FeaturesTry itPricingAboutBlogJoin the waitlist
← Back to Spirian

Privacy Policy

Effective 20 October 2026

1. Who we are

Spirian is a business run by Leo Mitchell, trading as Spirian (ABN 48 266 141 131), together with co-founder Jin Choi. In this policy, “Spirian”, “we”, “us” and “our” mean that business.

This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It covers:

  • this website, spirian.com.au, including its waitlist and Try it pages;
  • Spirian Worksheets, the web app at app.spirian.com.au (“the app”);
  • any email you send us, or we send you.

For questions about this policy, write to [email protected].

2. The short version

  • Spirian Worksheets is for tutors. It does not hold information about students, and you should not enter any.
  • The app stores its data in Sydney, Australia. Some of the tools that run this website, our email and payments are overseas, and we name them in section 7.
  • The app records how it is used, such as which pages and features you use and for how long, so we can improve it. It does not record the text of your questions, and this information stays in Australia.
  • Two features send your content to AI models, and only when you use them: Make rerollable and Import from Word. Both run in Sydney. See section 5.
  • If you start a free trial or pay for a plan, Stripe handles your card. We never see or store your full card number.
  • We do not sell personal information, and never will.
  • We do not use the questions you write to train AI models, and we do not show them to other customers.

3. What we collect

When you join the waitlist. Your first and last name, email address, and how you heard about us.

When you ask us to email you a worksheet from the Try it page. Your email address, the worksheet you made, and whether you ticked the box asking for updates.

When you have a Spirian Worksheets account.

  • Your name and email address.
  • Your password, stored only as a secure hash. We cannot read it.
  • Your business name and, if you add one, your business logo.
  • The questions, solutions and worksheets you write, build or import in the app.
  • How you use the app: when you sign in, which pages and features you use, how long you spend in it, which subjects and topics you build worksheets from, when you print or present a worksheet, and errors the app runs into. We also record your device type (phone, tablet or computer), but not your browser or IP address. This is linked to your account. It does not include the text of your questions, solutions, worksheet titles or searches.
  • Problems you report with a question, and any comment you write with the report.
  • If you use Make rerollable: the templates it makes from your questions, and a record of each attempt (when you asked, whether it worked, and what it cost us to run).
  • If you use Import from Word: a record of each import, which holds the name of each file, a fingerprint of it (so we can tell the same file imported twice), how long it was, and what the import cost us to run. It does not hold the document’s text, except the questions you choose to save.

When you start a free trial or pay for a plan.

  • Your plan, whether you are on a trial or a paid plan, and the dates your trial and billing periods start and end.
  • Your Stripe customer and subscription references, and your invoices. Your card details go straight to Stripe. We never see or store your full card number.
  • A standardised copy of your email address, used only to make sure each person gets one free trial (see section 10 for how long we keep it).
  • The IP address you started your free trial from, used only to limit how many free trials one connection can start in a day.
  • Your referral code, who referred you, and whom you referred. Whether someone you referred signed up and paid decides your reward. Neither of you can see anything in the other’s account.

When you visit this website. Technical details such as your IP address, browser, device type, the page you came from and the pages you view. See section 8.

When you email us. Your email address and whatever you choose to tell us. If you send us a copyright complaint, this includes the details in it.

We do not ask for sensitive information, such as health information. If you send it to us anyway, we protect it like everything else and do not use it.

4. Information about students

Spirian Worksheets is built for tutors, not students. Students do not have accounts, and the app does not ask for anything about them.

Please do not put a student’s name or other personal information into a question, a solution, a worksheet title or the name of a file you import, and import blank worksheets rather than completed student work. Anything you enter is stored with your account like any other text. Tell us and we will help you remove it.

Our services are for adults. We do not knowingly collect personal information from anyone under 18. If you think we have, contact us and we will delete it.

5. Features that use AI models

Two features would send content from your account to AI models. Neither is offered to customers at the moment. If we switch one on for your account, it runs only when you use it, as described here.

Make rerollable turns a question you wrote into a template, so the app can make new versions of it with different numbers.

  • What is sent: the question you chose, with its topic, marks, worked solution and answer. Nothing else from your account is sent: not your name, your email address or your other questions.
  • What comes back: a template, saved in your account.

