Privacy Policy

JEK Industries Pty Ltd (ABN 66 105 223 501) is responsible for the personal information handled through Captivate Exam Hub. For privacy enquiries, contact contact@captivateexamhub.com.au.

• Account information — your email address and authentication details, and the Australian state/jurisdiction you select.
• Study data — your subject selections, practice answers, assessment attempts, flashcard reviews, progress and readiness metrics.
• Content you enter — answers, notes and any text you submit, including text sent to AI features to generate questions, feedback or summaries.
• Technical and usage data — device, browser and log information, and data needed to operate, secure and improve the Service.
• Subscription and billing data — your plan, selected subjects and trial status. Card payments are processed by our payment provider; we do not store full card numbers.
• Fraud- and abuse-prevention signals — a device identifier (“fingerprint”), IP address and approximate location, and sign-in, session and device activity. We use these only to prevent trial abuse and unauthorised account sharing, and to keep accounts secure (see “Fraud and abuse prevention” below).

Please do not enter sensitive information (such as health details) into AI prompts or free-text fields. The Service is not designed to collect sensitive information, and the OAIC recommends against entering personal or sensitive information into AI tools unless there is a clearly controlled, compliant setup.

• To create and manage your account and authenticate you.
• To deliver revision content tailored to your subjects and jurisdiction.
• To generate AI-assisted questions, feedback and summaries you request.
• To measure progress, improve the Service, and keep it secure.
• To process subscriptions and payments, and manage free trials.
• To prevent fraud, trial abuse and unauthorised account sharing.
• To comply with our legal obligations.

You can browse our public pages without providing any personal information. If you choose not to provide the information we ask for at signup (an email address, your date of birth and your state), we cannot create an account for you or provide the Service; if you choose not to provide payment details, you can still use the free features but not a paid subscription.

Some features send the text you provide to a third-party AI provider to generate study content. Privacy obligations apply both to personal information you input into an AI system and to AI outputs that contain personal information.

• AI provider: AI features are served through the Lovable AI Gateway (Lovable Labs Incorporated), which routes requests to Google’s Gemini models (currently the Gemini 2.5 Flash family, including for image/handwriting recognition when you scan written work) and, for the practice-questions-from-your-notes feature only, to OpenAI’s models. Both are processed in the United States. We may change models over time to comparable providers; the current models are always listed on our AI change log at /help/ai-changelog.
• Storage of prompts/outputs: The study content you generate (questions, feedback, summaries and your answers) is stored in your account so you can return to it, and is kept until you delete it or your account is closed. We also log technical usage records for each AI request — the feature used, the model, token counts and cost — for billing, credit limits and abuse prevention; we keep these usage records for no longer than 24 months, after which they are deleted or de-identified. Our AI provider may retain request data briefly for operational and safety purposes. If a request is blocked by our safety filters, we keep a short excerpt with names and personal details removed, together with the reason, for 90 days so we can investigate — nothing else from ordinary AI use is kept beyond the results you choose to save.
• Choosing not to use AI: AI features are optional — every AI feature is something you actively invoke, and the core Service (questions, flashcards, progress tracking) works without them. Where an AI check is offered inside another feature (such as flashcard answer checking), it is off until you switch it on. To withdraw from AI features entirely, simply stop using them, or email contact@captivateexamhub.com.au and we will delete the AI-generated content stored in your account.
• Model training: We do not use your content to train or fine-tune AI models, and our AI provider does not use requests sent through the paid gateway to train its models.
• Offshore processing: AI requests are processed outside Australia, primarily in the United States. See “Overseas disclosure” below.

AI output may be incorrect or incomplete — see our AI Use & Accuracy notice.

We disclose personal information to the service providers who help us run the Service: Supabase (hosting, database and authentication), Lovable (web hosting and the AI gateway), Google (the AI models behind our AI features, and — only where you have accepted analytics cookies — Google Analytics, see section 11) and Stripe (subscription billing). Our Sub-processors page lists each provider, what data it handles, why, and where it is processed. We require them to protect your information and use it only for the purposes we specify. We do not sell your personal information, and we do not share it with advertising platforms. We may disclose information where required or authorised by law.

Some of our providers store or process data outside Australia. Our AI gateway and the underlying AI models process requests in the United States, and our payment provider (Stripe) processes billing data in the United States and Ireland. Our hosting, database and authentication provider stores your account and study data in its Australian region, with limited support and operational access from overseas. Where you have accepted analytics cookies, Google processes the associated usage data in the United States. Where information is disclosed overseas, we take reasonable steps to ensure it is handled consistently with the APPs.

If we plan to move where your account and study data is stored, or where our AI requests are processed, to a different country — including a change of cloud region or provider — we will notify you at least 30 days in advance, before the change takes effect.

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access, modification or disclosure, and to destroy or de-identify it when no longer needed. No system is completely secure, so we cannot guarantee absolute security.

To protect the Service and keep pricing fair, we use limited technical signals to detect and prevent abuse. This includes a device identifier (“fingerprint”), your IP address and approximate location, and sign-in, session and device activity. We use these to:

• stop the same person repeatedly claiming the free trial with different accounts;
• detect unauthorised account sharing — for example, by limiting how many devices and simultaneous sessions an account can use, and flagging sign-ins from very different locations in a short time; and
• protect accounts from unauthorised access.

We collect only what we need for these purposes, keep it for no longer than necessary, and do not use it to build advertising profiles. Where an account is flagged, we may ask you to verify a new device (for example, by email code) or temporarily limit access.

The Service may be used by minors. We rely on parent/guardian permission for users under 18 and apply extra care to their information. See Students Under 18 for details and how a parent or guardian can make a request.

You may request access to, or correction of, the personal information we hold about you by emailing contact@captivateexamhub.com.au. If you have a complaint about how we handle your information, contact us first; if you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

The Service uses cookies and similar browser storage that are necessary to keep you signed in, remember your preferences and operate the site. These are always on.

With your consent, we also use one third-party tool to understand how the site is used: Google Analytics 4 (Google). It sets analytics cookies and shares your IP address and your activity on our site with Google.

We ask before loading it. It stays off until you choose “Accept” on our cookie banner, and it never loads if your browser sends a Global Privacy Control (GPC) signal. You can change your choice at any time using the “Cookie preferences” link in the site footer, or by clearing your browser’s cookies.

Because the Service is used by minors, we deliberately minimise what this tool receives: we send standard, aggregate events only (such as a page view, sign-up, trial start or subscription). We never pass your name, email address, phone number or your answers to Google, and we do not use analytics to build advertising profiles of individual students. We do not use advertising pixels or trackers from advertising platforms on the Service.

Some pages carry tutorial videos hosted on YouTube (Google). Nothing is requested from YouTube while a video sits unplayed: until you press play we show only a still image served from our own site. Pressing play loads the player from youtube-nocookie.com, and from that point YouTube receives your IP address and sets its own cookies under Google’s privacy policy. Playing a video is entirely optional, and everything a video covers is also written out on the same page.

We also keep our own usage and error logs to operate, secure and improve the Service.

We may update this policy and will change the “last updated” date above. For material changes — for example, a new category of information collected, a new sub-processor, or a change to where your data is stored — we will notify account holders (by email or an in-app notice) before the change takes effect, and where a change significantly affects how your personal information is handled we will ask you to review and accept the updated policy before you continue using the Service.