Privacy Policy

Tutbob Pty Ltd ("us", "we", or "our") is committed to respecting your privacy. This Privacy Policy describes our policies and procedures on the collection, use, storage, sharing, and disclosure of your personal information when you use our Service. It also informs you about your privacy rights and how the law protects you.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We collect as little personal information as possible. In most cases, all we need is your name and your email address.

By accessing and using our website, app, browser extension, products and services, you agree to and consent to the collection, use, storage and disclosure of personal information by us as set out in this Privacy Policy.

Definitions

The words of which the initial letter is capitalised have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

For the purposes of this Privacy Policy:

Account means a unique account created for You to access our Service or parts of our Service.
Affiliate means an entity that controls, is controlled by, or is under common control with the Company.
APPs means the Australian Privacy Principles contained in Schedule 1 of the Privacy Act 1988 (Cth).
Application refers to Tutbob, the software program provided by the Company.
Browser Extension refers to the Tutbob extension installed in Your web browser.
Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Tutbob Pty Ltd (ABN 55 675 889 684), whose registered corporate address is 60 Halifax St, Adelaide SA 5000, and whose office is located at Ground Floor/10 Pulteney St, Adelaide SA 5000.
Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing details of Your browsing history among other uses.
Country refers to: Australia. The Company is based in South Australia.
Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
Educational Institution means a school, university, training provider or other organisation that provides the Service to its students or staff under a licence or pilot agreement with Us.
Individual Subscriber means a person who subscribes to the Service directly, and whose Account is not linked to an Educational Institution or corporate licence.
Institutional Licence means an Educational Institution or corporate agreement under which Accounts are linked to an administrator at that organisation.
Personal Data or personal information is any information that relates to an identified or identifiable individual.
Sensitive Information has the meaning given in the Privacy Act 1988 (Cth) and includes health information, information about a disability, and information about racial or ethnic origin.
Service refers to the Browser Extension, the Application or the Website or all three.
Service Provider means any natural or legal person who processes data on behalf of the Company.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
Website refers to Tutbob, accessible from www.tutbob.com.
You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

What We Collect

We collect the minimum personal information We need to provide the Service.

To create and manage Your Account, We collect:

Your first name and last name
Your email address

Depending on how You use the Service, We may also hold:

Accessibility and language preferences You choose to set
Educational content or information You choose to upload or input into the Service
Where Your access is provided under an Institutional Licence, an identifier supplied by that organisation, such as a student number or cohort assignment
Usage Data, as described below

We do not collect or store:

Your payment card details. All billing is handled by Stripe. See "Payments and Billing" below.
Your billing name or billing address.
Your residential address, phone number or date of birth. None of these are required to create an Account.
Any diagnosis, medical record or health record. We never ask for one.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol (IP) address, browser type, browser version, pages of our Service You visit, the time and date of Your visit, time spent on pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a device, We may also collect information about the type of device used, device unique ID, operating system, browser type and diagnostic data.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track activity on Our Service and store certain information. These technologies may include cookies, web beacons, tags and scripts to collect and analyse information and improve Our Service.

Cookies may be persistent or session-based. You can instruct Your browser to refuse Cookies or indicate when a Cookie is being sent. However, if You do not accept Cookies, some parts of the Service may not function properly.

We use Cookies for purposes including authentication, remembering user preferences, improving functionality, and analysing Service usage.

Payments and Billing

All payments for the Service are processed by Stripe. We do not collect, process or store Your payment card details at any point.

Card details are entered directly into Stripe's secure payment fields and are held by Stripe, which is certified as a PCI DSS Service Provider Level 1, the highest level of certification available in the payments industry.

From Stripe, We receive only limited billing information such as Your subscription plan, payment status, and the date of Your most recent payment. We do not receive Your billing name or billing address. We use the information We do receive to manage Your Account and to meet our tax and record keeping obligations.

