Legal

Privacy Policy

Effective date: 18 April 2026 · Last updated: 18 April 2026

EurekaWrite is an Australian service designed for Year 3–6 students preparing for the NSW Selective High School Placement Test. This policy explains what personal information we collect, how we use it, who we share it with, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We are especially careful with children's information: accounts are created and managed by a parent or guardian, and students are identified by a nickname only.

1. Who we are

EurekaWrite ("EurekaWrite", "we", "us") operates the website at eurekawrite.com and the AI essay scoring service provided through it (the "Service"). EurekaWrite is operated from Australia and is subject to Australian privacy law.

For any privacy matter, you can contact us at eurekawrite@haorix.com.

2. What personal information we collect

Short answer: The parent or guardian's email address, a nickname for the student (not their real name), the student's year level, the essays they choose to submit, and basic technical data needed to run the website.

We collect only what we need to deliver and improve the Service.

Information you provide

Parent/guardian email address. Used to identify the account, save essays and results, and send service-related messages. We do not require a password; access is through the email associated with the account.
Student profile: a nickname (not the student's real name) and a year level (e.g. Year 5). We deliberately do not ask for the student's full name, school, address, phone number or date of birth.
Essay submissions. The text of each essay you submit for scoring, together with the task type (e.g. narrative, persuasive) and year level you select. Essays may contain personal information if the student writes about themselves; we ask that students avoid including identifying details such as their full name, school name, or address in their essay text.
Correspondence. Emails you send us, and anything you choose to include in them.

Information collected automatically

Technical data that is unavoidable when using any website: your IP address, browser type, device type, referring URL and timestamps of requests. Our hosting providers process this data in server logs to operate the site and protect it from abuse.
Usage analytics. We use Vercel Web Analytics, a privacy-friendly analytics tool that collects aggregated, cookie-less usage data (such as page views and referrers). It does not build cross-site user profiles.

Information we do not collect

We do not ask for students' real names, dates of birth, school names, photographs, or voice recordings.
We do not use tracking cookies, advertising cookies or social-media pixels.
We do not sell personal information to anyone.

3. Children and parental consent

Short answer: EurekaWrite is intended for children aged 8–12, but accounts must be created and managed by a parent or guardian. Children must not create an account on their own.

Our target users are Year 3–6 students (typically aged 8–12) preparing for the NSW Selective High School Placement Test. Because our users are children, we take extra care with their information.

A parent or guardian must create the account. By creating an account, the parent or guardian confirms that they are at least 18 years old and that they consent to EurekaWrite collecting, storing and processing information about their child as described in this policy.
The parent or guardian controls the account. The email address on the account belongs to the parent/guardian. They can review, export or delete the student's essays at any time by contacting us (see section 9).
Students are identified by nickname only. We ask parents to choose a nickname rather than the student's real name.
We do not knowingly collect information directly from a child without the involvement of a parent or guardian. If you believe a child has created an account without a parent's knowledge, please contact us and we will delete the account promptly.

4. How we use your information

We use personal information only for the following purposes:

To provide the Service — i.e. to score essays, show results, and let you track progress over time.
To maintain your account and save the essays and scores associated with it.
To improve the quality and accuracy of our scoring models, for example by reviewing how scores behave across a range of essays. We do this in aggregate and, where practical, on de-identified data.
To respond to your questions, feedback or complaints.
To protect the Service against misuse, fraud or abuse (e.g. rate limiting and abuse monitoring).
To comply with our legal obligations in Australia.

We do not use personal information for advertising, profiling or automated decision-making that produces legal effects about a student.

5. Who we share information with (including overseas)

Short answer: We use a small number of trusted service providers to host the website, store the database, and run the AI scoring. Some of these providers are based in the United States, which means your information is disclosed overseas (APP 8).

We do not sell or rent personal information, and we only share it with service providers who help us operate the Service. As at the effective date of this policy, the main recipients are:

Provider	Purpose	Country
Vercel Inc.	Hosting the EurekaWrite website and first-party web analytics.	United States
Render Services, Inc.	Hosting the application backend and PostgreSQL database (which stores account details and essay submissions).	United States (Oregon)
OpenAI, L.L.C.	AI model used to score essays. Essay text is sent to OpenAI's API for each scoring request.	United States

Cross-border disclosure (APP 8). Because these providers are based in the United States, using EurekaWrite involves disclosing your information overseas. By creating an account, you acknowledge that once information is disclosed to an overseas recipient, that recipient will be governed by the laws of its country rather than Australian privacy law. We take reasonable steps to ensure that each provider handles information consistently with the APPs, including by relying on their published privacy and security practices and industry-standard contractual terms.

