Your family’s privacy

What gets saved?

Supabase handles the parent’s email and sign-in, and stores learner nicknames, year levels and progress. Google sign-in also uses the profile details Google shares with Supabase. Use an adult account. We do not ask for a child’s email, school, date of birth or address.

We send a submitted practice answer to our server for marking. We save the question ID, time, whether it was correct and whether a hint was used, rather than the answer itself. Anyone using a signed-in family session can see its learners. Sign out on shared devices.

The free pilot has no checkout, subscriptions, marketing signup or advertising features. The sample lesson saves progress on this browser. Your device also remembers the theme and whether Bee has greeted you before.

Who receives a question or a voice request?

Vercel hosts Thinkibee and processes requests to serve the site. Our Supabase project is in Sydney. Hosting, sign-in, AI and speech providers may also process information overseas; the whole service is not restricted to Australia.

Live AI is not configured for this version. No live tutor request is sent while it is off. Live tutoring uses the current message, up to six recent messages, school year and relevant practice question. The prompt does not add the account email or nickname. Anything a learner types can still be sent. Keep names and school details out of chat.

Read aloud uses the browser or device speech service for the prepared lesson text. A personalised hello, if enabled, sends greeting text including the nickname to Google Cloud Text-to-Speech only when played. Thinkibee does not record microphone answers. Listening to Bee never requires microphone access.

How long do we keep it?

• Chat stays in the open page; changing learner or reloading clears it. Thinkibee does not write chat transcripts or personalised greeting audio to its database.
• A daily cleanup removes practice results older than 365 days, household AI counts older than 30 days, support requests older than 90 days and consent history older than 365 days.
• Signed-out support requests include the adult reply email and are removed after 90 days. The parent account, learner profiles and current choices remain until deleted. Inactivity alone does not close the account. Downloaded exports remain wherever you saved them.
• Clearing browser data is separate from deleting cloud data. Provider security logs and backups have separate retention periods; we cannot give a verified expiry for every copy or promise immediate erasure from backups.

Parent choices

Checking sign-in…

Access, corrections and complaints

Export or delete family data, or contact Trainovation to ask for a correction, a copy, or a privacy review. A parent can use support even after withdrawing learning permission. If a privacy complaint remains unresolved, you can contact the Australian privacy regulator (OAIC).