1. Overview
This Privacy Policy describes how FOVA Pty Ltd (ABN 68 690 003 804) (“we”, “our” or “us”), as the operator of WriteLeap (the “Service”), handles personal information in connection with the Service, including the WriteLeap website, web application, related mobile or tablet experiences where offered, and support services.
WriteLeap is an adaptive English writing-practice and learning-support service designed primarily for Australian students in Years 3–10. Features may include diagnostic writing, weekly writing practice, skill exercises, writing prompts, AI-assisted feedback, revision activities, mechanics checks, progress tracking, skill and level estimates, and personalised practice plans.
Because the Service is intended for school-age students as well as parents and guardians, we aim to use privacy-protective defaults, collect only information reasonably necessary for the Service, and give parents and guardians practical ways to manage a child’s information.
Where the Privacy Act 1988 (Cth), the Australian Privacy Principles (“APPs”), a registered privacy code, or another privacy law applies to us, we handle personal information in accordance with those requirements. We may also choose to apply protections described in this Policy more broadly than legally required.
2. Parent Accounts and Student Profiles
WriteLeap may allow a parent, legal guardian, teacher, school or other authorised adult to create or manage an account and one or more student profiles. A student profile is used to personalise writing practice, save learning history and show progress.
Depending on the features available, an authorised adult may be able to view a student’s assigned tasks, submitted writing, attempts, revisions, feedback, scores, mechanics findings, skill observations, level estimates, progress history and personalised learning plan.
3. Information We Collect
The information we collect depends on how you use WriteLeap and which features are enabled. It may include:
- Account information: name, email address, account identifier, authentication information, account status and communication preferences.
- Student profile information: a student’s name or nickname, school year level, profile identifier, learning goals, target level and settings used to personalise practice.
- Writing and learning information: writing submissions, drafts, revisions, exercise answers, task attempts, diagnostic responses, assigned prompts, feedback, scores, category results, mechanics results, skill evidence, progress events, level estimates and practice plans.
- Usage and technical information: IP address, browser or device type, operating system, language, approximate time zone, session/request timestamps, feature interactions, error or crash information, security logs and anti-abuse signals.
- Subscription and transaction information: plan type, subscription status, transaction or payment identifiers, payment confirmation, renewal information, refund or chargeback status and limited billing-support data.
- Support and communications: messages, feedback, bug reports, attachments and other material you send when contacting us.
When payments are handled by a payment processor, we do not intend to store full payment-card numbers or card security codes on our own systems.
4. Student Writing and Learning Data
WriteLeap processes educational data to provide personalised writing practice. This may include the prompt and instructions associated with a task, the student’s response, repeated attempts and revisions, mechanics information, writing-quality observations, scoring data, confidence or evidence information, skill-development records and practice-plan information.
WriteLeap may keep a history of first drafts, revised drafts and repeated attempts so that students and authorised adults can review learning progress over time. Some results may be produced by AI while other results are calculated, validated, combined or limited by WriteLeap’s own rules.
We may use aggregated or appropriately de-identified information to analyse Service performance, improve educational features and understand broad learning patterns, provided the information is not reasonably capable of identifying an individual student.
We do not sell identifiable student writing, student profiles or learning histories.
5. AI-Assisted Processing and Automated Learning Decisions
WriteLeap uses automated systems, including artificial intelligence (“AI”) and predefined scoring or progression rules, to help analyse student writing and provide educational feedback. Depending on the activity, automated processing may contribute to feedback, mechanics checks, revision suggestions, scoring information, skill observations, level estimates and recommended practice.
5.1 Information Sent for AI Processing
Some educational processing may be performed by third-party AI and language-processing service providers acting on our behalf.
To provide relevant educational feedback, we may send information such as the student’s writing or exercise response, the writing prompt or task instructions, the student’s school year or appropriate learning level, the skill or writing criteria being assessed, and relevant feedback, revision information or learning context where needed for the activity.
We seek to minimise the information sent for AI processing. We do not intentionally include direct account identifiers such as the student’s name, email address, parent or guardian email address, account password or payment information in AI requests unless technically necessary for a specific service function.
Students and parents or guardians should avoid including unnecessary personal or sensitive information within writing submissions themselves, as information entered within a student’s writing may form part of the content processed to provide feedback.
5.2 AI Model Training
We do not use student writing or personal information to train our own general-purpose AI models.
We also configure and use our third-party AI service providers so that student submissions and personal information provided through WriteLeap are processed to deliver WriteLeap functionality and are not used by those providers to train their general-purpose AI models for their own purposes, subject to the provider arrangements and applicable law.
We do not permit identifiable student writing or personal information to be used by our AI service providers for targeted advertising or unrelated commercial purposes.
Student writing and learning information may be used within WriteLeap to provide feedback, maintain learning history, measure progress, personalise practice and improve the operation of WriteLeap as described in this Privacy Policy. Where information is used for broader analytics or Service improvement, we seek to use aggregated or appropriately de-identified information where reasonably practicable.
5.3 Automated Educational Results
WriteLeap may apply its own rules to validate, combine, calculate or limit AI-generated results before they are displayed or used for progress tracking.
AI-generated feedback and automated scoring can make mistakes. WriteLeap scores, level estimates and feedback are educational indicators and may differ from the judgement of a teacher, examiner or official marking authority. A student may be allowed to revise or repeat activities, and parents or guardians may contact us if they believe a profile, result or learning record is materially incorrect.
