vercel).

To read marked work and give practice feedback, relevant content is sent to Anthropic's Claude AI in the United States. Anthropic's commercial terms say this data isn't used to train their models. We don't add names or schools to what we send, but a photo of marked work includes whatever is printed on it, such as a name.

Emails are sent through Resend, which may process email addresses outside Australia.

How long we keep it

We keep a family's data while they use TrackATAR. During the pilot we plan to delete school records 12 months after the student's final WACE exams unless the family asks us to keep them, and to keep AI request logs for no more than 90 days.

Your choices

You can download your family's data and ask us to delete it at any time from More in the app. We'll delete it within 30 days. You can also email us to ask what we hold or to correct it.

We don't sell data, show ads, or share it with schools or anyone else unless the law requires it.