Privacy Policy
Last updated: 7 May 2026
Diafani Technologies Pty Ltd (ABN 87 696 696 287), trading as YoTeach.me ("we", "us", "our"), is committed to protecting your privacy. This policy explains how we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Who we are
YoTeach.me is an AI-powered tutoring platform designed for Australian students in Years 6–10. The platform is operated by Diafani Technologies Pty Ltd (ABN 87 696 696 287), a company registered in Australia.
2. Information we collect
We collect only what is necessary to provide and improve our service:
- •Account information — Parent/guardian name, email address, and password when you register.
- •Student profiles — First name, year level, email address, a parent-set password used by the student to log in, and an optional profile photo.
- •Session data — Real-time voice audio (transcribed and discarded, see Section 5), transcripts, questions asked, and subjects discussed during tutoring sessions.
- •Homework and exam images — Photos of homework or exam papers uploaded by students or admins; text extracted from these images via automated OCR.
- •Payment information — Processed securely by Stripe; we do not store full card details.
- •Usage data — Pages visited, session duration, product analytics events, and error logs for improving the platform.
3. How we use your information
- ✓To deliver tutoring sessions and generate session transcripts
- ✓To provide parents with oversight of their child's learning activity
- ✓To process subscription payments
- ✓To send service-related emails (e.g. weekly progress digests, billing receipts)
- ✓To detect and prevent fraud or misuse
- ✓To improve and develop the platform
We do not sell your personal information to third parties.
4. Children's privacy
YoTeach.me is intended for use by children under the supervision and consent of a parent or guardian. A parent or guardian must create the account and add the student profile. Students log in using an email address and password set by their parent. We collect minimal information about students and do not use student data for advertising purposes.
When a parent or guardian creates a YoTeach.me account, they are required to explicitly accept our Terms of Service and this Privacy Policy before accessing the platform. This acceptance covers the collection and processing of their child's personal information as described in this policy, including the transfer of data to the overseas service providers detailed in Section 6.
5. How we store and protect your data
Structured data (accounts, transcripts, metrics) is stored in Neon Postgres. Files such as profile photos, homework photos, and exam paper images are stored in Vercel Blob. Both providers use industry-standard encryption at rest and in transit.
Session voice audio is streamed live to our transcription provider, converted to text, and discarded — it is not retained by us or by the provider. Transcripts are retained for 12 months and can be deleted on request.
Homework and exam images uploaded for OCR are deleted from Vercel Blob shortly after the extracted text has been added to the session context. Profile photos remain until you change or remove them. All files are permanently deleted when you close your account.
6. Overseas data processing & third-party sub-processors
To deliver our service we engage the following third-party processors. All of them are located in or process data through the United States. Each has entered into a Data Processing Agreement (DPA) with Diafani Technologies Pty Ltd.
| Provider | Country | Data processed |
|---|---|---|
| Clerk Inc. | United States | Parent/guardian name, email, auth sessions, device metadata |
| Neon Inc. | United States | All application data — accounts, student profiles, session transcripts, progress metrics |
| Vercel Inc. | United States (+ CDN edge) | Application hosting; file uploads (profile photos, homework images) |
| Stripe Inc. | United States | Billing information, subscription status, payment tokens (no raw card data stored by us) |
| Anthropic PBC | United States | Session transcript content sent per turn for AI tutoring; not stored or used for model training under commercial API terms |
| ElevenLabs Inc. | United States | Student voice audio per text-to-speech request; not retained by provider under commercial terms |
| Deepgram Inc. | United States | Student voice audio per speech-to-text request; not retained by provider under commercial terms |
| Resend Inc. | United States | Parent/student email address and email body for transactional emails |
| Pusher Ltd | United States / EU | Real-time session event metadata (no student content) |
| PostHog Inc. | United States | Usage analytics events; email and phone numbers are stripped before transmission |
In accordance with Australian Privacy Principle 8 (APP 8), we take reasonable steps — including Data Processing Agreements — to ensure that each of the above recipients handles personal information in a manner consistent with the APPs. By creating an account and accepting this policy, you acknowledge that your information (and your child's information) may be transferred to and processed in the United States. Australian privacy law may offer less recourse in respect of how overseas recipients handle your information; however, each provider above maintains security and privacy standards materially comparable to the APPs.
Our AI sub-processors — Anthropic, ElevenLabs and Deepgram — do not, by default under their commercial API terms, use student session content to train their models. We have configured our integrations to remain on those defaults.
We may disclose information if required by Australian law or a valid court order.
7. Your rights
Under Australian Privacy law you have the right to:
- ✓Access the personal information we hold about you
- ✓Request correction of inaccurate information
- ✓Request deletion of your account and associated data
- ✓Opt out of non-essential communications
To exercise these rights, contact us at [email protected].
8. Cookies and product analytics
We use session cookies necessary for authentication. We also use PostHog, a product analytics service, to understand how the platform is used and to capture front-end errors. PostHog records page views, button clicks and similar interaction events (autocapture), and stores a small identifier in your browser's local storage and cookies. We strip pattern-matched personal information (such as email addresses or phone numbers) from analytics events before they are sent.
You can disable cookies in your browser; this may affect login and platform functionality. You can also turn off product analytics at any time from your account settings page (parent or student) — look for the "Product analytics" toggle. Your choice is remembered in your browser.
9. Changes to this policy
We may update this policy from time to time. For material changes — such as adding new sub-processors or changing how we handle children's data — we will notify you by email and require fresh in-app acceptance before you can continue using the platform. For minor clarifications, we will update the "Last updated" date above.
10. Contact
For privacy enquiries please use our contact form or email [email protected].