Import from Word turns a Word document of questions into questions in your bank.

  • What is sent: your document is opened in your browser and is never uploaded to us. The text of its paragraphs is sent to an AI model, which sorts it into questions, parts and answers. Images in the document are not sent to any model.
  • What is kept: only the questions you review and choose to save, and the images you choose to keep. The document’s text is not kept after it has been sorted.

For both features:

  • The models run on Amazon Bedrock, operated by Amazon Web Services in Sydney, Australia. Under AWS’s terms, what we send is not used to train AI models and is not shared with the companies that made the models.
  • What the models produce stays in your account. Only you, and Leo and Jin when they check quality or fix a problem, can see it. We do not show it to other customers or add it to our question library.

6. Why we use it

  • To run your account and give you the features of Spirian Worksheets.
  • To run free trials and paid plans: to take payments, apply your plan’s usage limits, give referral rewards, and stop the same person taking more than one free trial.
  • To contact you about the waitlist and about joining Spirian.
  • To send you a worksheet you asked for from the Try it page, and, if you ticked the box, to email you about Spirian.
  • To answer your questions and give you support. Leo and Jin can see account information when they need to fix a problem or check the quality of a question.
  • To keep the site and the app secure, prevent misuse, find errors, and understand which parts of the site are useful.
  • To understand how the app is used, so we can decide what to build next and find questions that aren’t working well.
  • To deal with copyright complaints (see our terms of use).
  • To meet our legal obligations, including keeping tax records.

Automated decisions. We do not use personal information to make decisions that significantly affect you by computer alone. Two things are applied automatically: your plan’s usage limits, and the check that refuses a free trial to an email address that has already had one or that comes from a disposable email service. If you think either has been applied to you wrongly, write to us and a person will look at it.

Emails about Spirian. If you are on the waitlist, or asked for updates when you requested a worksheet, we may email you about Spirian. Every such email tells you who it is from and how to stop them. You can also reply and say so, or write to [email protected]. If you have an account, we also send emails you need to use it, such as password resets, receipts and notices of changes to our terms. You cannot opt out of those while your account is open.

7. Who else handles it

We use a small number of service providers. Each one receives only what it needs to do its job.

Spirian Worksheets (the app):

  • Supabase: the database, sign-in and file storage for your account and everything you create. Sydney, Australia.
  • Amazon Web Services: hosts the app itself, runs the checks that draw diagrams and verify answers, and runs the AI models (Amazon Bedrock) used by the features in section 5. Sydney, Australia. The app’s page files are delivered through Amazon CloudFront’s worldwide network. Those files contain no personal information.
  • Stripe: takes the card at trial sign-up, takes payments for paid plans, and keeps your card details, invoices and payment history. United States and other countries where Stripe operates.
  • Supabase and Resend: send emails about your account, such as sign-up confirmations and password resets. These handle your email address and may do so outside Australia, including in the United States.
  • Cloudflare Turnstile: checks that the sign-in and sign-up forms are filled in by a person, not a bot. It sees technical details of your browser and connection, not your password. United States.
  • Sentry: reports errors in the app so we can fix them: what went wrong, on which page, your browser and a random account number. It is set up not to collect your email address, IP address, cookies, passwords or what you type into forms. European Union.

The features in section 5 are the only ones that send anything to an AI model. Your account details are never sent to an AI model. If we add another feature that uses one, we will update this policy first and name the provider and where it runs.

This website (spirian.com.au):

  • Vercel: hosts the website, and provides aggregated statistics about visits. United States, with a worldwide network.
  • Resend: delivers waitlist sign-ups to our inbox, and the worksheets you ask for to yours. It also holds a contact record for each address we send a worksheet to: the address, the date we sent it, and whether you asked for updates. United States.
  • Cloudflare Turnstile: checks that a form was filled in by a person, not a bot. United States.
  • Sentry: reports errors on the website so we can fix them. It is set up not to collect IP addresses, cookies or anything typed into forms. European Union.

Email:

  • Google Workspace: our email. Anything you email to an @spirian.com.au address, and our replies, are held by Google. United States and other countries where Google operates.

