NaplanWriting home

Privacy Policy

Last Updated: 16 June 2026

1. Overview

naplanwriting.com.au ("we", "our", or "us") respects your privacy. This Service is designed for students to practice writing. We are committed to protecting the privacy and safety of all users, including children. This policy explains what data we collect, how we use it, and how we protect it.

You can use the writing editor for practice without creating an account or signing in. AI-powered writing assessments require signing in with either a Google account or an email address and password. The data we collect depends on which features you use, as described below.

2. Data We Collect

Our Service has two usage tiers with different data collection:

Anonymous Users (No Sign-In Required)

You can use the writing editor to practise typing and writing without creating an account or signing in. In this mode:

  • No personal information is collected. You are not required to provide a name, email, or any identifying details.
  • Writing Content: The text you type may be stored temporarily in your browser. No personal account is linked to this data.
  • Usage Data: We use PostHog (a privacy-focused analytics tool) to track anonymous usage patterns (e.g., page views, feature usage) and session recordings of on-screen interactions (clicks, navigation, scrolling) to improve the Service. The text you type is masked and never captured in these recordings. This data is not linked to your personal identity.

Signed-In Users (Google or Email/Password)

To access AI-powered writing assessments, you must sign in. We support two sign-in methods: Google Sign-In and email/password. When you sign in, we collect:

  • Account Information (Google): If you sign in with Google, we receive your display name, email address, and profile photo from Google. We store this information to identify your account and provide personalised features.
  • Account Information (Email/Password): If you create an account with email and password, we collect your email address and a securely hashed copy of your password (handled by Google Firebase Authentication — we never see or store your raw password). We send a verification email to confirm ownership of the address.
  • Writing Content: The stories or texts you type are stored in our database so you can retrieve, review, and submit them for assessment.
  • Assessment Data: When you use our AI writing assessment feature, the assessment results (scores, feedback, and the writing analysed) are stored in your account.
  • User Preferences: Settings you choose (such as your year level) are stored in your account profile.
  • Payment Data: If you purchase credits, payment processing is handled by Stripe. We do not store your credit card details. Stripe may collect information as described in their own privacy policy.

3. How We Use Your Data

  • To provide and maintain the Service, including AI-powered writing assessments.
  • To identify your account and display your saved work.
  • To improve the Service through anonymous, aggregated analytics.
  • To process purchases and manage your credit balance.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Children's Privacy

Our Service is designed for school-age students, including children under 15. We take children's privacy seriously:

  • We collect only the minimum data necessary to provide the Service.
  • We encourage parents or guardians to supervise their child's use of the Service and to create accounts on their behalf where appropriate.
  • Parents or guardians may contact us at any time to request access to, correction of, or deletion of their child's personal information.
  • We do not knowingly collect personal information from children without the involvement of a parent, guardian, or school.

Under the Australian Privacy Act 1988, individuals (including children) have the right to access and correct their personal information. If you are a parent or guardian and believe we have collected information about your child inappropriately, please contact us.

5. Third-Party Services

We use the following third-party services to operate:

  • Google Firebase: For authentication (Google Sign-In and email/password), database storage, and hosting.
  • Google Generative AI (Gemini): To power AI writing assessments. Writing content submitted for assessment is sent to Google's AI services for processing. Google may process this content on servers located in the United States and other countries.
  • PostHog: For privacy-focused product analytics and session replay. Session replay records how users interact with pages — clicks, navigation, scrolling, and page layout — to help us diagnose problems and improve the Service. Your writing and essays, the AI feedback and assessment results shown on screen, and anything you type into forms are masked and are not captured in these recordings. Recordings are retained for 30 days and then automatically deleted. PostHog processes this data on servers in the United States.
  • Stripe: For payment processing (if you purchase credits). Stripe processes payment data on servers located in the United States.

Each of these services has their own privacy policy governing how they handle data.

6. Data Storage & Security

Your account information, writing content, and assessment results are stored in Google Firebase (Firestore), hosted in Google Cloud's United States (us-central1) region. We employ industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication, and server-side access controls.

Overseas disclosure (Australian Privacy Principle 8): Because our hosting and the third-party services described above (Google Firebase, Google Generative AI, Stripe, and PostHog) are located in the United States, your personal information is stored and processed outside Australia. By using the Service you consent to this overseas disclosure.

7. Data Retention & Deletion

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. Upon deletion, your personal information, writing content, and assessment results will be permanently removed.

8. Your Rights

Under Australian privacy law, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your personal information.
  • Make a complaint about how we handle your personal information.

To exercise any of these rights, please contact us at the email address provided on our website.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last Updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Disclaimer

naplanwriting.com.au is an independent educational practice tool. It is not affiliated with, endorsed by, or connected to ACARA (Australian Curriculum, Assessment and Reporting Authority) or the official NAPLAN administration.