6. How We Use Information
We may use information to:
- create and manage accounts and student profiles;
- deliver diagnostic, weekly-writing, skill-practice and revision activities;
- generate feedback, mechanics findings, scoring information and skill observations;
- personalise difficulty, task selection and learning plans;
- save attempts and show writing or skill progress over time;
- authenticate users and protect accounts;
- process subscriptions and provide billing or customer support;
- send essential service, security, billing and policy communications;
- monitor performance, diagnose errors and improve reliability;
- detect, prevent and investigate fraud, abuse, security incidents and violations of our Terms;
- comply with legal obligations and lawful requests; and
- improve WriteLeap using aggregated, statistical or appropriately de-identified information.
We do not use identifiable student information for behavioural or targeted advertising.
7. Children’s Privacy
WriteLeap is designed for students, including children. A parent, legal guardian, school or other authorised adult should create, authorise or supervise a child’s use where required by law or by the way the Service is configured.
We seek to collect only information reasonably necessary to provide the educational Service. We do not intentionally design WriteLeap to encourage children to publicly disclose personal information, create public student profiles, or interact with unknown members of the public.
For child users, we do not intentionally:
- sell personal information;
- use student writing for targeted advertising;
- create advertising profiles based on student learning activity;
- make student writing publicly searchable through WriteLeap; or
- allow third-party AI providers to use identifiable student submissions for unrelated general-purpose model training under our intended service arrangements.
Parents or guardians may contact us to ask what personal information we hold about a child, request correction, request deletion where applicable, or raise a concern about the child’s use of WriteLeap.
Australian children’s online privacy requirements continue to develop. We will update our practices and this Policy where necessary when new binding requirements, including any applicable Children’s Online Privacy Code obligations, take effect.
9. Payments and Subscriptions
Paid subscriptions may be processed by third-party payment providers, including Stripe or another provider shown at checkout. Those providers may collect payment-card and billing information directly under their own privacy policies and security standards.
WriteLeap may receive and retain limited transaction information, such as subscription status, product or plan, transaction identifiers, renewal dates, payment success or failure status, refunds and chargebacks, so that we can provide paid access and customer support.
11. Retention and Deletion
We retain information for as long as reasonably necessary to provide the Service, maintain learning history requested by the account holder, meet legal or accounting obligations, resolve disputes, prevent fraud, protect security and enforce agreements.
Student writing history may be retained while the relevant student profile or account remains active so that progress, revisions and previous attempts can be reviewed. When an account or profile is deleted, we will delete or de-identify associated personal information within a reasonable period, subject to backups, technical constraints and information that we are permitted or required to retain by law.
Aggregated or de-identified information that no longer reasonably identifies an individual may be retained for analytics, security or Service-improvement purposes.
12. Security
We use reasonable technical and organisational measures designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include access controls, encrypted network connections, authentication controls, logging, backups and security monitoring.
No online service can guarantee absolute security. Users should protect account credentials, use strong passwords where passwords are offered, and notify us promptly if they suspect unauthorised account access.
13. Overseas Processing and Transfers
Some service providers used by WriteLeap may store or process information outside Australia. This can include cloud, AI, email, security, support and payment providers whose infrastructure may operate in multiple countries.
Where Australian Privacy Principle 8 or another cross-border data-transfer rule applies, we will take reasonable steps required by applicable law in relation to overseas recipients and the protection of personal information.
Because global service providers can change infrastructure and subprocessors over time, this Policy does not promise that all information will remain exclusively in one country. We will provide additional country-specific information where required by law or where a particular WriteLeap service arrangement makes that information material.
14. Access, Correction and Other Privacy Rights
Subject to applicable law, you may ask us to:
- provide access to personal information we hold about you or a child profile you are authorised to manage;
- correct inaccurate, out-of-date, incomplete or misleading personal information;
- delete personal information where deletion is available and not prevented by a legal or legitimate retention requirement;
- stop or restrict certain processing where applicable law gives you that right; or
- provide information about how a privacy request has been handled.
We may need to verify identity, authority or your relationship to a child profile before acting on a request. We may decline or limit a request where permitted by law and will provide an explanation where required.
15. Privacy Complaints
If you believe we have mishandled personal information or breached an applicable privacy obligation, please contact us using the details below and describe the concern. We will review the complaint and respond within a reasonable period.
Where the Australian Privacy Act applies and you are not satisfied with our response, you may have the right to complain to the Office of the Australian Information Commissioner (OAIC) or another regulator with jurisdiction.
16. Schools and Other Organisations
If WriteLeap is provided through a school, tutoring provider or other organisation, that organisation may control certain account information or determine how student profiles are created and managed. Separate contractual or privacy terms may apply to organisational use.
Where we process personal information on behalf of an organisation, our responsibilities may depend on the applicable agreement, the organisation’s instructions and applicable law. Parents and students may sometimes need to direct a request to the organisation first.
17. Third-Party Services
WriteLeap may integrate with or rely on third-party services such as payment processors, email providers, authentication services, hosting providers, analytics or diagnostics tools and AI-processing providers. Their handling of information may also be governed by their own terms and privacy policies.
We select providers for operational purposes and seek to use appropriate contractual, configuration and security controls, but we do not control every independent act or service offered by a third party.
18. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in law, the Service, our service providers, technical operations or privacy practices. The updated version will show a new “Last updated” date.
Where required by law, or where a change materially affects how we handle personal information, we will provide additional notice or obtain consent before the change takes effect.
19. Contact Us
If you have a privacy question, access/correction request, deletion request or complaint, contact us:
Email: contact@writeleap.app