Privacy Policy

Version 2026-08-22.1 · effective 2026-08-22

1. Who we are

Korva Academy is operated by TO BE CONFIRMED registered legal entity name and structure, 14554829654, of TO BE CONFIRMED registered business address. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Privacy enquiries: TO BE CONFIRMED privacy officer name and contact address. General contact: hello@korvaacademy.com.au.

2. Everything we collect

This is the complete list, taken from the database schema — not a summary.

From you, the parent

• Email address — your login, and the address Stripe sends payment receipts to.
• Password, stored only as a one-way hash — we cannot read it, and neither can anyone who obtains the database.
• Your name, if you choose to enter it. It is optional.
• A consent record each time you accept the Terms and this Policy: the version accepted, the date and time, your IP address and browser user-agent string. We keep these as evidence of consent. This is the only place we deliberately store your IP.
• A Stripe customer ID and your subscription status. Card numbers never reach Korva's servers: payment happens on a page hosted by Stripe.
• Your marketing-email preference — see section 6.

From each child profile you create

• A nickname your child picks — two words, chosen by them from lists we supply, such as “Swift Fox” or “Bright Comet”. You are never asked for your child's name and there is no field to type one into. Because the nickname can only be built from our own word lists, we can say as a fact rather than a hope that what we hold is not your child's real name.
• If the profile was created before this change, it still holds the first name you typed at the time, and it will keep doing so until you choose to move that child to a nickname. We ask you to; we do not force it, and nothing stops working if you decline.
• If you do move a child to a nickname, the old name is archived, not erased. We keep it in a separate field so you can undo the change, and from that moment it is no longer displayed anywhere and no longer sent to Anthropic — but it is still in the database. Deleting the account removes it, as it removes everything else.
• Year level — Korva is a single-level product and every profile is normalised to Year 6.
• An optional 4-digit PIN you set, used only on the profile-picker screen. It is not a security control against a determined adult and should not be a PIN used anywhere else.
• We do not ask for a surname, date of birth, school, address, phone number, photograph, or location, and there is no field for any of them.

As your child practises

• Every question served, and every answer given, whether it was right, the AI feedback, and the experience points awarded.
• Practice sessions: which section, when it started and ended, how many questions were attempted and how many were correct.
• Writing responses — the full text your child writes. Retention for these is different and shorter; see section 5.
• Messages exchanged with the Fo tutor, including anything your child types into it.
• Mistakes kept for review, per-skill accuracy, daily activity totals, and a count of consecutive days practised. Daily "quest" progress and experience points from an earlier version of the app are retained on existing accounts but are no longer added to or shown.
• Weekly Mock and Weekly Challenge attempts, including answers and, for the Challenge writing section, the written response.

Automatically

Our hosting provider keeps standard web-server logs (IP address, user-agent, requested URL, response code, timestamp) for security and troubleshooting. We do not combine those logs with your account data.

3. Why we collect it

• To run the service — serve questions, mark answers, show progress, and work out how ready your child is.
• To give you, the parent, visibility of what your child has practised.
• To take payment and manage your subscription.
• To prove you consented to these documents, and to which version.
• To find and fix bad questions and software faults.
• To meet tax and legal obligations.

We do not sell personal information, we do not share it with advertisers or data brokers, we do not show advertising to children, and we do not build behavioural profiles.

4. Who we share it with — and where they are

Korva uses five external services. All five are based in the United States, so some of your and your child's information is disclosed overseas. Australian Privacy Principle 8 requires us to say so plainly. Stripe also operates through an Australian entity; the other four do not.

Anthropic: under its commercial API terms, Anthropic does not train its models on data submitted through the API by default. Their policy: anthropic.com/legal/privacy. Stripe: stripe.com/au/privacy.

We use no analytics product, no advertising pixel, and no third-party behavioural tracker. Cookies are limited to the session cookie that keeps you logged in.

5. How long we keep it

• Writing responses: the raw text is erased about 24 hours after it is written. A background job runs hourly and blanks the text; we keep the score, the word count and Fo's written feedback. This covers both everyday practice writing and Weekly Challenge writing. The 24 hours is a minimum, not an exact moment — the job runs hourly, so a response may survive up to an hour longer.
• Fo's feedback quotes your child's own words, and the feedback is not erased. This is deliberate, not an oversight: Fo may only award a top mark for Ideas if it can quote the exact sentence that earned it, and the "what worked" notes are written by pointing at specific wording rather than handing out generic praise. So short extracts of your child's writing — a phrase or a sentence, not the piece — can outlive the 24-hour erasure, inside the feedback, for as long as the account exists. If you would rather that did not happen, deleting the account removes it along with everything else.
• Your child's messages to Fo, and the reflection they can write at the end of a session, are kept for as long as the account exists. They are your child's own words too, but unlike writing responses they are not on a 24-hour timer. They are deleted with the account.
• Everything else about a child's practice is kept while the account exists, because it is what the progress dashboard is made of.
• When you delete your account, the erasure is immediate and permanent — not a 30-day queue and not a soft delete. See section 7.
• Consent records outlive the account in one respect: we keep a deletion audit row proving the deletion happened. It contains a one-way hash of your email address, never the address itself, so it cannot be used to contact you or to reconstruct who you were.
• Stripe keeps payment records for as long as Australian tax law requires. That is Stripe's obligation and is outside our control; request those from Stripe directly.

6. Email

Korva sends exactly two emails, both to the account holder, and both only because you did something that asks for one: a password-reset link when you request a reset, and a confirmation when you delete your account. There is no third. They are delivered by Postmark — see section 4.

There is no marketing email of any kind — no mailing list, no newsletter, no product announcements. If you tick the marketing box at checkout we store that preference and nothing else happens. It is a record of your permission for a future we have not built yet. If we ever do build it, we will contact you only if that box is ticked, and every message will carry an unsubscribe link.

Nothing is ever sent to a child. Child profiles have no email address.

7. Your rights

• See it — your dashboard shows every child's practice activity. For anything not shown there, ask us.
• Correct it — change your email, your name, or any child profile from your dashboard at any time.
• Delete it — "Delete my account and all data" on your dashboard erases your account, every child profile, and every session, answer, writing response, tutor conversation, mistake, mock and challenge record belonging to them. It runs immediately and cannot be undone. We do not send a confirmation email, because we have no email system; the deletion is written to our internal audit log as it happens.
• Get a copy — email TO BE CONFIRMED privacy officer name and contact address from your account address and we will assemble your data by hand. There is no automated export in the product yet.
• Withdraw consent — by deleting your account or by cancelling your subscription.

8. Complaints

Contact TO BE CONFIRMED privacy officer name and contact address first. We will acknowledge and aim to resolve within TO BE CONFIRMED complaint acknowledgement and resolution window.

If you are not satisfied, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au/privacy/privacy-complaints, by phone on 1300 363 992, or by post to GPO Box 5288, Sydney NSW 2001. The OAIC normally expects you to raise it with us first and to allow us 30 days.

9. Data breaches

The Notifiable Data Breaches scheme applies to us. If a breach is likely to cause you serious harm we must notify you and the OAIC. Our process for doing so is TO BE CONFIRMED eligible-data-breach notification process. Korva can send email (section 6), but it has no code that sends a notice to every affected parent at once, so the mechanics of doing that remain an unresolved item for legal and operational review.

10. Changes to this policy

Each version carries a version number and an effective date, shown at the top. When a version changes you are shown it in the app and asked to accept it; you have 14 days from the effective date before the prompt becomes blocking. We record which version you accepted and when. The notice is given in the app and not by email: the only two emails Korva sends are the ones in section 6, and neither of them is this.