← Your dataPrivacy policy

Privacy policy.

What we collect, why, who we share it with, and how long we keep it.

APOLLO · OPERATED BY PAOLO POLINI · ABN 44 739 454 790LAST UPDATED 22 OCTOBER 2026
01

About this policy

Apollo is an assessment support tool for vocational education and training (VET). It is run by Paolo Polini, a sole trader (ABN 44 739 454 790) (“Apollo”, “we”, “us”).

This policy explains what personal information we collect, why we collect it, how we protect it, and your choices. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

It covers our website (www.apolloedu.au), the Apollo web app, and our dealings with trainers, assessors, registered training organisations (RTOs) and anyone who contacts us.

02

The short version

  • We never store your learners’ assessment work. It stays in your browser while you mark. It is cleared when you reload, close Apollo or sign out.
  • When work is sent for AI review, Apollo first removes learners’ names, student IDs, email addresses and phone numbers on your own computer. This is automatic and can miss things, such as handwriting, so check the preview.
  • We keep your account details, your plan and billing references, a record of each AI request and the marking counts behind Insights. While “Save my library” is on (the default), we also keep your unit library. We don’t keep the content of what was marked.
  • Our database is hosted in Sydney. AI review is done by Anthropic, outside Australia.
  • Our website uses no analytics and no tracking. We don’t sell personal information.
  • You remain the assessor. Apollo drafts; you set the outcome and sign off each assessment.
03

Information we collect about you

InformationWhen we collect itWhy
Your name, email address and passwordWhen you create an account, or when we set one up for youTo create and secure your account and contact you about it. Your password is stored only in scrambled, one-way form by our sign-in service. We can’t see it.
About your work: roughly how many assessments you mark a month, your mobile number (required if you sign up through our website; used to contact you about your account) and, if you choose to tell us, the RTO you train with and the units you markWhen you sign up or talk to us about an accountTo set up your account and understand what you need. If you sign up on our website, FormSubmit also emails us a copy of your sign-up details, not your password (see section 6).
Account and plan records: account status, plan, free-trial use, monthly allowance and balance (including carry-over), and which account emails we’ve sent you (not their content), when your account was created, when you accepted our terms of use, when you last used Apollo, and notes we add (for example, that a payment failed)As you use ApolloTo run your subscription and allowance, show you your balance and support you
A one-way code made from your email address (not the address itself), with the date you signed upWhen you create an accountSo the free trial can be used only once
Billing references: your Stripe customer and subscription IDs and the end date of your current billing periodWhen you start a paid planTo manage billing. Stripe handles your card details and keeps any saved card in our Stripe account. We never see your full card number, and we don’t store card details on our own systems.
Usage records: for each AI request, the date and time, the type of request, whether it counted against your allowance, the AI model used, tokens used, cost, how long it took, the outcome and the app versionEach time Apollo sends a request for AI reviewTo count your allowance, bill correctly, prevent misuse and keep the service reliable. These records don’t contain the content of the request.
Sign-in and security records: the time, your IP address and browser detailsWhen you sign up, sign in, sign out or reset your password, and when the app contacts our serviceTo keep accounts secure and to look into misuse or faults
Your name, email address, organisation, role and messageWhen you use our contact form or email usTo reply to you
No analytics. Our website host, the service that supplies our fonts, and our database provider Supabase (which supplies the blog and Community posts the website shows) receive your IP address and browser details, as with any website visit.When you visit our websiteTo deliver the pages to you. We don’t use this to track or profile you.
Feedback you send from inside Apollo: your name, email and account, your message, the type (bug, idea or praise), where you were in Apollo (the screen and your Getting started step), the app version, your browser and operating system, and when you sent it, with your time zoneWhen you use the Feedback button in ApolloTo fix problems and improve Apollo; we reply by email. Apollo checks your message for some learner details (such as IDs, dates of birth, phone numbers, addresses and other people’s email addresses) and asks you to remove them before it is sent. It can’t catch everything, such as names, so please leave learner details out.
Insights records: monthly counts of your marking decisions for each unit, task and template section (no student names or work)When you mark in Apollo while signed in. These counts are saved to your Apollo account (Sydney), whether or not “Save my library” is on.To show you patterns across your own batches in the Insights tab. Counts only: no student names or work. To delete them, use “Delete the copy in my account” in Apollo’s Settings: it asks whether to delete these counts too.
Your unit library: your units, tasks and guidance, the marking guides, learner material and blank templates you add, and your Apollo settings, such as your assessor name (not student submissions)While “Save my library” is on in Apollo’s Settings (it is on by default)So your library follows you to another computer. It is saved to your Apollo account (Sydney). Templates, and files named like a student’s work, are saved only after you confirm them. Sample answers, pictures and files that look like a student’s copy stay on your computer. You can switch saving off, or delete the copy in your account, in Settings.

