1. About this Privacy Policy
This Privacy Policy explains how AIGenius Innovation Pty Ltd (ABN 28680573200) (Rewrit, we, us or our) collects, uses, stores, discloses and protects personal information in connection with Rewrit.com.au and related AI writing-learning services.
Rewrit is designed with data minimisation in mind. We aim to collect only the information reasonably needed to provide AI writing feedback, learning recommendations, progress insights, daily vocabulary plans, rankings, writing challenges and related educational services.
2. Information we collect
2.1 Google sign-in information
When a user signs in with Google, we may collect or receive:
- Google account email address;
- Google account name;
- Google profile identifier;
- profile image, if provided by Google; and
- authentication records needed to maintain account access and security.
We do not use Google sign-in to read Gmail messages, Google Drive files, Google Calendar, contacts or other Google services unless a future feature clearly asks for and receives separate permission.
2.2 Student learning information
We may collect:
- student grade or year level;
- student state or territory, such as NSW, VIC, QLD, WA, SA, TAS, ACT or NT, or New Zealand for New Zealand users;
- writing prompts, writing submissions, drafts, answers and related learning content;
- AI feedback, writing-analysis results, rubric indicators and generated reports;
- learning recommendations, daily vocabulary plans, word lists, progress data and usage history;
- competition entries, rankings, percentile bands, award status and challenge history;
- account settings and parent or user support communications.
2.3 Information we do not intentionally request
Rewrit does not intentionally require students to provide home address, phone number, school name, exact location, identity documents, medical information, photographs or other sensitive personal information for ordinary use of the platform. However, students may include personal information in open-text writing submissions. If this happens, that information may be processed as part of the writing submission.
2.4 Technical and usage information
We may collect technical information such as IP address, browser type, device type, operating system, log-in time, pages used, feature interactions, error logs, security logs, cookies and analytics data.
2.5 Payment information
If paid features are offered, we may collect billing records, subscription status, token balances, transaction identifiers and invoice information. We do not intend to store complete credit card numbers. Payment information is generally processed by third-party payment providers.
3. How we use information
We use information to:
- create, verify and manage user accounts;
- authenticate users through Google sign-in;
- provide AI writing analysis, feedback and reports;
- store writing history and show progress over time;
- generate personalised learning recommendations and daily vocabulary plans;
- provide percentile bands, state-level indicators, New Zealand-level indicators, national-level indicators and progress charts;
- run writing challenges, awards and competition features;
- communicate with users and parents about support, accounts, security, subscriptions or product changes;
- process payments, subscriptions, tokens, refunds and invoices;
- detect fraud, misuse, plagiarism, account abuse, security risks or technical problems;
- improve, test, evaluate and train Rewrit’s AI models, scoring tools, recommendations and educational products;
- conduct de-identified or aggregated analysis for product development and educational insights;
- comply with legal, regulatory, tax, accounting, safety and dispute-resolution obligations.
4. Uploaded writing and AI processing
When a user uploads writing, Rewrit may process the writing using AI systems and related software. Analysis may include grammar, punctuation, vocabulary, structure, coherence, creativity, persuasiveness, narrative development, argument quality, age-appropriateness, rubric alignment and learning needs.
We may store the original writing, AI feedback and related learning data so users can review progress and receive personalised recommendations.
5. Model improvement and AI training
Rewrit may use uploaded writing, writing prompts, AI feedback history, correction data, assessment indicators, learning outcomes, usage patterns and related learning data to improve and train Rewrit’s AI writing-analysis systems, scoring tools, recommendation models and educational products.
Where practicable, we use de-identified, pseudonymised or aggregated data for model improvement and analytics.
Some AI model-training or statistical uses may not allow us to later identify and remove a single writing submission from an already trained model, de-identified dataset or aggregate output.
We do not sell student writing or personal information.
If we introduce a materially different use of identifiable student writing for model training, we will update this Privacy Policy and provide appropriate notice or consent options where required.
Parents or users may contact [email protected] to ask about data use or request that identifiable writing not be used for future model-training activities where reasonably practicable. Some core analysis and service functions require processing of writing submissions and cannot operate if processing is refused.
6. Rankings, percentiles and competitions
Rewrit may use grade, state/territory, New Zealand status, writing task, writing performance, writing challenge entries and Rewrit user samples to provide percentile bands, state-level indicators, New Zealand-level indicators, national-level indicators, progress charts or ranking-style visualisations. These are learning indicators based on Rewrit’s data and should not be understood as official government, school or examination rankings unless expressly stated.
Where results are shown publicly or to other users, Rewrit will use privacy-protective formats such as anonymised identifiers, initials, display names, percentile bands or ranking categories unless separate consent is obtained to use a real name, school name, full writing sample or other identifying details.
