Privacy notice
Version [1] · Last updated [date]
BrainShift helps VCE students study. This notice explains what we collect, why, who helps us run BrainShift, and how to see or delete your information. We never sell your information or use it for advertising.
Who we are
BrainShift is run by [Business name] ([ABN]). For any privacy question or request, email [privacy email] or write to [postal address].
What we collect
| What | Examples | Why |
|---|---|---|
| Account details | Name, email address, year level, school (if given), subjects and units | To sign you in and set BrainShift up for your subjects |
| Your study work | Messages, typed maths, drawings, uploaded photos and files (such as SAC pages and practice work) | To answer, mark and explain your work |
| Results and plans | Marks the AI gives, marks you enter from your teacher, calendar entries, SAC dates, progress reports | To show your progress and help you plan |
| Feedback | Thumbs up or down on answers, notes you write, messages you send us | To fix problems and improve answers |
| Usage and technical information | Which features you use, how much AI each request used, device and browser type, error reports | To keep BrainShift working, set fair limits and fix bugs |
Please don't upload anything with other people's personal details, or more of your own than the work needs. Where you can, cover your name, student number and school on photos before you upload them.
Under 18s and parents
Most BrainShift users are under 18. A parent or guardian can agree to this notice for their child. A student aged 15 or over can agree for themselves. [Parent copy: when a student agrees, we ask for a parent or guardian's email so we can send them a copy of this notice.] A parent or guardian can ask us at any time to see or delete their child's information.
Who helps us run BrainShift
We share information only with the companies that run parts of BrainShift for us, and only what they need:
| Company | What they do | Where |
|---|---|---|
| OpenAI | The AI that answers, marks and explains. It receives your messages and the uploads you send with them | United States |
| Supabase | Stores your account, work, uploads and backups | Tokyo, Japan |
| Vercel | Runs the BrainShift website and its server | Tokyo, Japan (Vercel is a US company) |
| Sentry | Collects error reports so we can fix bugs | [United States] |
OpenAI doesn't use what we send to train its AI. We ask OpenAI not to store conversations. OpenAI may keep requests for up to 30 days to check for misuse, then deletes them. Uploaded files stay at OpenAI only while the session they belong to exists. Because OpenAI is in the US, your information is sent overseas. We choose providers with strong security and privacy commitments.
We may also share information if the law requires it, or to protect someone's safety.
What we can see
A small number of BrainShift staff [currently: the founder] can see your account, uploads, marked work and AI answers. We look at them to check and improve the quality of answers and marking, to handle feedback, and to help when you ask for support. We read chats only to look into a reported problem or a safety concern.
Using work to improve BrainShift
We may use work and answers, with names and other identifying details removed, to check and improve answer quality. For example, we may build a set of test questions to compare AI models. We never sell it, and it's never used to train OpenAI's models.
How long we keep it
We keep your information while your account is open. Deleting a session deletes its messages and uploads, including OpenAI's copies. Deleting your account deletes everything. Encrypted nightly backups are kept for 14 days, so deleted information is fully gone within 14 days. [Inactive accounts: we may delete accounts that haven't been used for [period], after emailing you first.]
Your choices and rights
- See or correct: most of your information is in the app. For a copy of everything, or to fix something you can't change yourself, email [privacy email].
- Delete: Profile › Delete my account deletes your account and everything in it. You can also email us.
- Ask a question or complain: email [privacy email]. We'll reply within [30 days]. If you're not happy with our reply, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Keeping it safe
Your information is encrypted when it's sent and when it's stored. Only you (and staff, as above) can see your work. Backups are encrypted with a key kept separately. If a data breach is likely to cause serious harm, we'll tell you and the Information Commissioner.
Changes
If we change this notice, we'll update the version and date, and ask you to agree again before you keep using BrainShift.