We collect what we need to personalise your study experience — your name, email, subjects, learning profile, and study activity. We never sell your data. Your mistakes stay private from your parents (they see effort and progress, not answers). AI helps generate your study content, which means some of your inputs are processed by our AI provider. You can ask us to delete everything, any time.
This policy is written to be actually readable, because privacy policies you can't understand aren't really consent.
01Who we are
Knowhere is an Australian study platform for senior secondary students, operated by Gigantor Studios Pty Ltd (ABN 86 161 340 790), trading as knowhere labs ("we", "us"). This policy explains what personal information we collect, why, and what your rights are. It applies to our app, website, and emails.
Questions or requests: hello@knowhere.me
02What we collect
Account information — your name, email address, and password (stored securely as a cryptographic hash — we can't see it).
Learning profile — your selected subjects, your Enneagram-style learning type from our onboarding quiz, your representation-style preference, and (if you choose to share it) information about how your brain works, such as ADHD, ASD, or dyslexia profiles.
Neurodivergence information may be sensitive information under the Privacy Act 1988 (Cth). We only collect it with your consent, only use it to personalise how content is presented to you, and you can remove it at any time in Learning Preferences.
Study activity — topics you open, concepts you mark as understood, flashcard ratings, quiz answers, "get unstuck" requests, streaks, and time-of-use patterns. We use this to power features like your dashboard and the Gap Map.
Parent accounts — a parent's name and email, and the link between a parent account and their student's account.
Waitlist — if you join the waitlist we collect your email, whether you're a student, parent or teacher, your state and year level, and optionally your first name, your school (teachers) and which plan you're curious about. We also note which page you signed up from. We use this to send you a small number of launch emails and to tell you when knowhere is live for your state. Unsubscribe any time; we delete waitlist details within 90 days of launch unless you've opened an account.
Payments — handled by Stripe. We never see or store your card number. Stripe's privacy policy applies to payment data.
Technical data — standard logs (IP address, browser type) for security and debugging.
Analytics — we use Umami (privacy-focused, cookie-free) to count page views and which features get used. It doesn't track you across other sites and we don't see who you are from it.
03What we do NOT collect
- We don't track your precise location.
- We don't use your data for targeted advertising, and we don't show third-party ads.
- We don't sell personal information to anyone. Ever.
04How we use your information
- To provide and personalise the service (that's the whole point of Knowhere)
- To generate AI study content tailored to your profile
- To show parents a limited progress summary (see section 6)
- To process subscriptions and send service emails (receipts, invites, important notices)
- To send optional study reminders and updates — only with consent, and every email has an unsubscribe link (Spam Act 2003 compliant)
- To improve the product using aggregated, de-identified usage patterns
05AI processing
Knowhere uses AI (currently Anthropic's Claude models) to generate study content, explanations, and custom concepts. When you use these features, relevant inputs (e.g. the topic, your learning profile type, your question) are sent to our AI provider to generate a response. We don't send your name or email with these requests. AI providers we use do not train their models on this data under our API terms.
Automated personalisation: features like the Gap Map use your study activity to automatically estimate which topics need attention. These estimates only affect what we suggest you study — they are never shared as grades, never shown to parents in detail, and never used to make decisions with legal or similarly significant effects.
06Parents and students — who sees what
Knowhere is built on a simple rule: parents see effort, not errors.
Shared with a linked parent: progress and coverage per subject, current topic names, streaks, days active, card review counts, and credit balances.
Never shared with a parent: your flashcard answers, quiz mistakes, "get unstuck" requests, chat content, or Daily Distractor activity.
If your parent created your account, they consented to data collection on your behalf when they set up the invite. We show you what's collected and shared during onboarding, and this policy is always available in the app.
07Children and young people
Most of our users are 16–18. We design for this:
- Plain-language privacy information (this document)
- No targeted advertising to anyone, especially not minors
- Data minimisation — we collect only what the features need
- We are following the development of the OAIC's Children's Online Privacy Code and intend to comply with it when it commences.
Users under 15 require a parent or guardian to create their account.
08Who we share data with (processors)
We share limited data with service providers who help us run Knowhere:
| Provider | Purpose | What they process |
|---|---|---|
| Anthropic | AI content generation | study queries + learning profile type (no name/email) |
| Stripe | Payments | payment and billing details |
| Railway | Hosting our servers | all service data (stored in Singapore) |
| Umami | Website analytics | anonymised page-view data, no cookies |
| Resend | Sending our emails and holding the waitlist | your name, email address, waitlist answers, and email content (stored in Japan) |
| Cloudflare | DNS and inbound email routing | emails you send to us |
| Klipy | GIFs in the app | GIF search requests, routed through our server (no personal data) |
We require processors to protect your data. We do not share data with anyone else except where required by law.
09Storage, security and overseas disclosure
Some of our providers are overseas. Our website and app run on Railway in Singapore. Waitlist and email contacts are stored with Resend in Japan, and our emails are sent from there. AI requests go to our AI provider in the United States. Payments go to Stripe (Australia/US). We choose providers with strong security terms and take reasonable steps so your information is protected as the Australian Privacy Principles require (APP 8).
Passwords are hashed with bcrypt. Access is limited and authenticated. Some preferences and study state are also stored locally on your own device (browser localStorage) and never leave it unless synced.
No system is perfectly secure. If a data breach is likely to result in serious harm, we will notify affected users and the OAIC as required by the Notifiable Data Breaches scheme.
10Retention and deletion
We keep your data while your account is active. You can:
- Delete your account — we delete your personal information within 30 days, except records we must keep by law (e.g. payment records, kept 7 years for tax purposes).
- Export your data — email us and we'll send you what we hold.
Deleting a student account also removes the data visible to any linked parent.
11Your rights
Under the Privacy Act, you can ask us to access, correct, or delete your personal information: hello@knowhere.me. We'll respond within 30 days.
If you're not happy with how we handle it, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au · 1300 363 992
13Changes
If we make material changes to this policy, we'll notify you by email or in the app before they take effect. Continued use after that means you accept the updated policy.
Also see our Terms of Use.