Loading…
Loading…
Legal
Alucinari (ABN 83 375 508 206) trading as CramClass (“CramClass”, “we”, “us”, “our”) is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”). This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights in relation to it.
Last updated: June 2026
For optional AI lesson recap assistance, read our AI lesson recap privacy notice.
We collect the following categories of personal information:
All users: Full name, email address, phone number, date of birth, account login credentials, profile photo (optional), session history, review content, payment transaction records.
Tutors only: ATAR score, uploaded ATAR result document, Working With Children Check number and state, government-issued photo identity document, bank BSB and account number, university name and degree, school type attended.
Students and Parents only: Student year level, school type targeted, subjects of interest, parent or guardian name and relationship confirmation.
Automatically collected: IP address, browser type and version, device type, pages viewed, session durations, and general usage data collected via cookies and analytics tools.
We collect personal information directly from you when you register an account, complete your profile, submit a tutor application, make or receive a booking, or communicate with us.
We also collect information automatically through your use of the Platform via cookies, server logs, and analytics tools.
We use your personal information for the following purposes:
We rely on the following bases for processing personal information under the Privacy Act 1988 (Cth):
We do not sell your personal information to any third party.
We share personal information only with the following categories of recipients and only to the extent necessary:
We do not share your personal information with third parties for marketing purposes.
CramClass treats personal information about individuals under 18 with heightened care. We collect only the minimum information necessary to operate the Platform. We do not use children’s personal information for advertising or profiling purposes. Access to a student’s account information is restricted to the parent or guardian who created the account, and to CramClass staff for operational purposes.
Where a parent or guardian requests deletion of a student’s personal information, we will comply within thirty (30) days subject to any legal retention obligations.
Your personal information is stored on a managed PostgreSQL database. Uploaded documents are stored by Google Cloud Storage using encrypted storage.
CramClass implements reasonable technical and organisational security measures including HTTPS encryption, access controls, and role-based data access restrictions to protect your personal information against unauthorised access, use, disclosure, or destruction.
No method of transmission or storage is completely secure. In the event of a data breach that is likely to result in serious harm, CramClass will comply with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth) and notify affected individuals and the Office of the Australian Information Commissioner where required.
CramClass uses session cookies solely for the purpose of maintaining your login session. We do not use third-party advertising cookies or tracking pixels. We may use aggregate, anonymised analytics data to understand how the Platform is used and to improve it.
You may disable cookies in your browser settings, but doing so may affect your ability to use the Platform.
We retain your personal information for as long as your account is active. Upon account closure, we will delete or de-identify your personal information within thirty (30) days, except where retention is required by law (for example, financial transaction records required to be retained under the Corporations Act 2001 (Cth) or taxation laws) or where retention is necessary to resolve outstanding disputes.
Tutor credential documents (ATAR, WWCC, identity) are deleted within thirty (30) days of account closure unless they are the subject of an ongoing investigation.
Under the Privacy Act 1988 (Cth), you have the right to:
To exercise any of these rights, contact us at privacy@cramclass.com. We will respond within thirty (30) days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.
Some of our third-party service providers (including Stripe and UploadThing) process data outside Australia. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the Australian Privacy Principles under APP 8.3.
For privacy enquiries or complaints: privacy@cramclass.com
For general enquiries: hello@cramclass.com
For legal matters: legal@cramclass.com
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email at least fourteen (14) days before the changes take effect. The current version will always be available at cramclass.com/privacy.