We collect only what we need. You can make a general enquiry without giving your real name, but we need your name and email address to set up an account.

If you post in the community, we store your post, your first name and when you posted. Other signed-in trainers can read it. You can delete your own posts at any time, and we remove posts that break the community rules. Deleting your account deletes your posts, and the replies to your discussions. Posts that look like they contain student details are refused before they are saved.

If a new feature changes what we hold, we will update this policy before that feature goes live.

04

Learners’ information in assessments

When you mark with Apollo, you load learners’ submissions into your browser. This is how Apollo handles them:

  • Submissions are held in your browser’s memory only. We don’t save them on our servers. They are cleared when you reload, close Apollo or sign out.
  • The same goes for marks, AI replies and sign-offs. Apollo keeps them in memory only and doesn’t store them.
  • When work is sent for AI review, Apollo first removes the learner’s name, student ID, email addresses and phone numbers automatically on your computer. It also blacks out matching details in page images. If it can’t do this for a PDF, it sends the text only. Photos are held until you confirm that no personal details are visible.
  • The de-identified text, any redacted page images and your unit’s marking materials go through our service to Anthropic for AI review. Our service passes them on and returns the reply. It doesn’t store them. It keeps only the usage record described in section 3.
  • Marked documents you download are saved where you choose. They are your organisation’s records, not ours.

Removing identifiers is automatic. It works well on typed text, but it can miss details, such as handwriting or a name written somewhere unusual. Check the preview before you send, and don’t upload material you don’t need for marking.

If you are a learner: your trainer or RTO is responsible for your assessment records. For questions about your information, contact your RTO. You are also welcome to contact us.

05

How we use personal information

  • To provide, secure and support Apollo and your account
  • To process payments and manage your plan
  • To count usage, apply fair-use limits and prevent misuse
  • To send service emails, such as email confirmation, password reset and billing notices
  • To reply to enquiries
  • To improve Apollo, using usage records, not learner content
  • To meet our legal obligations

We don’t send unrelated marketing emails. If you subscribe, we may email you occasionally about new Apollo features and changes. Every update email has an unsubscribe link. Account emails (sign-up, welcome, subscription, receipts, cancellation) are part of the service.

We don’t sell personal information. We don’t use learners’ assessment work to train AI models.

06

Who we share information with

We use these service providers to run Apollo. Each one gets only what it needs for its job.

ProviderWhat they do for usWhere
SupabaseHosts our database and sign-in service, supplies the blog and Community posts our website shows, and runs the service that passes AI review requests to AnthropicDatabase and sign-in: Sydney, Australia. The relay runs on Supabase’s network, usually at the location nearest you. Supabase may handle technical logs and support outside Australia, including in the United States and Singapore.
AnthropicPerforms the AI review of de-identified assessment contentStored in the United States. Processing may be routed to the United States, Europe, Asia or Australia.
StripeProcesses payments and holds your card details. May send payment receipts and reminders.Provided in Australia by Stripe Payments Australia Pty Ltd. Stripe may transfer data to other countries, including the United States and India.
NetlifyHosts our website and app filesNetlify is based in the United States. Its global network serves pages from the location nearest you.
FormSubmitRelays messages from our contact form to our inbox, and emails us a copy of each website sign-up: your name, email, mobile, RTO, the units you mark and how many assessments you mark a month (not your password). It may keep a copy under its own terms.Outside Australia. FormSubmit doesn’t publish where it processes data.
Google FontsSupplies the fonts our pages use. Your browser fetches these files directly, so this service receives your IP address and browser details. They don’t receive anything you type into Apollo or our forms.Global networks, including outside Australia
Public code libraries (cdnjs, jsDelivr) and text-recognition data (projectnaptha)Supply code and data the Apollo app uses to read Word, Excel and PDF files and scanned pages. Your browser fetches these files directly, so these services receive your IP address and browser details. They don’t receive anything you type into Apollo or your learners’ work.Global networks, including outside Australia
ResendSends account emails (sign-up confirmation, password reset, welcome, subscription thank-you, cancellation), our occasional update emails if you subscribe, and delivers feedback you send from inside Apollo to our inboxResend is based in the United States. Our emails are sent from its Tokyo, Japan region.
Our email inboxHolds our inbox, including messages and in-app feedback you send usMay be outside Australia

We may also disclose information if the law requires it, or to our professional advisers, who must keep it confidential.

