Privacy Policy

1. Who we are

YoTeach.me is an AI-powered tutoring platform designed for Australian students in Years 6–10. The platform is operated by Diafani Technologies Pty Ltd (ABN 87 696 696 287), a company registered in Australia.

2. Information we collect

We collect only what is necessary to provide and improve our service:

• •Account information — Parent/guardian name, email address, and password when you register.
• •Student profiles — First name, year level, email address, a parent-set password used by the student to log in, and an optional profile photo.
• •Session data — Real-time voice audio (transcribed and discarded, see Section 5), transcripts, questions asked, and subjects discussed during tutoring sessions.
• •Homework and exam images — Photos of homework or exam papers uploaded by students or admins; text extracted from these images via automated OCR.
• •Payment information — Processed securely by Stripe; we do not store full card details.
• •Usage data — Pages visited, session duration, product analytics events, and error logs for improving the platform.

3. How we use your information

• ✓To deliver tutoring sessions and generate session transcripts
• ✓To provide parents with oversight of their child's learning activity
• ✓To process subscription payments
• ✓To send service-related emails (e.g. weekly progress digests, billing receipts)
• ✓To detect and prevent fraud or misuse
• ✓To improve and develop the platform

We do not sell your personal information to third parties.

4. Children's privacy

YoTeach.me is intended for use by children under the supervision and consent of a parent or guardian. A parent or guardian must create the account and add the student profile. Students log in using an email address and password set by their parent. We collect minimal information about students and do not use student data for advertising purposes.

When a parent or guardian creates a YoTeach.me account, they are required to explicitly accept our Terms of Service and this Privacy Policy before accessing the platform. This acceptance covers the collection and processing of their child's personal information as described in this policy, including the transfer of data to the overseas service providers detailed in Section 6.

5. How we store and protect your data

Structured data (accounts, transcripts, metrics) is stored in Neon Postgres. Files such as profile photos, homework photos, and exam paper images are stored in Vercel Blob. Both providers use industry-standard encryption at rest and in transit.

Session voice audio is streamed live to our transcription provider, converted to text, and discarded — it is not retained by us or by the provider. Session transcripts and the data we derive from them (progress metrics, misconceptions) are retained for at least 12 months. We run an annual clean-up each year on 31 December (Australian time) that permanently deletes session data more than 12 months old. You can also request deletion of your transcripts at any time by contacting us.

Homework and exam images uploaded for OCR are deleted from Vercel Blob shortly after the extracted text has been added to the session context. Profile photos remain until you change or remove them. All files are permanently deleted when you close your account.

6. Overseas data processing & third-party sub-processors

To deliver our service we engage the following third-party processors. Most process data through the United States. Where an Australian-hosted equivalent is available at production-grade quality — currently our speech-to-text provider Deepgram — we route traffic through the Australian region so that data stays on-shore. Each processor has entered into a Data Processing Agreement (DPA) with Diafani Technologies Pty Ltd.

In accordance with Australian Privacy Principle 8 (APP 8), we take reasonable steps — including Data Processing Agreements — to ensure that each of the above recipients handles personal information in a manner consistent with the APPs. By creating an account and accepting this policy, you acknowledge that your information (and your child's information) may be transferred to and processed overseas (primarily in the United States) where processing occurs outside Australia. Australian privacy law may offer less recourse in respect of how overseas recipients handle your information; however, each provider above maintains security and privacy standards materially comparable to the APPs. Where a provider offers an Australian-hosted region at production quality, we route to it — currently Deepgram speech-to-text is served from AWS Sydney (ap-southeast-2).

Our AI sub-processors — Anthropic, ElevenLabs and Deepgram — do not, by default under their commercial API terms, use student session content to train their models. We have configured our integrations to remain on those defaults.

We may disclose information if required by Australian law or a valid court order.

7. Your rights

Under Australian Privacy law you have the right to:

• ✓Access the personal information we hold about you
• ✓Request correction of inaccurate information
• ✓Request deletion of your account and associated data
• ✓Opt out of non-essential communications

To exercise these rights, contact us at [email protected].

8. Cookies and product analytics

We use session cookies necessary for authentication. We also use PostHog, a product analytics service, to understand how the platform is used and to capture front-end errors. PostHog records page views, button clicks and similar interaction events (autocapture), and stores a small identifier in your browser's local storage and cookies. We strip pattern-matched personal information (such as email addresses or phone numbers) from analytics events before they are sent.

You can disable cookies in your browser; this may affect login and platform functionality. You can also turn off product analytics at any time from your account settings page (parent or student) — look for the "Product analytics" toggle. Your choice is remembered in your browser.

9. Changes to this policy

We may update this policy (and our Terms of Service) from time to time. When we make material changes — such as adding a new sub-processor or changing how we handle children's data — you'll be asked to review and re-accept the updated documents the next time you sign in to the parent dashboard; you will not be able to continue using the Platform until you do. For minor clarifications, we will update the "Last updated" date above without prompting for re-acceptance.

10. Contact

For privacy enquiries please use our contact form or email [email protected].