Privacy Policy

Effective date: 25 July 2026 · Last updated: 30 July 2026

This Privacy Policy explains how Acreate (ABN 48 580 697 259, "we", "us", "our") collects, uses, discloses and protects personal information when you use acreate.com.au and app.acreate.com.au (together, the "Service").

We handle personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). This policy applies regardless of whether the Privacy Act formally applies to our business at a given point in time — see "A note on the Privacy Act" below.

1. Scope

This policy covers information we collect through the Service: our marketing site, the Acreate web application, our AI worksheet-generation features, and our customer support channels. It does not cover third-party websites we link to, or the separate privacy practices of the service providers listed in section 5, which are governed by their own privacy policies.

2. Information we collect

We do not knowingly collect sensitive information (such as health, racial or ethnic information) and ask that you do not include it in worksheet topics, custom instructions, or uploaded files.

A note on uploaded files and third-party information

If you upload a worksheet, past exam, or student work sample to be cloned into a new worksheet, please remove or avoid including any other person's personal information (for example, a student's full name or handwriting on a submitted worksheet) before uploading, unless you have the authority to share it with us for this purpose. Uploaded files are sent to our AI provider only to describe the worksheet's structure and are not retained by that provider after processing (see section 5).

3. How we collect information

• Directly from you — when you create an account, subscribe to a paid plan, generate or upload a worksheet, create a class, upload a logo, or contact support.
• Automatically — through cookies and similar technologies when you use the Service. See our Cookie Policy for details and how to manage your preferences.
• From service providers — our authentication provider (Clerk) and payment provider (Stripe) pass us account and billing status information needed to run the Service.

4. Why we collect, hold, use and disclose personal information

We collect and use personal information to:

• create and administer your account and authenticate you;
• generate worksheets and related content using our AI provider based on your inputs;
• process payments, manage subscriptions, trials and invoices, and calculate applicable tax;
• provide customer support and respond to enquiries;
• maintain, secure, debug and improve the Service, including through error monitoring and product analytics;
• communicate with you about your account, transactional matters, and (only if you opt in) product updates;
• comply with our legal and tax obligations; and
• enforce our Terms of Service and Acceptable Use Policy.

We do not sell personal information, and we do not use your worksheet content to train AI models on behalf of third parties (see section 8).

5. Who we share information with

We share personal information only with the service providers who help us run Acreate, and only to the extent needed for the purposes above:

We may also disclose personal information if required by law, to protect our rights or the safety of others, or in connection with a business transfer (such as a merger or acquisition), in which case we will take reasonable steps to ensure the recipient handles it consistently with this policy.

6. Overseas disclosure

Several of our service providers (Clerk, Stripe, OpenAI, PostHog, Vercel, and Supabase, depending on its configured region) store or process data on servers located outside Australia, principally in the United States. Before disclosing personal information overseas, we take reasonable steps to ensure recipients handle it consistently with the Australian Privacy Principles, including by relying on providers' published data-processing terms and security certifications. By using the Service, you acknowledge that your personal information may be handled outside Australia and may not always receive the same level of protection as under Australian law.

7. Data retention

We retain personal information for as long as your account is active, and for a reasonable period afterwards to comply with legal, tax and accounting obligations, resolve disputes, and enforce our agreements. When you delete your account (see section 11), we delete your worksheets, classes, uploaded logo, usage records and account data from our active systems, other than records we are required to retain by law (for example, transaction records Stripe retains for tax purposes).

8. Artificial intelligence and automated processing

Acreate uses a third-party AI provider (OpenAI) to generate worksheet content and, for the "clone a worksheet" feature, to read an uploaded file and describe its structure. We configure these requests so the provider does not use your data to train its models and does not retain the content of the request after it is processed. Generated worksheets are AI-produced: they may contain errors and should be reviewed by a qualified educator before use with students. AI processing here informs worksheet content only — we do not use automated processing to make decisions about you (for example, decisions affecting your access to the Service or any legal or similarly significant effect).

9. Cookies and analytics

We use essential cookies to keep you signed in and to keep the Service secure, and — only if you accept them — browser analytics cookies to understand visits and interactions. Separately, when you are signed in, our servers record limited first-party lifecycle events such as account creation, subscription status changes, and successful worksheet or teaching-plan creation. These server events do not set analytics cookies and are used to operate, measure and improve the Service. They contain configuration metadata (for example subject, year level and question count), but never worksheet prompts, generated worksheet content, uploaded files or raw error messages. See our Cookie Policy for details.

10. Security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including access controls, encryption in transit, and row-level security on our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Access, correction and account deletion

You can access and update most of your account information at any time from Settings → Account. You can delete individual worksheets and classes directly in the app. To delete your entire account and the personal information associated with it, use the account-deletion option in Settings → Account, or contact us at support@acreate.com.au. We will action deletion requests as soon as reasonably practicable, subject to the retention exceptions in section 7.

You may also request access to, or correction of, personal information we hold about you by contacting us using the details in section 15. We will respond within a reasonable timeframe and will only refuse a request in the circumstances permitted by the Privacy Act, in which case we will explain why.

12. Children and young people

The Service is intended for use by educators, tutors and parents, and account holders must be at least 16 years old. We do not knowingly collect personal information directly from children under 16. Teachers, tutors and parents remain responsible for any information about a student that they choose to include in worksheet topics, custom instructions, or uploaded files, and should avoid including a student's personal information beyond what is necessary (see "A note on uploaded files and third-party information" above). If you believe a person under 16 has created an account or that we have inadvertently collected a young person's personal information, please contact us so we can address it.

13. Complaints

If you have a concern about how we've handled your personal information, please contact us first using the details in section 15 so we can try to resolve it. If you're not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

14. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal or operational reasons. We will update the "Last updated" date above and, for material changes, provide additional notice (such as an in-app notice or email).

15. Contact us

For any questions about this policy or how we handle your personal information, contact:

Acreate support@acreate.com.au