07

Overseas disclosure

Some of our providers are outside Australia or may handle information outside Australia (see section 6). The countries include the United States, India, Singapore, and countries in Europe and Asia.

The main one is Anthropic, which receives de-identified assessment content for AI review. Anthropic’s published terms for business (API) customers say that it:

  • stores this data in the United States, and may process it in the United States, Europe, Asia or Australia
  • deletes it within 30 days, unless a request is flagged under its usage policy (then up to 2 years) or the law requires it to be kept longer
  • does not use it to train its models by default.

If de-identification misses a detail, that detail may also be sent. This is why we ask you to check the preview before sending.

We choose providers that publish their privacy and security terms, and we send each one only what it needs.

08

How long we keep information

InformationHow long
Learner submissions, marks, AI replies and sign-offsNot stored by Apollo. Anthropic deletes what it receives within 30 days (up to 2 years if a request is flagged) under its standard terms (see section 7).
Account details, including sign-in recordsWhile your account is open, then 12 months after it closes. If you delete your account in Settings, we delete your account details straight away; sign-in records are kept for up to 12 months.
Your unit library and Insights counts saved to your Apollo accountWhile your account is open, then 12 months after it closes. You can delete them sooner with “Delete the copy in my account” in Apollo’s Settings (it asks about the Insights counts separately). If you delete your account in Settings, they are deleted straight away.
Usage and billing records7 years, to meet tax and record-keeping laws. If you delete your account, we keep them for 7 years from then, without your name or email address. They still carry your Stripe customer and plan references and the dates your account opened and closed, so they match Stripe’s invoices.
Your customer record and saved card in our Stripe account (if you have had a paid plan)After you delete your account, our Stripe account keeps them for billing records, with no fixed end date. Stripe also keeps its own payment records under its own rules.
A one-way code made from your email address (not the address itself), with the date you signed up, so the free trial can be used only onceFor as long as we offer the free trial
Messages and in-app feedback you send us, and the emailed copy of a website sign-up2 years
A record that you sent feedback (your account, the type and the time, not the message)2 days, to limit how much feedback can be sent
Technical logs held by our providersFor the short periods each provider sets

When we no longer need information, we delete it or remove anything that identifies you.

09

How we protect information

  • Each trainer signs in with their own account. Database rules mean you can only see your own records.
  • Passwords are stored only in scrambled, one-way form. We can’t see them.
  • The key for the AI service is held on our server, never in the app.
  • Information is encrypted in transit (HTTPS). Our database provider encrypts stored data.
  • Usage and cost limits help stop misuse of accounts.
  • We don’t store learner submissions, so there is no store of them on our systems to be exposed.

No system is completely secure. If a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) where the law requires.

10

Your choices and rights

  • You can ask what personal information we hold about you, and ask for a copy.
  • You can ask us to correct your details.
  • You can delete your account yourself: in Apollo, open Settings and press “Delete my account”. This cancels any paid plan straight away and deletes your account details, unit library, Insights counts and Community posts from Apollo at once. You can also email us to close your account.
  • After you delete your account, we keep only what section 8 lists: usage and billing records without your name or email address, sign-in records for up to 12 months, messages and feedback you sent us (including the emailed copy of a website sign-up), the one-way code that stops a second free trial, and the technical logs our providers keep for short periods. If you have had a paid plan, our Stripe account keeps your customer record and saved card, for billing records.
  • You can switch off update emails at any time, with the unsubscribe link in each email.

To make a request, email us. There is no charge for making a request. We may need to confirm who you are first. We will reply within 30 days.

11

Cookies and browser storage

Our website doesn’t use analytics, advertising or tracking tools, and doesn’t set tracking cookies.

The Apollo app keeps your sign-in session, your settings and your unit library (the marking materials you load) in your browser’s storage, so the app works. While saving is on (see Settings in the app), your unit library is also saved to your Apollo account so it is there on your other devices. Learner submissions are never saved to your account. Marking materials are sent only when Apollo makes an AI review request (see section 4). You can clear this storage at any time in your browser settings. Delete my account also removes the library from the computer you use; copies in other browsers stay until you clear them there.

12

Questions and complaints

For privacy questions, requests or complaints, email info@apolloedu.au. We will respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

13

Changes to this policy

We will post any changes on this page and update the date at the top. If a change is significant, we will also tell account holders by email.

Privacy contact info@apolloedu.au
Read nextWhat actually leaves the building. → Privacy questionsAsk us a privacy question →