← Back to Gunzo

Privacy Policy

Effective date: 30 March 2026

Last updated: 25 April 2026

1. Introduction

This Privacy Policy explains how Gunzo ("we", "us", "our") collects, uses, stores, and discloses personal information when you use the Gunzo platform, including the website at gunzo.com.au and any associated web applications (collectively, the "Service").

Gunzo is operated by Charles Timothy Knott (ABN 30 714 325 497), a sole trader based in Australia. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information you provide directly:

  • Account information: Your name and email address, provided via our authentication provider.
  • Study materials: Documents, PDFs, notes, textbook chapters, past exam papers, and any other files you upload. These materials may contain personal information about you or third parties.
  • Voice recordings: If you use voice input, audio is transmitted to our transcription provider and is not stored after transcription is complete.
  • Study session data: Your typed and spoken answers, question ratings, and messages sent to the Virtual Tutor.
  • Communications: Any correspondence you send to us, including support requests.

Information collected automatically:

  • Usage data: Pages visited, features used, session duration, and interaction patterns within the app.
  • Device and technical data: Browser type, operating system, IP address, and referring URLs.
  • Cookies: Session cookies for authentication and analytics cookies for product improvement. See Section 8 for details.

Information from third parties:

  • Stripe: Payment status, subscription tier, and customer identifier. We do not receive or store full card numbers or CVV codes.

3. How We Use Your Information

  • To provide and operate the Service, including generating AI practice questions from your uploaded materials.
  • To power the Virtual Tutor conversation feature.
  • To evaluate your answers and provide detailed feedback.
  • To track your study progress and apply spaced repetition logic.
  • To process subscription payments via Stripe.
  • To send transactional emails (welcome, password reset, billing receipts).
  • To improve the Service through aggregated, de-identified analytics.
  • To detect and prevent fraud or abuse.
  • To comply with legal obligations.

We do not use your uploaded study materials to train AI models. Your documents are processed solely to generate questions and tutor responses for your personal use.

4. AI Processing of Your Content

Documents you upload are sent to third-party AI providers for processing. By uploading content, you acknowledge that:

  • Your content is transmitted to OpenAI's API for question generation and voice transcription, and to Anthropic's API for Virtual Tutor responses.
  • Both providers process data under their own privacy policies and are bound by data processing agreements.
  • You should not upload content containing sensitive personal information about third parties.

5. Disclosure of Your Information

We do not sell, rent, or trade your personal information. We may disclose your information to the following service providers who assist us in operating the Service:

  • OpenAI (United States) — document processing, question generation, voice transcription
  • Anthropic (United States) — Virtual Tutor AI responses
  • Stripe (United States) — payment processing
  • Amazon Web Services (United States / Australia) — file storage
  • PostHog (United States / EU) — product analytics
  • Resend (United States) — transactional email delivery

Where personal information is disclosed to overseas recipients, we take reasonable steps to ensure those recipients handle your information in accordance with the Australian Privacy Principles.

We may also disclose your information where required by law, to protect the rights or safety of Gunzo or others, or in connection with a business transfer or acquisition.

6. Data Retention

  • Account data: Retained for the duration of your account and for 12 months following deletion.
  • Uploaded documents and questions: Retained for the duration of your account. You may delete individual documents at any time.
  • Voice recordings: Not retained. Audio is discarded immediately after transcription.
  • Payment records: Retained for 7 years in accordance with Australian taxation obligations.

7. Security

We take reasonable steps to protect your personal information, including encryption of data in transit (TLS/HTTPS) and at rest, access controls, and use of reputable security-certified service providers. No method of transmission over the internet is completely secure. If you become aware of any security issue, please contact us at [email protected].

8. Cookies

We use the following types of cookies:

  • Session cookies: Required for authentication. Deleted when your browser closes.
  • Preference cookies: Remembers your settings. Retained for 30 days.
  • Analytics cookies (PostHog): Understands how the product is used. Retained for 12 months.

You may disable cookies through your browser settings. Disabling session cookies will prevent you from logging in.

9. Your Rights

Under the Australian Privacy Act, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your personal information.
  • Opt out of marketing communications at any time.
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. Users aged 13–17 may use the Service with the consent of a parent or guardian. If you believe a child has provided us with personal information, contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email and by posting the updated policy on this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions, requests, or complaints, please contact:

Charles Timothy Knott
Trading as Gunzo
ABN 30 714 325 497
Email: [email protected]
Website: gunzo.com.au