Stripe handles Your payment information under its own privacy policy and terms, available at stripe.com/privacy. Stripe operates globally and may store or process payment information outside Australia. This is the only circumstance in which information connected to Your use of the Service is handled overseas.

Where the Service is provided under an Institutional Licence, billing is arranged with that organisation. Individual students and staff covered by an Institutional Licence do not provide payment details to Us or to Stripe.

Where Your Data is Stored and Processed

All personal information We collect through the Service is stored and processed in Australia. This includes the artificial intelligence processing that powers Tutbob's summaries, notes, key concepts, flashcards, quizzes and chat support. We do not send Your personal information, or the content You upload or access through the Service, to servers or AI model providers located outside Australia.

The only exception is payment processing, which is handled by Stripe as described above. We do not hold Your card details in any location.

Tutbob may be accessed by users located outside Australia, including international students. If You access the Service from outside Australia, You acknowledge that Your personal information will be transferred to and stored in Australia, and handled in accordance with Australian privacy law and this Privacy Policy.

If We ever engage a Service Provider that would require other personal information to be disclosed to or processed by an overseas recipient, We will take reasonable steps to ensure that recipient does not breach the Australian Privacy Principles in relation to that information, and We will update this Privacy Policy before making that change.

Sensitive Information and Disability Related Information

Tutbob is designed for students with invisible disabilities. Some of the information You provide or generate through the Service may be Sensitive Information under the Privacy Act 1988 (Cth), including health information. Examples include a self-reported learning difficulty, a disability, or an accessibility adjustment You request.

You are never required to disclose a diagnosis to use Tutbob. We do not ask for one, We do not store one, and We do not share one. Accessibility features such as dyslexia mode, focus mode, colour comfort mode, screen reader optimisation and language settings can be enabled without telling Us why.

Your accessibility and language settings are private by default. Where Your access is provided under an Institutional Licence, these settings are not visible to Your school, university or employer unless You expressly choose to share them. See "Insights and Visibility for Educational Institutions" below.

We only collect information of this kind where:

You have consented, or a parent, guardian or authorised representative of an Educational Institution has consented on Your behalf; and
the information is reasonably necessary for Us to provide the accessibility features or learning support You have asked for.

We apply additional access controls and handling restrictions to Sensitive Information within our systems.

Insights and Visibility for Educational Institutions

This section applies only where Your Account is linked to an Institutional Licence or an institutional administrator. If You subscribe to Tutbob directly as an Individual Subscriber, none of Your information is visible to any school, university or employer.

Where the Service is provided under an Institutional Licence, authorised staff at that organisation can access an analytics and insights dashboard covering their linked cohort.

The dashboard provides cohort level reporting, and authorised staff can also view an individual student's activity by name. Information visible in the individual view may include:

Whether and how often You have used the Service
Time spent using Service features
Courses and content You have accessed through the Service
Engagement measures such as notes, flashcards and quizzes generated or completed

Your accessibility and language settings are not included. Which settings You have turned on, such as dyslexia mode, focus mode, colour comfort mode, screen reader optimisation or a preferred language, is private by default and is not shown to Your Educational Institution.

You may choose to share Your accessibility and language settings with authorised staff at Your institution by turning on sharing in Your account settings. This is switched off by default. You can switch it off again at any time, and Your settings will stop being visible from that point onward. Choosing not to share has no effect on Your access to the Service or to any accessibility feature.

We never share a diagnosis, medical information or health record with Your institution, because We do not hold that information.

If You use Tutbob through Your school, university or employer, You should assume that authorised staff can see Your named activity in the Service, other than the accessibility and language settings described above.

Your Account is only linked to an organisation where You join through that organisation's licence or accept an invitation from an institutional administrator.