Sending information overseas. The providers above marked as outside Australia receive only what they need: a website visitor’s form details, an email address to deliver to, an email you send us, or payment details. We choose providers with recognised security practices and contract terms that protect personal information. Under the Privacy Act, we remain responsible for how they handle what we disclose to them.

Other disclosures. We may also disclose personal information:

  • when the law requires or allows it, for example in response to a lawful request from a government agency;
  • to our professional advisers, such as our accountant, lawyer and insurer, who must keep it confidential;
  • if we receive a copyright complaint about material in your account, to tell you about it, and, if you respond, to share your response with the person who complained;
  • to a company we set up to run Spirian, or to someone who takes over the business. They must handle it under this policy.

8. Cookies and analytics

This website uses:

  • Vercel Analytics, which counts visits without cookies.
  • Cloudflare Turnstile, which runs on the waitlist form and the Try it page to stop spam and automated copying.

The Try it page sets one cookie after the Turnstile check, so it can serve questions for the next 30 minutes. It holds no personal information. The worksheet you are building stays in your browser tab’s session storage and is gone when you close the tab.

You can block or delete cookies in your browser. The site still works, although the waitlist form and the Try it page need Turnstile and that cookie to run.

The app does not use advertising or third-party analytics tools. It records how it is used (see section 3) in our own database in Sydney, Australia, and nowhere else. It keeps your sign-in session, your light or dark theme choice, and a random identifier for your current visit in your browser’s storage. Stripe’s payment pages, which open when you start a free trial, pay or manage your plan, set their own cookies to process payments and prevent fraud. If you would rather we did not record how you use the app, email us and we will switch it off for your account.

9. How we protect it

  • All connections to the site and the app are encrypted.
  • The database and file storage are encrypted at rest.
  • Each business’s data is kept separate from every other business’s. The database enforces this, not just the app.
  • Passwords are stored only as hashes. Keys and credentials are kept out of our source code.

No system is perfectly secure. If a data breach is likely to cause serious harm, we will follow the Notifiable Data Breaches scheme. That means telling the people affected and the Office of the Australian Information Commissioner (OAIC) as soon as we practicably can.

10. How long we keep it

  • Waitlist details: until you ask us to remove them, or until we stop running the waitlist.
  • Worksheet requests: until you ask us to remove them. We keep the contact record for each address we have sent a worksheet to, so that each address gets one worksheet, until you ask us to remove it.
  • Your account and what you create in it, including templates, imported questions and the records in section 3: for as long as your account is open. When you ask us to close it, we delete it, apart from what the next two points say and anything else the law requires us to keep. Any backup copies are removed as those backups expire.
  • Payment records (invoices, amounts and dates): for five years after the payment, because tax law requires it. Stripe keeps its own records under its own obligations.
  • The standardised email address used for free trials: indefinitely, even after your account closes, so that the same person cannot take another free trial. It is used for nothing else.
  • The IP address you started a free trial from: 30 days, then deleted.
  • Records of how you use the app: 180 days in full, then only as monthly totals. They are deleted with your account.
  • Emails you send us, including copyright complaints: for as long as we need them to deal with what you asked, or to show how we dealt with a complaint.
  • Error reports and website statistics: for the limited period our providers keep them.

When we no longer need personal information, we delete it or remove the details that identify you.

11. Your rights

You can ask us to:

  • show you the personal information we hold about you;
  • correct it if it is wrong, out of date or incomplete;
  • delete it, or close your account;
  • stop recording how you use the app;
  • stop sending you emails about Spirian.

Write to [email protected]. We may need to confirm who you are first. We will reply within 30 days, and there is no charge. If we refuse a request, we will tell you why and how to complain.

You can deal with us without giving your name when that is practical, such as asking a question by email. You cannot use the app without an account.

12. Complaints

If you think we have mishandled your personal information, tell us first at [email protected]. Say what happened and what you would like us to do. We will reply within 30 days.

If you are not satisfied with our answer, you can complain to the OAIC:

13. Changes to this policy

We will update this policy when what we collect, who we share it with, or the law changes. The current version is always at spirian.com.au/privacy, with its effective date at the top. If you have an account, we will tell you in the app, or by email, before a significant change takes effect.

14. Contact us

Our terms of use explain the rules for using Spirian Worksheets.