ReWriteAble Privacy Policy

This Privacy Policy explains how ReWriteAble, operated by AP DAYA Group Pty Ltd, collects, uses, and protects the personal information of users — including teachers, school administrators, and students. We are committed to handling personal information responsibly and in accordance with the Australian Privacy Principles (APP) and other applicable privacy laws. ReWriteAble is designed for use in schools, and we take the privacy of students and children seriously.

We collect the following types of information: • Name — collected for teacher and admin accounts, and for student accounts created by schools. • Email address — collected for teacher and admin accounts. Student accounts do not require an email address. • Username — students log in using a username created by their teacher or school. • Written content — text that students or users submit to the platform for rewriting and improvement. • Writing history — saved versions of writing sessions, so students can access their work over time. • Usage data — general information about how the platform is used, such as how often features are used. This helps us improve the service.

We use the information we collect to: • Provide the ReWriteAble writing support service to students, teachers, and schools. • Save student writing and writing history so students can access their work. • Improve the functionality, reliability, and performance of the platform. • Provide customer support and respond to enquiries from schools and users. • Maintain the security and integrity of the platform.

ReWriteAble uses artificial intelligence (AI) to help rewrite and improve student writing. • When a student or user submits text, that text is processed securely by our AI system to generate a rewritten version. • This processing is done solely to provide the writing support service. • We do not sell student writing or use it to identify individual students. • We do not use student writing to train AI models for other purposes. • Text submitted for rewriting is handled securely and is not shared with unauthorised parties.

ReWriteAble supports school accounts where teachers or administrators manage student access. • Student accounts are created and managed by teachers or school administrators — not by students themselves. • Students log in using a username and password. They do not need an email address to use ReWriteAble. • Student writing and history are stored so students can access their work across sessions. • Student data is only accessible by the student themselves, and by their school or teacher for account management purposes (e.g. resetting a password or removing an account). • We do not share student data with any other schools, organisations, or third parties. • Schools can request the deletion of student accounts and associated data at any time by contacting us.

ReWriteAble uses secure infrastructure provided by Base44 to store and manage application data. • User data is hosted on secure servers located in the United States, using leading cloud providers including Google Cloud Platform (GCP) and Render • Data is encrypted in transit (TLS) and at rest • Infrastructure follows recognised international security standards, including SOC 2 Type II and ISO 27001 • Access to data is restricted through secure authentication, access controls, and internal security procedures Where AI functionality is used, written content is processed through trusted providers including OpenAI and Anthropic. ReWriteAble does not use student data to train AI models. Base44 and its AI providers are contractually bound to ensure that user data is not used for training or model improvement, and is processed solely to provide the service. Appropriate safeguards, including data processing agreements and international data transfer protections, are in place. ReWriteAble is built on infrastructure that undergoes independent security auditing and certification, including SOC 2 Type II and ISO 27001 standards.

We do not sell user or student data — ever. We only share information where strictly necessary to operate the service: • Secure hosting providers — to store and deliver the platform. • AI processing services — to generate rewritten text from submitted content. These services are bound by confidentiality obligations and do not retain your data. • Legal compliance — if required by Australian law or a court order. We do not share personal information with advertisers, data brokers, or unrelated third parties.

ReWriteAble is designed to be used by schools and students, including younger students. • Student accounts are created and managed by schools and teachers, not by students directly. • We collect only the minimum information necessary for students to use the service (name and username). • Schools are responsible for obtaining any required parent or guardian consent before creating student accounts. • We do not knowingly collect personal information from children outside of a school-managed context. • Parents or guardians who have questions about their child's data should contact their school in the first instance, or contact us directly.

Users and schools have the right to request deletion of accounts and data. • Individual users can request account deletion through their profile settings or by contacting us. • Schools can request the deletion of student accounts and all associated data at any time. • To make a deletion request, please contact us at the email address below. We will process deletion requests promptly, usually within 30 days.

ReWriteAble offers optional paid subscriptions processed securely through Apple's App Store or Stripe. We do not store or have access to your payment details. All payments are handled directly by Apple or Stripe, our PCI-compliant payment partners. We may receive limited information (such as subscription status) to enable access to premium features.

If you have any questions about this Privacy Policy, or would like to make a request regarding your data or a student's data, please contact us: AP DAYA Group Pty Ltd Email: hello@rewriteable.app Queensland, Australia We aim to respond to all privacy enquiries within 5 business days.