Once information is provided to an Educational Institution, that institution is responsible for how it handles that information under its own privacy obligations and policies. We encourage You to read Your institution's privacy policy.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide, operate and maintain the Service
To manage Your Account and registration
For the performance of contracts and service delivery
To provide accessibility features and personalised learning support
To provide analytics and insights to Educational Institutions under an Institutional Licence, as described above
To contact You regarding service updates, security notices or support requests
To send product updates, newsletters, announcements and marketing communications related to Tutbob, unless You have opted out
To manage and respond to Your requests
For data analysis, usage trends, promotional effectiveness and service improvement
For business transfers such as mergers, restructures or acquisitions
To comply with legal obligations

Automated Processing and AI Assisted Features

Tutbob uses artificial intelligence and automated processing to deliver its core features. This includes generating summaries, notes, key concepts, flashcards and quizzes from lecture and course content, adapting explanations and study material to Your stated learning preferences, and producing engagement and usage insights. All of this processing takes place in Australia.

The kinds of personal information used by these automated systems include the content You upload or access through the Service, Your interactions with the Service, Your accessibility and language preferences, and Usage Data.

Tutbob's AI tools are designed to support learning and understanding. They do not make academic, disciplinary, assessment, enrolment or institutional decisions about You, and they do not make decisions that have legal effects or similarly significant effects on Your rights or interests. Decisions of that kind remain with Your Educational Institution or employer.

From 10 December 2026, the Privacy Act 1988 (Cth) requires entities that use computer programs to make, or to substantially and directly assist in making, decisions that could reasonably be expected to significantly affect an individual's rights or interests to describe that use in their privacy policy. If our use of automated processing changes so that this requirement applies to Us, We will update this Privacy Policy before those changes take effect.

You may contact Us at any time to ask how an AI generated output was produced, or to request human review of any output the Service has generated about You.

Accessibility and Inclusive Use of Personal Information

Tutbob is designed to support inclusive and accessible learning experiences for students with diverse needs and learning styles. We may use personal information to provide accessibility features, personalised learning support, and adaptive study tools, such as simplified explanations, translations, or tailored learning pathways.

We do not use personal information in ways that unfairly disadvantage, discriminate against, or profile users based on protected characteristics. Personal information is handled ethically and responsibly to support fair, inclusive and positive learning outcomes.

Marketing Communications

We may use Your personal information, including Your email address, to send You updates, newsletters, product announcements, and other marketing or promotional materials related to Tutbob. These communications may include information about new features, improvements, events, partnerships or offers relevant to Your studies.

You may opt out of receiving marketing communications at any time by using the unsubscribe link included in our emails or by contacting Us directly. Opting out will not affect essential service-related communications.

We do not use personal information collected under an Institutional Licence for marketing to students.

Sharing of Your Personal Information

We may share Your personal information in the following situations:

With Service Providers who assist in operating or analysing the Service
With Stripe, for the purpose of processing payments
With Educational Institutions under an Institutional Licence, as described in the "Insights and Visibility for Educational Institutions" section above
During business transfers, mergers, acquisitions or financing
With Affiliates and partners who are required to comply with this Privacy Policy
With other users where You choose to share information publicly
With Your consent
Where required by law

We do not sell personal information to third parties.

Retention of Your Personal Data

We retain Personal Data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes and enforce agreements.

Usage Data is generally retained for a shorter period, unless required for security, functionality improvements or legal compliance.

Where personal information is no longer needed for any purpose for which it may be lawfully used, and We are not required by law to retain it, We will take reasonable steps to destroy it or ensure it is de-identified.

Children and Students Under 18

Tutbob is used within school pilot programs and by students under the age of 18. We take particular care with their personal information.

Where Tutbob is provided under an Institutional Licence:

The Educational Institution is responsible for obtaining any consent required from parents or guardians before students access the Service, and for confirming it has authority to provide student information to Us.
We collect only the information the Educational Institution provides to Us or that the student generates through normal use of the Service.
We handle student personal information in accordance with our agreement with that institution and this Privacy Policy.
We do not use student personal information collected in this way for marketing purposes.
Authorised staff at that institution can view a named student's activity, as described in the "Insights and Visibility for Educational Institutions" section above. A student's accessibility and language settings are not visible to the institution unless that student chooses to share them.