7. Model Writing Collection and publication consent
Rewrit may invite selected students to include writing in a model writing collection, sample gallery, website page, learning resource, PDF booklet, course material or promotional material. We will seek separate consent from the student and, where the student is under 18, a parent or guardian before publishing identifiable full writing submissions or including them in a model writing collection.
Publication consent may allow a parent or student to choose anonymous publication, first-name-only publication, grade, state/territory or New Zealand, feedback comments, minor formatting edits and the types of media in which the writing may appear. The student remains the owner of the original writing.
8. Children and parental rights
Rewrit is designed for student learning and may be used by children and teenagers. If a user is under 18, use of Rewrit should be approved by a parent or guardian.
Parents or guardians may contact us to access, correct or request deletion of their child’s account information.
Parents or guardians may ask questions about how writing data is used for AI feedback, learning recommendations, rankings or model improvement.
Students should avoid including unnecessary personal or sensitive information about themselves or others in writing submissions.
Where we become aware of safety, wellbeing, abuse, self-harm or serious risk issues in user content or communications, we may take steps we consider reasonably necessary to protect the student or others, including contacting a parent, guardian or appropriate authority where lawful and appropriate.
9. Disclosure of information
We may disclose information to:
- Google, for authentication and account sign-in;
- AI infrastructure and service providers that process writing and generate or support feedback;
- Australian cloud hosting, database, security, analytics, logging and technical service providers, including AWS Sydney infrastructure;
- payment processors and billing providers;
- email, support and communication providers;
- contractors, developers, advisers and staff who need access to provide or support the service;
- legal, accounting, insurance, compliance or professional advisers;
- regulators, courts, law enforcement or government authorities where required or authorised by law;
- a buyer, investor, successor or related entity in connection with a business sale, restructure, merger or investment process, subject to appropriate confidentiality and privacy protections.
We require service providers to handle information only for authorised purposes and with appropriate confidentiality and security measures where reasonably practicable.
10. Australian data storage
Rewrit stores its core account, writing, feedback and learning data in Australia using AWS Sydney infrastructure. We do not intentionally store Rewrit writing or learning data overseas. Our AI writing analysis and learning data processing are designed to operate within our Australian-hosted environment. Google Sign-In and other third-party service providers may process their own authentication, security, payment, analytics or communication data according to their own terms and privacy policies, but Rewrit’s core writing and learning data is stored in Australia.
11. Cookies and analytics
We may use cookies and similar technologies for login, security, fraud prevention, user preferences, analytics, product improvement and service performance. We may use analytics tools to understand how users interact with Rewrit and to improve the platform. Users may manage cookies through browser settings, although disabling cookies may affect platform functionality.
12. Marketing communications
We may send service-related communications, such as security notices, account information, payment notices, product updates or changes to legal documents. We may also send educational content or marketing communications where permitted by law. Users may opt out of marketing communications, but service-related communications may still be sent.
13. Data security
We take reasonable steps to protect personal information and writing data from misuse, interference, loss, unauthorised access, modification or disclosure. Measures may include access controls, secure cloud services, encrypted connections, authentication controls, logging, role-based permissions and internal policies. No online service can be guaranteed to be completely secure.
14. Data retention and deletion
We retain account information, writing submissions, feedback history and learning data for as long as reasonably needed to provide Rewrit, maintain learning history, improve the product, comply with legal obligations, resolve disputes, prevent misuse and maintain security.
Users or parents may request deletion of an account or writing history by contacting us.
We may retain certain records where required for legal, tax, accounting, payment, security, backup, fraud-prevention or dispute-resolution purposes.
Deleting an account may not remove data already de-identified, aggregated, included in statistical outputs or used in already trained models where it is not reasonably practicable to identify and remove that data.
Where reasonably practicable, deleted personal information will be deleted, de-identified or made inaccessible from active systems.
15. Access and correction
Users or parents may request access to, correction of or deletion of personal information by contacting [email protected]. We may need to verify identity and authority before responding. We will respond within a reasonable time. In some circumstances, we may refuse or limit access where permitted by law, such as where access would affect another person’s privacy, compromise security or conflict with legal obligations.
16. Data breaches
If a data breach occurs, we will assess the incident and take appropriate steps to contain, investigate and remediate it. If the breach is likely to result in serious harm and applicable law requires notification, we will notify affected individuals and the relevant regulator as required.
17. Complaints
Privacy questions or complaints may be sent to [email protected]. Please include your name, contact details, account email and a description of your concern. We will aim to respond within a reasonable time. If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner or another relevant privacy regulator.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on Rewrit.com.au with a new “last updated” date. If changes are material, we will provide additional notice where reasonably practicable.
19. Contact us
Privacy and support contact: [email protected]
Operator: AIGenius Innovation Pty Ltd (ABN 28680573200)