Privacy Policy

JEK Industries Pty Ltd (ABN 66 105 223 501) is responsible for the personal information handled through Captivate Exam Hub. For privacy enquiries, contact contact@captivateexamhub.com.au.

• Account information — your email address and authentication details, and the Australian state/jurisdiction you select.
• Study data — your subject selections, practice answers, assessment attempts, flashcard reviews, progress and readiness metrics.
• Content you enter — answers, notes and any text you submit, including text sent to AI features to generate questions, feedback or summaries.
• Technical and usage data — device, browser and log information, and data needed to operate, secure and improve the Service.
• Subscription and billing data — your plan, selected subjects and trial status. Card payments are processed by our payment provider; we do not store full card numbers.
• Fraud- and abuse-prevention signals — a device identifier (“fingerprint”), IP address and approximate location, and sign-in, session and device activity. We use these only to prevent trial abuse and unauthorised account sharing, and to keep accounts secure (see “Fraud and abuse prevention” below).

Please do not enter sensitive information (such as health details) into AI prompts or free-text fields. The Service is not designed to collect sensitive information, and the OAIC recommends against entering personal or sensitive information into AI tools unless there is a clearly controlled, compliant setup.

• To create and manage your account and authenticate you.
• To deliver revision content tailored to your subjects and jurisdiction.
• To generate AI-assisted questions, feedback and summaries you request.
• To measure progress, improve the Service, and keep it secure.
• To process subscriptions and payments, and manage free trials.
• To prevent fraud, trial abuse and unauthorised account sharing.
• To comply with our legal obligations.

Some features send the text you provide to a third-party AI provider to generate study content. Privacy obligations apply both to personal information you input into an AI system and to AI outputs that contain personal information.

• AI provider: AI features are served through the Lovable AI Gateway (Lovable Labs Incorporated), which routes requests to Google’s Gemini models (currently the Gemini 2.5 Flash family, including for image/handwriting recognition when you scan written work). We may change models over time to comparable providers.
• Storage of prompts/outputs: The study content you generate (questions, feedback, summaries and your answers) is stored in your account so you can return to it, and is kept until you delete it or your account is closed. We also log technical usage records for each AI request — the feature used, the model, token counts and cost — for billing, credit limits and abuse prevention. Our AI provider may retain request data briefly for operational and safety purposes.
• Model training: We do not use your content to train or fine-tune AI models, and our AI provider does not use requests sent through the paid gateway to train its models.
• Offshore processing: AI requests are processed outside Australia, primarily in the United States. See “Overseas disclosure” below.

AI output may be incorrect or incomplete — see our AI Use & Accuracy notice.

We disclose personal information to service providers who help us run the Service, including our hosting, database and authentication provider, our AI provider, and our payment provider (for subscription billing). We require them to protect your information and use it only for the purposes we specify. We do not sell your personal information. We may disclose information where required or authorised by law.

Some of our providers store or process data outside Australia. Our AI gateway and the underlying AI models process requests in the United States, and our payment provider (Stripe) processes billing data in the United States and Ireland. Our hosting, database and authentication provider stores your account and study data in its Australian region, with limited support and operational access from overseas. Where information is disclosed overseas, we take reasonable steps to ensure it is handled consistently with the APPs.

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access, modification or disclosure, and to destroy or de-identify it when no longer needed. No system is completely secure, so we cannot guarantee absolute security.

To protect the Service and keep pricing fair, we use limited technical signals to detect and prevent abuse. This includes a device identifier (“fingerprint”), your IP address and approximate location, and sign-in, session and device activity. We use these to:

• stop the same person repeatedly claiming the free trial with different accounts;
• detect unauthorised account sharing — for example, by limiting how many devices and simultaneous sessions an account can use, and flagging sign-ins from very different locations in a short time; and
• protect accounts from unauthorised access.

We collect only what we need for these purposes, keep it for no longer than necessary, and do not use it to build advertising profiles. Where an account is flagged, we may ask you to verify a new device (for example, by email code) or temporarily limit access.

The Service may be used by minors. We rely on parent/guardian permission for users under 18 and apply extra care to their information. See Students Under 18 for details and how a parent or guardian can make a request.

You may request access to, or correction of, the personal information we hold about you by emailing contact@captivateexamhub.com.au. If you have a complaint about how we handle your information, contact us first; if you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

The Service uses cookies and similar browser storage only where necessary to keep you signed in, remember your preferences and operate the site. We do not use third-party advertising cookies or third-party analytics or tracking tools. We do keep our own usage and error logs to operate, secure and improve the Service.

We may update this policy and will change the “last updated” date above. For material changes we will take reasonable steps to notify you.