Where a student under 18 registers directly, We ask that they have the consent of a parent or guardian before creating an Account.

Capacity to consent. We assess, where reasonable and practicable, whether a young person has the capacity to consent on their own behalf. Where a young person does not have that capacity, We will deal with a parent, guardian or the Educational Institution instead.

Parents, guardians and Educational Institutions may contact Us to access, correct or request deletion of a student's personal information, subject to the student's own privacy interests and any legal obligations We have.

If We become aware that We have collected personal information from a child without the required consent, We will take reasonable steps to delete that information promptly.

The Office of the Australian Information Commissioner is developing a Children's Online Privacy Code, expected to be registered by 10 December 2026. We will review this Privacy Policy and our practices against that Code once it is finalised.

Your Privacy Rights

Under the Australian Privacy Principles, You have the right to:

Access the personal information We hold about You
Correct personal information that is inaccurate, out of date, incomplete, irrelevant or misleading
Request deletion of Your personal information
Withdraw consent You have given, including any consent to share Your accessibility and language settings with Your Educational Institution
Opt out of direct marketing communications at any time
Deal with Us anonymously or by pseudonym where it is lawful and practicable to do so, for example when making a general enquiry. Most features of the Service require an Account, so this will not usually be practicable for ongoing use of the Service.
Complain if You believe We have mishandled Your personal information

Where available, You may manage Your information through account settings, or by contacting Us directly. We will respond to access and correction requests within a reasonable period, and ordinarily within 30 days.

We may retain certain information where required by law or where We have a lawful basis to do so. If We refuse an access or correction request, We will tell You why in writing and explain how You can complain.

Disclosure of Your Personal Data

We may disclose Personal Data:

In connection with business transactions
To comply with legal obligations
To protect Company rights, property or safety
To investigate wrongdoing or security issues
To protect users or the public

Security of Your Personal Data

We use commercially reasonable security measures to protect Your Personal Data, including access controls, encryption in transit, Australian based hosting and AI processing, minimal data collection, and restrictions on internal access to Sensitive Information. We do not store payment card details. However, no method of transmission or storage is completely secure, and We cannot guarantee absolute security.

Data Breaches

If We become aware of unauthorised access to, unauthorised disclosure of, or loss of personal information We hold, We will assess the incident promptly.

Where the incident is likely to result in serious harm to any affected individual, We will notify those individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth). Where a breach affects students under an Institutional Licence, We will also notify that organisation.

How to Make a Complaint

If You believe We have breached the Australian Privacy Principles or mishandled Your personal information, please contact Our Privacy Officer at the details below. Please include Your name, contact details, and a description of what happened.

We will acknowledge Your complaint within 7 days and aim to provide a written response within 30 days. If We need more time, We will let You know why.

If You are not satisfied with our response, You may refer the matter to the Office of the Australian Information Commissioner:

Website: www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001

Links to Other Websites

Our Service may contain links to third-party websites. We are not responsible for the content, privacy policies or practices of those websites and encourage You to review their policies.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page and, where appropriate, notified via email or within the Service.

You are encouraged to review this Privacy Policy periodically.

Contact Us

If You have any questions about this Privacy Policy, or wish to exercise any of Your privacy rights, You can contact Us:

Tutbob Pty Ltd (ABN 55 675 889 684)

Corporate address: 60 Halifax St, Adelaide SA 5000
Office: Ground Floor/10 Pulteney St, Adelaide SA 5000
Email: hello@tutbob.com
Phone: 0421 903 940
Website: www.tutbob.com

This Privacy Policy is governed by the laws of South Australia and the Commonwealth of Australia.

Effective Date: July 01, 2024
Last Updated: August 12, 2026

Tutbob