Last updated October 2026
Draft for review. This document is a plain-English starting draft. It has not yet been reviewed by a lawyer and should not be relied on as legal advice or published as-is.
This policy explains what personal information Yahav's VCE English Vault collects, why we collect it, and what we do with it. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
Account details: your first name, username, email address and phone number (both required), and whether you have confirmed your email address.
Study profile: your year level, whether you're mainstream or EAL, the texts you study, your goal score, and any goals, blockers or interests you choose to share. All of these are optional except year level.
Content you create: essays you submit, posts and comments in the community, wins and photos you post, feedback and bug reports you send, and any photo you upload as your profile picture.
Usage data: what you read, your study timer sessions, streaks, XP and points — used to run the gamification features and show you your own progress.
How you found us: if you signed up through one of our links, a short label for that link (for example "join" or the name of a campaign) is saved with your account so we can tell which links work. We don't store the full web address you came from.
Technical data: basic device and browser information, and error reports if something breaks.
To run your account and show you your own progress.
To let you take part in the community, leaderboards and teams.
To let Yahav mark your essays and reply to your questions.
To contact you about your account, and about tutoring enquiries or bookings you have made (see section 4).
To send you Vault news, new guides and posts, friend and team activity and a weekly progress digest by email. You can switch any of these off (see section 4).
To keep the platform safe — investigating abuse reports and enforcing the community rules.
To improve the platform based on what students actually use.
We do not sell your personal information, and we do not use it for third-party advertising.
Every account needs a phone number, so Yahav can reach you about your account and about tutoring enquiries or bookings you have made. It is never used to promote paid tutoring to you unless you asked about it. You can change it in Settings at any time; because it is required, it can't be removed while your account exists (deleting your account removes it). Phone verification and SMS messages are not used.
Your email address is used to sign in, to confirm it belongs to you and to reset your password.
The emails we send: account and security emails (confirming your email, a one-off welcome once you have confirmed it, password resets, and a notice when your password or email changes), which always arrive; news from Yahav and a heads-up when a new guide or blog post goes live; friend requests and team invites; and a weekly progress digest on Sundays. Vault administrators also get alerts about bug reports, tutoring enquiries and booking requests, and a daily list of new sign-ups (each student's first name, username, year level and how they found the Vault).
Every optional email has a one-click unsubscribe link at the bottom, and you can switch each kind on or off any time in Settings → Email. We never sell your email address or use it for anyone else's advertising.
Emails are delivered by our email provider, Resend. If an email to you bounces or is reported as spam, we stop sending optional emails to that address until you change it.
Vault administrators, including Yahav, can see your email and phone number to help with your account and study support. These contact details are never displayed to other students and are never sold.
Visible to other signed-in students on your profile: your first name, username, profile photo (if you add one), bio, year level, stream, the texts you study, the strengths and weaknesses you chose to share, team, house, badges, XP tier, streak, activity counts (such as wins, study time and arena results), when you joined, your recent wins and your leaderboard positions. Your first name and username also appear next to anything you post in the community.
Signed-out visitors only see your username, generated avatar, XP tier and badges on your profile. If you upload a profile photo, only signed-in students and administrators can see it; everyone else sees your generated avatar, on your profile and on the leaderboards.
Never public: your email address, your phone number, your essay scores and essay feedback, your bug reports, your abuse reports, and your private calendar entries.
If you choose to share a win, its score and message appear in the wins feed. Attached win photos can be viewed by signed-in students and administrators. Crop out other people's details before posting; images are not automatically blurred.
Your essay only appears in the essay library if you explicitly agree to it, and it is anonymous by default.
Service providers who help us run the platform — hosting, error reporting, the AI provider connected to The Oracle, and our email delivery provider (currently Resend), which receives your email address and the content of the emails we send you. They may only use it to provide that service to us.
Where the law requires it, or where it is necessary to protect someone's safety.
Some of these providers store data overseas, including in the United States.
When you use The Oracle, the text you submit is sent to a third-party AI provider to generate feedback. Do not paste anything into The Oracle that you would not want processed this way — including other people's personal information.
Vault administrators can review a saved copy of writing submitted for AI marking, the feedback or failed response, and the model and usage information. These copies support marking quality checks and troubleshooting and are not public. They remain if you remove an essay from My essays, are included in your account export, and are removed when you delete your account.
We take reasonable steps to protect your information from misuse, loss and unauthorised access.
We keep your information while your account is open. If you delete your account we delete or de-identify your personal information, except where we need to keep something to meet a legal obligation.
Most of our users are school students and many are under 18. We collect the minimum we need, and we do not use student information for advertising or profiling.
If you are under 18, please talk to a parent or guardian before creating an account or sharing personal details.
If you are a parent or guardian and want to see, correct or delete your child's information, contact us and we will help.
You can view and edit most of your information any time in your settings.
You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and data.
If you think we've mishandled your information, contact us first. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Privacy questions or requests: hello@tutorsmelbourne.com.au