We may also disclose information:

When required by law, court order or a lawful request from a government authority.
To protect our legal rights, or to investigate or prevent fraud or misuse of the Service.
To a successor entity if EurekaWrite is sold, merged or restructured, subject to the acquirer agreeing to honour this policy.

6. How essays are processed by AI

When you submit an essay for scoring:

The essay text, the year level, and the task type are sent to OpenAI's API. We do not send OpenAI the parent's email address or the student's nickname.
OpenAI returns a structured score and feedback, which we store in our database alongside the essay.
Under OpenAI's current API terms, data submitted through the API is not used to train their models. OpenAI may retain the data for a short period (generally up to 30 days) to monitor for abuse. We are not in a position to guarantee OpenAI's practices, and we recommend reviewing their privacy information directly.
Scoring is probabilistic and approximate. Scores and feedback are intended as a study aid and should not be relied on as a substitute for assessment by a qualified teacher or examiner. See the Terms of Service for more.

7. Where we store it and how we secure it

Account data and essay submissions are stored in a managed PostgreSQL database hosted in the United States (Oregon) by Render. We use commercially reasonable technical and organisational measures to protect personal information, including:

Encryption in transit (TLS / HTTPS) between your browser, our servers, and third-party providers.
Storage on managed infrastructure with provider-level encryption at rest.
Access controls so that only authorised people and systems can reach the database.
Minimisation: we do not store students' real names, addresses, schools or ages.
Logging that deliberately excludes the full text of essays and parent email addresses from operational logs.

No system is perfectly secure. If we become aware of a data breach that is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected users, as required by the Notifiable Data Breaches scheme.

8. How long we keep your information

Short answer: Essays are retained for up to 30 days by default. Account details (email, nickname, year level) are kept for as long as the account is active, and deleted when you ask us to close the account.

Essay submissions: kept for up to 30 days by default so you can view your history, and then scheduled for deletion. You can ask us to delete an essay sooner at any time.
Account details (parent email, student nickname, year level, score history): kept for as long as the account is open. If you ask us to close the account, we will delete or de-identify your account data within 30 days, except where we are required to keep records for a longer period by law.
Server and analytics logs: retained for a short operational period (generally up to 90 days) for security and troubleshooting, then deleted or rotated out.

9. Your rights: access, correction and deletion

Under the Australian Privacy Principles you have the right to:

Access the personal information we hold about you or your child (APP 12).
Correct information that is inaccurate, out of date, incomplete or misleading (APP 13).
Delete essays, your student profile, or the whole account at any time.
Withdraw your consent for future processing by closing the account.

To make any of these requests, email us at eurekawrite@haorix.com from the parent/guardian email address on the account. We will respond within a reasonable time, usually within 30 days. We may ask you to verify that you are the parent or guardian on the account before acting on the request.

10. Cookies, local storage and analytics

EurekaWrite does not use tracking cookies or advertising cookies. We use the following client-side technologies:

Browser localStorage on your own device to remember that you are signed in, which student profile is active, and whether your free trial has been used. This data stays in your browser and is not sent to third parties. You can clear it from your browser settings at any time.
Vercel Web Analytics, a cookieless, aggregate usage analytics tool. It collects information such as page path, referrer and approximate location (country/region) but does not build a profile of individual users across sites.

11. Complaints

If you believe we have breached the APPs or mishandled your information, please contact us first at eurekawrite@haorix.com so we can investigate and try to resolve the issue. We aim to acknowledge complaints within 7 days and respond substantively within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Phone: 1300 363 992

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify account holders by email. Continued use of the Service after an update constitutes acceptance of the revised policy.

13. Contact us

For any question about this policy or about how we handle personal information:

Email: eurekawrite@haorix.com
Website: eurekawrite.com

This policy is written in plain English alongside the legal references so that both parents and students can understand it. It does not replace legal advice. If you have a specific legal question, please consult a qualified Australian lawyer.