Privacy notice
Last updated 5 September 2026.
This app is used by children, so the short version matters more than the long one: we collect the least we can, we keep it in Australia, we never sell it or use it for advertising, and you can delete all of it yourself at any time.
Who holds the account
Accounts are held by a parent or guardian, who creates a profile for each child. Children do not have their own logins. By creating a child profile you confirm you are their parent or guardian and consent to the handling described here on their behalf.
What we collect
| What | Why |
|---|---|
| Your email address and a password (stored only as a secure hash — we never see it) | To sign you in and to send account emails such as a password reset |
| A display name for each child — a first name or nickname is plenty | So you can tell profiles apart. We don't ask for a surname, birthday, school or address |
| Photos you take of questions, and the text and diagrams read from them | This is the product: the mistake book itself |
| Answers, timings and results | To choose what to bring back, and when |
| Basic technical logs, and a record of what each AI request cost us | To keep the service running and to control our own costs |
Please avoid photographing anything that identifies your child — a name on a worksheet, a school stamp — since it will be stored with the question. Crop it out if you can.
Where it lives
Questions and results are stored in a database in Sydney, Australia. Photos are stored in object storage configured to an Oceania location. Backups are held encrypted, in the same arrangement.
Who else sees it
No other family, ever. Your child's photos and captured questions are visible only to your account. Practice questions the app generates may be reused across families, but the questions your child photographed are never shared with anyone.
We use a small number of service providers to run the app:
- Anthropic — to read a photo into text and write explanations. Content is sent for processing and is not used to train their models.
- OpenRouter — used occasionally to have a second, independent model check an answer we are unsure about.
- Amazon Web Services (Sydney) and Cloudflare — hosting and photo storage.
- Resend — sending account emails.
- Sentry — error reports, so we find faults before you do.
We do not sell personal information, we do not use it for advertising, and we do not use your child's data to build a profile of them for anything other than choosing which questions to bring back.
Deleting everything
In the app, open the menu and choose Delete account. You'll confirm with your password. This immediately and permanently removes the account, every child profile, every question, every photo, every result — including from our storage. It cannot be undone and does not wait for us to process anything.
Individual questions, photos and children can also be deleted at any time without deleting the account.
One thing survives, deliberately: a record of what our AI requests cost, with no link to you or your child. It is our own accounting and contains nothing about a person. Ordinary server logs are kept briefly and then rotate away.
How long we keep it
For as long as you keep the account. There is no fixed expiry, because a mistake book is more useful the longer it runs — but nothing is kept once you delete it.
Your rights
Under the Australian Privacy Act you can ask to see the personal information we hold about you, ask us to correct it, or complain about how we've handled it. Email support@mistakemastery.com and we'll reply within one business day during the pilot.
If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If this notice changes in a way that affects how your child's information is handled, we'll email you rather than quietly reposting the page.