What we collect at registration. Your name and email, your child's first and last name, age, school year and exam. When you set up the plan: the target and the practice time per week. No photographs, no school name, no date of birth.
Questions you send us. Your name, email and question, kept so we can answer it.
The newsletter. Only if you tick its box at registration, which is left unticked. Every issue has a one-click unsubscribe, and leaving the newsletter changes nothing else. Your child's page, reports and account emails do not depend on it.
What we record while your child studies. For every test: each answer given, whether it was right, whether the "I checked it twice" box was ticked, the time taken, and the date. From these we compute the skill map, the plan and the weekly reports; each mark is one line in an append-only log so every verdict can cite its evidence. Puzzle and game results are kept the same way. Nothing else: no keystrokes, no camera, no microphone, no location, and no tracking cookies. The browser keeps only an unfinished test (so it survives a page reload), your language, your log-in, and one note made on your first visit of where you came from, such as "youtube" and the date. That note holds no name or id, is never shared, and only lets us count which channels bring families; the same goes for the optional "Where did you hear about us?" at registration.
What we do with it. Your email receives your private link and, if you ask, reports. Your child's name appears on their test and results. The marking engine sees only a random student id; the registration record is stored separately and the engine cannot read it.
Where it lives. On a server in Sydney, Australia (hosted by Fly.io), with daily snapshots kept for five days. Your child's answers are marked by code on that server and are not sent to any AI model or third party, with one exception below.
The writing piece. On the Melbourne Grammar track a member writes one piece a week. To score it on the official ten-strand scale, the text of that piece — and nothing else: no name, no email, no other answers — is sent to Anthropic's Claude model through its API (processed in the United States) and the scores come back. Under Anthropic's API terms the text is not used to train models. The scored result is stored in Sydney with everything else.
Email. Your private link, the Sunday report and the invoice are sent through Resend, an email service; it sees the address and the message it delivers, nothing else. You can stop the reports from any report page.
Payments. Membership payments are handled by Stripe on its own pages; we never see or store card details. The GST invoice we email carries your name and email, the child's name and year level, and the amount.
How long we keep it. While your child's account is active, and for twelve months after the last test is marked. After that everything is deleted, including snapshots.
Your rights. Email wcandy@candyandfrank.com from your registered address to export or delete everything we hold about your child. Deletion is complete within seven days, snapshots within twelve.
Children. This service is used by a parent or guardian on a child's behalf. We do not market to children: no email, notification, streak or offer is ever addressed to the child. The puzzles and games that open after careful work are part of the study session itself, reached only through the parent's private link, and unlock on effort (time on task and re-checking), never on score alone.
Contact. Candy and Frank, Australia · wcandy@candyandfrank.com