Privacy Policy

1. We respect your privacy

(a)   Preamble Al Pty Ltd respects your right to privacy and is committed to safeguarding the privacy of our customers and website visitors. This policy sets out how we collect and treat your personal information.

(b)  We adhere to the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) and to the extent applicable, the EU General Data Protection Regulation (GDPR).

(c)   "Personal information" is information we hold which is identifiable as being about you. This can include information such as your first and last name, email address or any other type of information that can reasonably identify an individual, either directly or indirectly.

(d)  You may contact us in telephone on (+61) 0404 560 228 or via email on hi@limalabs.io for further information about this Privacy Policy.

2. What personal information is collected

(a)   Preamble Al Pty Ltd will, from time to time, receive and store personal information you submit to our website, provided to us directly or given to us in other forms.

(b)  You may provide basic information such as your full name or email address to enable us to send you information, provide updates and provide our services to you.

(c)   We may collect additional information at other times, including but not limited to, when you provide feedback, when you change your content or email preference, respond to surveys and/or promotions, or communicate with our customer support.

(d)  Additionally, we may also collect any other information you provide while interacting with us and using our services.

2.1 Students:

(a)   If you use our services through your school, then your school will provide the following information about you so that we can create an account for you:

1. Your first and last names
2. Name of your school
3. Your school email
4. Your classes
5. Your school portrait photo (If published on your school profile)

(b)   Your teacher may also contact us on your behalf if there are questions about your personal data or to let us know if there are any problems with our services.

(c)   You may also provide us with your own preferred identification photo to be used as your profile picture which can be uploaded by yourself or by a teacher.

(d)   We may also collect information about you when you contact us for help so that we can answer your questions (including details about your questions and an email address to contact you with the answers, if required.)

(e)   When you visit our website, it will automatically collect some information about you:

1. your answers and results on lessons, homework and quizzes (for example, voice recordings, transcripts and corresponding AI feedback);
2. your use of the website (for example, when you log in and how long you spend completing lessons);
3. your completion of assignments; and
4. details about your device (for example, your internet (IP) address, your location and the type of browser that you use, and its identity in the form of a "cookie").

2.2 Teachers:

(a)   When we sign you and your school up to our services, we will also collect some of your personal information (e.g. first and last names, job and title, school name and address, school ID, email address and contact number, and billing or account details).

(b)  You can optionally configure your profile photo for our services by submitting a profile image and/or bio to us. You can control the visibility of this additional profile data by choosing between "all teachers", "teachers at my school" or "only me".

2.3 Parents:

(a)   We may collect your email address (either directly or via the relevant school), name and details of which student is your child. In some cases, we may also collect login details for you if you log in to our services.

(b)  If you purchase an individual licence for your child to use our services, we will also collect your address and payment information.

3. How we collect your personal information

(a)   Preamble Al Pty Ltd collects personal information from you in a variety of ways, including when you interact with us electronically or in person, when you access our website and when we engage in business activities with you. We may receive personal information from third parties. If we do, we will protect it as set out in this Privacy Policy.

(b)  Third-party data usage Data may be collected by third-party, in the event SSO services are used to login to our services. We may collect from the third-party data such as:

1. Your full name;
2. Your third-party account email address; and
3. Your third-party account profile photo.

(c)   By providing us with personal information, you consent to the supply of that information subject to the terms of this Privacy Policy.

4. How we use your personal information

(a)   Preamble Al Pty Ltd may use personal information collected from you to provide you with information about our products or services. We may also make you aware of new and additional products, services and opportunities available to you.

(b)  Preamble Al Pty Ltd will use personal information only for the purposes that you consent to. This may include to:

1. provide you with products and services during the usual course of our business activities;
2. administer our business activities;
3. manage, research and develop our products and services;
4. provide you with information about our products and services;
5. investigate any complaint; and
6. communicate with you via email.

