Privacy policy

Our privacy approach

This policy explains how Noesis handles personal information. We designed it with the Australian Privacy Principles (APPs) in mind: collect only what we need, explain why, protect it, and give people practical ways to access, correct or delete it. This policy applies to the whole Noesis website and service: the planner, the question atlas and quizzes, flashcards, statistics, and every Premium feature, including the Learn tutor, Explain with Learn and automatic syllabus organisation for flashcards.

You can read the Australian Privacy Principles on the OAIC website.

What we collect

• Account information: your email address and authentication details. If you choose Google sign-in, Google and Supabase provide the details needed to create and authenticate your account.
• Study information: the subjects you select, whether each syllabus point needs revision or has been revised, your low, moderate or high confidence rating, and the relevant update times.
• Quiz and study records: the questions in each quiz you finish, your multiple-choice selections and written responses, the marks awarded, the time taken, your confidence rating on individual past questions, and your flashcard study sessions and results. An unfinished quiz is kept only in your browser.
• Flashcards and uploaded images: the sets you create — titles, descriptions, card text and the syllabus points cards are linked to — and any images you upload to a card. Uploaded images are re-encoded and stored in a private storage area under your account.
• Share links and imported copies: if you create a share link for a flashcard set, we store the link’s random token with the set. Anyone who has the link can view that set’s title, description, cards and images, without signing in, until you turn sharing off. If someone saves a copy from your link, that copy — including copies of its images — belongs to their account. Copies you save from someone else’s link belong to yours.
• Learn information: the messages you send, AI responses, selected subject or syllabus scope, interactive answers, confidence updates, feedback, conversation titles, the visual aids Learn builds for you, and relevant times. Conversations and visual aids are stored against your account so you can reopen them.
• Question reports: which past questions you report as having a problem. Other users see only how many reports a question has, never who made them.
• Subscription information: whether you have Premium, relevant subscription update times, and the Stripe customer and subscription identifiers needed to manage billing.
• Technical information: essential authentication cookies and normal hosting or security logs, which may include an IP address, browser or device information, request time, requested page, usage limits, model request metadata, errors and performance information. Model request metadata does not need to contain the text of your message.
• Messages: anything you choose to include if you email us for help or feedback.

We never see or store your card details. Stripe handles them. We do not sell personal information, run behavioural advertising, or use third-party marketing analytics. Do not put sensitive, confidential or another person’s personal information in Learn, flashcards, support emails or feedback.

How and why we use it

We collect information when you create an account, choose subjects, use the planner, quizzes, flashcards or Premium features, or contact us. We use it only to:

• create and secure your account;
• save and sync your subject choices, revision status, confidence ratings, quiz history and flashcards;
• calculate your personal revision order and progress summaries;
• send the content a Premium AI feature needs to an AI model and return its result;
• save your Learn history and enforce reasonable usage and safety limits;
• use excerpts, patterns, ratings, errors and feedback from Learn, with account identifiers removed, for human or automated quality evaluation;
• operate, secure, troubleshoot and improve the service; and
• answer support, privacy or feedback messages.

Premium AI processing

Only Premium features send your content to an AI model. Each request goes through OpenRouter to an upstream AI model provider:

• Learn tutor: your recent messages in the conversation, the subject or syllabus scope you chose, and what the tutor looks up to answer you — including the relevant syllabus points with your revision status and confidence on them, and related past questions.
• Explain with Learn: the past question you chose, its marking guide and page images, and the messages in that explanation thread.
• Automatic syllabus organisation for flashcards: the question and answer text of the cards in the set you organise, sent to an embedding model that turns it into numbers for matching against the syllabus. Card images are not sent.

Free features — the planner, question atlas, quizzes, statistics and writing or studying flashcards — do not send your content to an AI provider. Noesis does not include your email address or Noesis user ID in a model request, but content may identify you if you write identifying details in it. AI providers use international infrastructure and may process information outside Australia.

We may use Learn messages, with account identifiers removed, to evaluate tutor quality and improve prompts, safeguards and product features. Free text can still identify someone, so this does not make a message anonymous. OpenRouter states that it does not use inputs or outputs for model training, but upstream model providers have their own retention and training practices. Depending on the provider selected for a request, it may retain or use inputs and outputs to train or improve its models. Noesis does not use AI features to grade you or make decisions about your access to education. AI responses can be wrong, so check important information against your official syllabus, textbook and teacher.

