Privacy Notice

1. Who we are

Gamsat Prep is operated by Perfect Health, trading as Gamsat Prep at gamsatprep.com.au. Perfect Health is the data controller for the personal data described in this notice. You can reach us at support@gamsatprep.com.au.

2. What we collect and why

• Account data — name, email address and login credentials (or your Google account identifier if you sign in with Google). Used to create and secure your account. Legal basis: performance of our contract with you.
• Learning data — your answers, timings, session history, diagnostic results and tutor conversations. Used to provide the Service, generate your analytics and personalise practice. Legal basis: performance of our contract.
• Support messages — content you send us. Used to answer your enquiry. Legal basis: performance of our contract and our legitimate interest in supporting customers.
• Usage and device data — telemetry, log data, device identifiers, browser type and IP address. Used for security, fraud prevention, debugging and product improvement. Legal basis: our legitimate interests in operating a secure, reliable service.
• Marketing preferences — where you opt in to product emails. Legal basis: consent, which you may withdraw at any time.

Payment card details are collected and processed by Stripe, not by us; we never see or store your full card number.

3. Who we share data with

• Service providers and subprocessors — cloud hosting and database providers, AI model providers that process your tutor prompts to generate a response, analytics and support tooling. They act on our instructions under contract.
• Payment processor — Stripe, which handles payments, subscription billing, tax calculation and remittance, invoicing and payment support.
• Professional advisers — legal, accounting and audit advisers where needed.
• Authorities — where we are required to disclose by law or to protect legal rights.

We do not sell your personal data.

4. International transfers

Our providers may process data outside Australia, including in the United States and the European Economic Area. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

5. Retention

We keep account and learning data for as long as your account is active, and for up to 12 months after closure so you can reactivate. Billing records are retained by Stripe and by us for as long as tax and accounting law requires (typically seven years). After these periods data is deleted or anonymised.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to receive a portable copy, and to withdraw consent. Australian users may also complain to the Office of the Australian Information Commissioner; UK and EEA users may complain to their local supervisory authority. Email support@gamsatprep.com.au and we will respond within one month.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access controls that restrict your data to your account, and least-privilege access for our staff. No system is perfectly secure, but we review our controls regularly.

8. Cookies

We use essential cookies and local storage to keep you signed in and to secure the Service, and limited analytics cookies to understand feature usage. Essential cookies cannot be disabled without breaking sign-in. You can clear or block cookies in your browser settings, and manage marketing preferences from your account.

9. Changes

We may update this notice. Material changes will be announced in the app or by email before they take effect.