Privacy

What this policy covers

This is the privacy policy for XType, run by The Trustee for TDBM, ABN 60 368 962 309. Contact us at hello@xtutio.com. We follow the Australian Privacy Principles.

What we collect

We do not keep the text a child types beyond the numbers of each run, and XType uses no artificial intelligence.

• The parent's name and email address, and a password (we store only a scrambled form of it).
• Each child's first name and school year, which a parent adds.
• What the course needs to work: lessons passed, stars, typing speed and accuracy, and which keys are slow.
• Payment details are taken by Stripe. We receive a customer reference, the plan, the dates and whether a payment succeeded. We never see or store a full card number.

Who sees your information

The XType team uses it to run the course and show parents progress, to take payment and send receipts and reminders (including the reminder before a free trial ends), to keep the service safe, and to fix errors. We do not sell personal information, we do not show advertising and we do not market to children.

Who we share information with, and where

We use these services to run the product. We share only what each needs. Your records and files are stored in Sydney, Australia.

• Supabase: stores accounts, children's profiles and progress. Processes information in: Sydney, Australia (AWS ap-southeast-2).
• Vercel: runs the website and app. Processes information in: Sydney, Australia (syd1).
• Resend: sends our emails: sign-in links, receipts and reminders. Processes information in: Tokyo, Japan, for sending domains XTutio sets up.
• PostHog: counts visits, with consent. Processes information in: European Union.
• Sentry: reports errors, with names and emails removed. Processes information in: Not yet confirmed.
• Cloudflare Turnstile: checks that a sign-up is a person, not a bot. Processes information in: Not yet confirmed.
• Stripe: takes your card payment and runs the subscription; we never see your full card number. Processes information in: Not yet confirmed.

Cookies and analytics

We use a small number of essential cookies: they keep you signed in, remember your light or dark choice and remember your cookie choice. These are always on.

If you accept analytics cookies, we use PostHog to count visits and the steps from our site to a purchase. If you are signed in, we count you by an account number only, never your name or email. We never identify or track children: a child's pages do not start analytics at all. If you accepted analytics and your payment provider tells us you have started a 7-day free trial, subscribed, paused or cancelled, we record that event against your account number, with no amounts.

If you accept analytics cookies, we also note which page or link first brought you to the site, so we can see which of our pages and guides help parents. We record it against your account number once you sign up, never your name or email, and we do not record it if you have not accepted analytics cookies.

You can decline analytics and everything still works. You can change your choice at any time by clearing this site's cookies and storage in your browser.

Keeping and deleting your information

You can ask to delete your account from your account page. There is a 24-hour wait in case you change your mind. You can also email us.

We keep information while your account is open. If you ask us to delete your account or a child's information we will delete or de-identify it within 30 days, except what the law requires us to keep, such as billing records for seven years.

You can ask to see or correct the information we hold about you at any time.

Children and parents

A parent or guardian creates and controls the account and each child's login, and agrees to these terms for the child.

We collect only what we need to run the practice. We do not advertise to children or send them marketing, a child cannot buy anything, and we do not sell personal information.

You can ask us to delete a child's information at any time.

Your XType account is separate from any account you hold with another XTutio product, even if you use the same email address: each product has its own sign-in and its own bill. Children are not identified or tracked in our analytics, and nothing is sold on a child's screen.

Your choices and rights

You can see, correct or delete your family's information, withdraw consent to analytics, and cancel at any time. Email hello@xtutio.com or use your account page.

Complaints

If you have a complaint, contact us first at the address above and we will reply in writing. If you are not happy with the answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). You can also contact the ACCC or NSW Fair Trading about a consumer matter. Our address for complaints is hello@xtutio.com.

Changes to this policy

If we change this policy in a way that matters, we will email you before it takes effect. The date at the top shows when it was last updated.