Limited members of the Noesis team may access an account-linked conversation where reasonably necessary to provide support, troubleshoot a fault, investigate suspected misuse, protect the service or comply with law. Routine quality evaluation uses material with account identifiers removed.

Noesis also used AI tools during development. The syllabus content shown in the planner is manually checked by our team against source material.

QCAA content

Past exam questions, marking guides and syllabus material in Noesis come from the Queensland Curriculum and Assessment Authority. They are © State of Queensland (QCAA), used under CC BY 4.0; see the QCAA copyright notice. Question text is transcribed from the original papers, so check the official paper if something looks wrong. Explanations, tutor responses and sample answers are written by Noesis or generated by AI. They are not QCAA content, and QCAA does not endorse Noesis.

Services that help run Noesis

Our Supabase project, which holds the database and stored files, is hosted in Sydney, Australia (AWS ap-southeast-2). These providers operate global infrastructure, so information may still be processed or accessible outside Australia, including in the United States and countries used by the model provider selected through OpenRouter. The particular model provider can change because OpenRouter routes between available providers. We take reasonable steps to select providers consistently with this policy, but provider retention for security, abuse prevention or legal requirements may apply. Their own policies also apply to their processing. You can read the OpenRouter terms.

Cookies and local settings

Noesis uses essential cookies to keep you signed in and complete secure sign-in flows. Your browser also stores a few settings on your device: your light or dark theme, that you have read the Learn notice and update announcements, and an unfinished quiz so you can resume it. We do not use advertising cookies. Blocking essential cookies may stop account features from working.

Storage, security and retention

Account, study, quiz, flashcard and Learn information is stored through Supabase. We use encrypted connections, authentication controls and database row-level security so signed-in users can access only their own progress, quiz history, flashcards, uploaded images, conversations and Learn visual aids. The one exception is a flashcard set you choose to share by link. No online service can promise perfect security, so please use a unique password and tell us if something looks wrong.

We keep your account and study information while your account exists and as needed to run the service. Learn conversations, quiz history and flashcards remain until you delete them or delete your account. Historical public-beta acceptance records contain only your account identifier, the terms version and acceptance time. They are retained as an administrative audit record while your account exists, are not exposed through the user-facing application, and are removed when your account is deleted.

When you delete your account from Settings, Noesis first cancels any active Premium subscription with Stripe, then removes the images you uploaded, then deletes your account and everything stored against it — progress, quiz history, flashcards, share links, conversations, visual aids and reports. If any step fails, the account is kept so nothing is left half-deleted, and you can try again. If we cannot confirm with Stripe that your subscription is cancelled, we keep the account and record your account and Stripe identifiers so the team can check it by hand; email us and we will finish the deletion. Copies other people saved from your share links belong to their accounts and are not deleted. Stripe keeps its own billing records under its policy. Aggregated findings, or findings with no remaining link to an account, cannot be traced back for removal. Limited backups or provider security logs may remain for a short period under providers’ normal retention and legal processes.

Access, correction, deletion and complaints

Most study information is visible in your planner and settings. You can change subject choices, reset progress, manage a Premium subscription, or delete your account from Settings. You can delete individual Learn conversations from Learn, and flashcard sets, cards, images and share links from Flashcards. You can also email us to ask what personal information we hold, request a correction or deletion, or make a privacy complaint. We may need to verify that the account belongs to you before acting.

Students and AI feature eligibility

Noesis is intended for secondary-school study. You must be at least 13 to use Premium AI features, and anyone under 18 must have permission from a parent or guardian. Learn shows a plain-language notice before it is first opened in a browser. If a learner cannot understand the notice or these terms, they should not use Learn without support from a parent or guardian. Students, parents and guardians can contact us about an account or its information.

Changes to this policy and the Premium terms

As a student-built service, Noesis will change over time. We may update this page when the service, its data practices or the Premium terms change. We will provide additional notice where a material change requires it. The date at the top shows the latest version.