FocusPrep

Your learning data should help you learn — and nothing else.

The short version for learners and families

  • We collect the account and learning information needed to run FocusPrep and show progress.
  • We do not sell personal information or use it for targeted advertising.
  • A parent or carer should create and manage the account for a child.
  • You can ask to access, correct or delete personal information by contacting kedarshenoy@gmail.com.

1. Who we are

FocusPrep is an educational service operated in New South Wales, Australia. This policy explains how we manage personal information when learners, parents and carers use the FocusPrep website and learning experiences.

2. Information we collect

Depending on how the service is used, we may collect:

  • Account details: parent or carer email address, learner name, authentication identifiers and account settings.
  • Google sign-in details: when a parent or carer chooses Google sign-in, Google provides FocusPrep, through Supabase Auth, with the adult account's name, email address, basic profile image (if present) and an authentication identifier. FocusPrep uses these details only to create and authenticate the responsible adult's account and secure its sessions. Supabase stores and processes this account information on FocusPrep's behalf. FocusPrep does not receive the Google password or request access to Gmail, Drive, Calendar, contacts or other sensitive Google services.
  • Learner profile information: school year, learning goals and preferences entered into the profile.
  • Learning records: activities opened, responses, first attempts, use of help, revisions, progress, mastery estimates and generated reports.
  • AI interactions: prompts, question context and responses when an AI-supported feature is used. Learners should not enter sensitive or unnecessary personal information into free-text fields.
  • Technical information: essential authentication cookies, browser or device information, timestamps, IP-derived service logs and diagnostic information needed for security and reliability.
  • Local device data: some activities save draft or progress state in browser storage so work can continue after a refresh.

We do not need a learner's home address, government identification, precise location, health information or school name to provide the core service. Please do not submit those details.

3. Why we use information

We use information only where reasonably necessary to:

  • create and secure accounts;
  • deliver learning activities and save progress;
  • provide learner and parent-facing feedback and reports;
  • operate AI-supported explanations or practice when enabled;
  • prevent abuse, investigate errors and maintain service security;
  • meet legal obligations and respond to valid requests.

We do not sell personal information, build advertising profiles or run targeted advertising for children.

4. Children and parent or carer involvement

FocusPrep is designed for school-aged learners. A parent or carer should create the account, supervise its use and help the learner understand this policy.

We aim to collect the minimum information needed, make privacy explanations understandable, avoid manipulative design and consider the child's best interests when making product decisions. If a child has provided information that a parent or carer believes should not be held, contact us and we will review or delete it where appropriate.

5. Service providers and overseas processing

We use trusted service providers to operate FocusPrep. They may process information on our behalf, including:

  • Supabase for authentication and database services;
  • Vercel for website hosting, delivery and operational logs;
  • configured AI providers, such as OpenAI, Google or OpenRouter, only when the relevant AI feature is enabled.

These providers may process information in Australia or overseas depending on the provider, account region and infrastructure used. We limit the information sent to what is needed for the feature and require providers to handle it under their contractual and security obligations.

We may also disclose information where required by law, to protect a person from serious harm, or as part of a business transfer subject to appropriate safeguards.

6. Storage, security and retention

We use access controls, authenticated sessions, encrypted network connections and provider security controls designed to protect information. No online service can promise perfect security.

We retain account and learning information while the account is active and for as long as reasonably needed to provide the service, resolve disputes, meet legal obligations and maintain security. We delete or de-identify information when it is no longer required, subject to backups and legal retention requirements.

7. Access, correction and deletion

A parent, carer or account holder may ask us to:

  • explain what personal information we hold;
  • provide access to it;
  • correct inaccurate information;
  • delete the account and associated information where we are not legally required to retain it.

Send the request to kedarshenoy@gmail.com. We may need to verify that the requester controls the account before acting.

8. Questions and privacy complaints

Contact kedarshenoy@gmail.com with a privacy question or complaint. Please describe the issue and the account involved without sending passwords or unnecessary sensitive information. We will investigate and respond within a reasonable time.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

9. Changes to this policy

We may update this policy when the service, providers or law changes. We will publish the revised date here and provide additional notice when a change materially affects how personal information is handled.