Privacy Policy

Last updated 13 June 2026

RedTexta (“we”, “us”, “our”) generates practice papers for Australian senior-secondary students and give AI-powered marking and feedback on their completed papers and responses. This policy explains what personal information we collect, how we use and protect it, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Many of our users are under 18, so we collect as little information as we can and explain things plainly. If you’re a parent or carer, this policy also covers your child’s use.

Information we collect

• Account details — your email address (this is your login), and the state and subject you choose.
• Your work — answers you type when sitting a practice paper online, essay responses you submit, and photos of completed printed papers (which may contain your handwriting, name, or other details you include), plus the feedback we generate, including band estimates and your feedback history.
• Your results and progress — scores, bands, hints used and per-topic results for the practice papers you complete. We use this history to show you your progress and to build your next paper around the question types you find hardest (that's the point of the product). It contains results, not the work itself.
• Parent/carer links — if you invite a parent or carer, their email address and the link between your accounts.
• Consent records — confirmation that the work is your own and that you’re happy to receive feedback, with a timestamp.
• Usage information — how much of your free allowance you’ve used and when you submit.
• Payment information — if you subscribe, our payment processor (Stripe) handles your card details. We don’t see or store full card numbers — only a customer reference and your subscription status.
• Technical information — your IP address and basic device/browser information, used to keep the service secure and prevent abuse. In our logs we store a one-way hashed version of your email, not the address itself.
• Information on your device — we use your browser’s local storage to remember your email, state, subject, and a list of your recent feedback, so you don’t need a password. This stays on your device.

How we use your information

• To read and mark your work and return feedback to you.
• To manage your account, your free allowance, and (if you subscribe) your subscription.
• To email you your feedback and a link to view it.
• To keep the service secure, prevent misuse, and meet our legal obligations.

We do not sell your personal information, we do not use it for advertising, and we do not use your submitted work to train AI models.

AI processing of your work

To mark your papers and generate feedback, your submitted work is processed by third-party AI services:

• AI marking uses Anthropic’s Claude models, accessed through DigitalOcean’s inference service.
• Handwriting recognition (OCR) on photos uses Microsoft Azure AI (Document Intelligence).

These providers process your work to return the result to us, under their own terms; we choose providers whose terms do not permit using API submissions to train their general models. Some of this processing may happen on servers outside Australia (see “Overseas disclosure”).

Who we share information with

We use a small number of trusted service providers (“processors”) to run RedTexta. They may access personal information only to perform services for us:

• DigitalOcean — hosting and AI inference. Our application and database are hosted in DigitalOcean’s Sydney (Australia) region.
• Microsoft Azure — handwriting recognition on submitted photos.
• Stripe — payment processing for subscriptions.
• Postmark — sending you emails (such as your feedback link).

We may also disclose information where required by law, or to protect our rights, our users, or anyone’s safety.

Overseas disclosure

Our application and database are hosted in Australia. However, some processors — particularly our AI and email providers — may store or process information overseas, including in the United States. By using RedTexta you consent to this disclosure. We take reasonable steps to ensure these providers handle your information consistently with the APPs.

How long we keep it

• Feedback pages (the marked-up view of your work, including photos of your pages) are automatically deleted after about 90 days.
• One-time sign-in links expire after about 7 days; one-time codes within minutes.
• Your results history (scores and bands — not the work itself) is kept while your account is active, so your progress and personalised papers keep working.
• Your account information is kept while your account is active. You can delete everything at any time (see “Your rights”).

Security

We protect your information with measures including encrypted connections (HTTPS), access controls, hashed identifiers in our logs, and limiting who can access data. No system is perfectly secure, but we take reasonable steps to protect your information, and if a serious data breach occurs we’ll notify you and the regulator as required by law.

Children and young people

RedTexta is designed for senior-secondary students, some of whom are under 18. We collect the minimum information needed to provide feedback. If you’re under 18, we encourage you to involve a parent or carer — who can also be linked to your account to help manage it. If you believe a child has given us information without appropriate consent, contact us and we’ll address it.

Your rights

Under the Australian Privacy Principles you can ask us to:

• access the personal information we hold about you;
• correct it if it’s wrong;
• delete your account and data;
• or make a complaint about how we’ve handled your information.

You can delete your account and all your data yourself at any time — sign in to your portal page and choose “Delete all my data”. Deletion removes your work, feedback, results history, carer links and account. Or email [email protected] and we’ll respond within a reasonable time. If you’re not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Cookies and local storage

We don’t use third-party advertising or tracking cookies, and we don't use analytics trackers. We use your browser’s local storage (described above) and secure, HttpOnly session cookies: one that signs you in to your papers and progress pages after you click an email link, and one for our staff admin area.

Changes to this policy

We may update this policy from time to time. We’ll post the new version here and update the “last updated” date; significant changes will be highlighted.

Contact

RedTexta — [email protected]. See our Contact page for more ways to reach us.