Gumleaf

Privacy Policy

Effective 25 October 2026 · Version 2026-10-25

1. Who we are

Gumleaf is run by Sana Ali (ABN 35 122 672 748), NSW 2154, Australia. Contact us at sana.ali@yousafespace.com. Gumleaf is independent and not affiliated with the NSW Department of Education, NESA or ACARA. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

2. What we collect

  • Account: your email address, display name and how you signed in (email link, password, Google or Apple).
  • Your children: first names or nicknames, school years, schools (only if you enter them) and notes you write.
  • Family dates you add, and your progress ticks on guides.
  • Community: forum posts and replies, tutor reviews, reports you make and people you block.
  • Tutor profiles: name, suburb, subjects, years, rate, languages, about text, availability, photo, phone, email and NSW Working With Children Check (WWCC) number.
  • Tutoring: requests (your name, child's year, message, contact) and bookings (time, length, note).
  • Reports: what was reported, the reason, and a copy of the reported text.
  • Ask (AI) questions: the question you type and your children's school years (not names). We keep a daily count of questions for limits; we do not keep the question text in your account.
  • Reminders: which dates you asked to be reminded about, how many days before, and a record of reminders sent.
  • Push tokens: if you turn on push notifications, a notification address for your device.

3. Why we use it

Only to run Gumleaf: show your family's dates and guides, send reminders you asked for, answer Ask questions, connect parents and tutors, email tutoring updates, and keep the community safe (moderation, reports, blocks). We do not sell your data, show ads or use it for tracking.

4. Who can see it

  • Children, family dates, notes, progress, reminders and Ask usage: only you.
  • Forum posts and replies: signed-in Gumleaf members only (with your display name).
  • Tutor listings, photos and reviews: signed-in members only.
  • Tutor phone, email and WWCC number: the tutor, and parents whose request the tutor accepted.
  • Requests and bookings: the parent and that tutor.
  • Reports: our moderators. The reported person is not told who reported them.

5. AI (Ask)

Ask questions are sent to an AI model through the Lovable AI Gateway, which uses third-party model providers (currently OpenAI). Before sending, we remove email addresses and phone numbers and only include your children's school years. AI answers can be wrong — always check official sources.

6. Service providers and overseas storage

  • Hosting and database: Lovable Cloud (built on Supabase). Data may be stored outside Australia.
  • Email: Lovable's email service sends our emails. Emails pass through servers outside Australia.
  • AI: Lovable AI Gateway and its model providers, located overseas (including the United States).
  • Sign-in: Google or Apple, if you choose them.

So your information may be disclosed to recipients overseas. Our database is hosted in India (Mumbai), and email and AI services may process data in the United States. We take reasonable steps to make sure these providers protect your information in line with the Australian Privacy Principles.

7. Keeping and deleting your data

We keep your information while your account is open. You can edit or delete children, dates, posts, replies and listings at any time in the app. You can delete your whole account from My family; this deletes your profile, children, dates, progress, posts, replies, reviews, tutor listings and photos, requests, bookings, reminders and push tokens. Reports you made may be kept without your name so moderators can finish reviewing them.

8. Access and correction

Most information can be viewed and changed in the app. To ask for a copy or a correction, email sana.ali@yousafespace.com. We reply within 30 days.

9. Complaints

Email sana.ali@yousafespace.com first. If you are not happy with our reply, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

10. Children's information

Accounts are for adults 18 and over. Children do not use Gumleaf directly. Parents add their children's first names, years and schools; we ask you not to post children's full names, photos or schools in the community.

11. On your device and notifications

Gumleaf saves some things on your phone or browser: your language, sign-in session, children (for offline use) and cached pages. Email reminders can be turned off in My family → Alerts or with the unsubscribe link in each email. Push and phone notifications are only asked for after you turn reminders on, and can be turned off in your device settings.

12. Changes to this policy

This is version 2026-10-25, effective 25 October 2026. When we change it we update the version and ask you to accept it again next time you use Gumleaf.