Privacy Policy

Last updated: 1 July 2026

1. Our Commitment to Privacy

Quelo complies with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and the Privacy and Other Legislation Amendment Act 2024. This platform collects and processes personal information about children — parents and guardians should read this policy carefully.

2. Who We Are

Quelo Pty Ltd (ABN: 74 696 221 477 · ACN: 696 221 477)
Level 1/457-459 Elizabeth Street, Surry Hills NSW 2010, Australia
support@quelo.com.au

Quelo is the data controller for personal information collected through the platform.

3. Information We Collect

3.1 Parent/Guardian. Full name, email address, password (stored as a salted hash), payment information (collected by our payment provider), subscription history, and support communications.

3.2 Child/Student. First name, year level, state, tutor preferences, session transcripts, confidence ratings, progress data, study notes, and welfare flags.

3.3 Technical. Device type, browser, operating system, IP address, session logs, and browser fingerprint (used for trial abuse prevention only).

4. How We Use Your Information

4.1 To Provide the Service. Authentication, tutoring sessions, session summaries, payment processing, and transactional emails.

4.2 To Monitor Welfare. Real-time AI monitoring for emotional distress signals, with welfare notices sent to the parent or guardian. Session transcripts may be reviewed by Quelo staff for quality assurance purposes. Child session content is not used for AI model training.

4.3 To Improve the Service. Aggregated, de-identified analytics and system performance monitoring.

4.4 Legal and Compliance. Complying with Australian laws, detecting fraud, and enforcing our Terms of Service.

5. Trial Abuse Prevention

We use browser fingerprinting to detect multiple free trial accounts originating from the same device. This data is used for fraud prevention only and is not used for advertising or profiling.

6. Third-Party Services

We use the following third-party providers to operate the Service:

We take reasonable steps to ensure that data processed outside Australia receives comparable protection.

7. Data Retention

Account data: retained while active and for 12 months after cancellation. Session transcripts: 12 months. Welfare flags: 7 years. Payment records: 7 years (Australian tax law requirement). Technical logs: 90 days. After applicable retention periods, data is securely deleted or de-identified.

8. Your Rights

You have the right to access, correct, and (subject to legal obligations) delete your personal information. To exercise these rights or to make a complaint, contact support@quelo.com.au. We may ask you to verify your identity by confirming your registered email address. We will respond within 30 days. Complaints may also be lodged with the Office of the Australian Information Commissioner at oaic.gov.au.

9. Security

Passwords are stored as salted hashes. All data in transit is protected by HTTPS/TLS. We apply role-based database access controls. Payment processing is handled by PCI-DSS Level 1 certified providers. We conduct regular security reviews and comply with the Notifiable Data Breaches scheme.

10. Cookies and Tracking

We use session cookies for authentication and core functionality only. We do not use advertising cookies, sell data to advertisers, or track users across third-party websites. Analytics are aggregated and de-identified.

11. Children's Privacy

We do not collect personal information from children without verifiable parental or guardian consent. All child profiles are created by a parent or guardian. Child session data is not used for advertising, profiling, or AI model training.

12. Changes to This Policy

We will notify you by email of material changes at least 14 days before they take effect. The current version is always available at quelo.com.au/privacy.

13. Contact

General support: support@quelo.com.au
Level 1/457-459 Elizabeth Street, Surry Hills NSW 2010, Australia
ABN: 74 696 221 477