4.1 Students

(a)  For the purpose of providing services as required by our contract with your school (or under your individual licence) we will use the information that we have collected about you to:

1. maintain a record of your learning on our platform, for example copies of your completed homework assignments or voice recording and transcripts, so that these can be reviewed and marked by AI and your teachers and so that you have a record of your work;
2. keep you updated about your e-learning on our services. For example, to remind you of due dates for homework assignments, to let you know how many of your classmates have completed an assignment, and to update you on your performance in assignments;
3. help your studies by sharing your e-learning progress with your teachers and parents (for example, that you have completed assignments and your scores on assignments);
4. maintain and improve our services. For example, we can use statistical information about how long all students spend on a lesson, or the number of your classmates who have completed an assignment, to make sure that the lesson or assignment is not too simple or difficult. Such information will only ever be used on a grouped basis so that you (or your classmate) will never be identified individually;
5. use the information that our website collects about you to improve your experience while using our services – for example, to identify that it really is you; and
6. identify you when you call us for help on technical problems (for example if you report a problem with our website or the content) or to email you a new password when you have asked for one.

4.2 Teachers

(a)  We will use the information that we have collected about you to provide our services, and to carry out administrative tasks such as managing our relationship with your school and for billings and invoicing purposes, as may be necessary in order to perform our contract with your school.

(b)  We will also use the information to communicate with you where we have a legitimate interest to do so – for example, sending you information about new learning resources and products that are being made available. You can opt out of receiving such communications at any time by clicking the unsubscribe link or following the instructions in the email.

4.3 Parents

(a)  We will use your contact information to keep you updated about your child’s performance on our services, where this option has been exercised either by you or the relevant school.

If you withhold your personal information, it may not be possible for us to provide you with our products and services or for you to fully access our website.

(b)  We may disclose your personal information to comply with a legal requirement, such as a law, regulation, court order, subpoena, warrant, legal proceedings or in response to a law enforcement agency request.

(c)  If there is a change of control in our business or a sale or transfer of business assets, we reserve the right to transfer to the extent permissible at law our user databases, together with any personal information and non-personal information contained in those databases.

5. How we store your personal information

1. Besides information outlined in clause 4.2, we collect, store, and process your data within Australia on Supabase-hosted servers. All data shall be encrypted at rest using industry-standard encryption algorithms (e.g. AES-256). “Encrypted at rest” means that all data written to disk — databases, backups, logs, and file storage — is automatically transformed into ciphertext, such that it cannot be read or modified without access to the corresponding decryption keys. Encryption keys are managed according to Supabase’s standard key-management practices, ensuring that keys are themselves stored securely and rotated in accordance with best practices.
2. You can view Supabase’s full Privacy Policy here: https://supabase.com/privacy.

5.1 Student audio

(a)  We will keep your information for 2 weeks. Once 2 weeks have elapsed, this information will be deleted and removed from our storages.

5.2 Artificial Intelligence

We currently only provide option for a large language model hosted by a third-party provider. You acknowledge and understands that the terms of the third-party provider may govern the use of the artificial intelligence and large language model services or features. Currently, the OpenAI Terms of Service govern the third-party provider-hosted large language model and are available here: https://openai.com/policies/business-terms. Under these business terms, OpenAI will not use business data to train their models as committed to here: https://openai.com/enterprise-privacy.

Your personal data is used solely for the purposes outlined in this Privacy Policy, such as providing and improving our services, personalizing your experience, and communicating with you.

All information used by third-party provider will be stored for only 30 days before being deleted and removed.

5.3 All other data

1. We will keep your information while you are an active user of our services and, provided your school continues to hold a licence, we may keep it for up to 3 years to enable you to reactivate your account and access your learning history as you move between classes. We regularly review our information retention rules to make sure we are not keeping it for longer than we need to, but you can ask us to remove your information at any time (see below for more details).
2. An element of the service that we provide is the ability to track your learning journey across multiple years. In the event that you (or your school) choose not to re-subscribe for an license with us, for example because you are not enrolled for a subject offered by us in a given year, we will retain your account and historic learning data to ensure that if you return in the future, the work you have previously completed is still available and associated with your account. If your account remains inactive for a period of 3 years, we will delete your account and anonymise or delete your learning data so that it can only be used in a non-identifying manner for analysis by your school or to improve our products. You or your school may notify us that you no longer require us to retain past learning data before this 3-year period has passed, in which case we will take this action sooner.

6. Disclosure of your personal information

1. Preamble Al Pty Ltd may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this privacy policy.
2. If we do disclose your personal information to a third party, we will protect it in accordance with this privacy policy.

7. General Data Protection Regulation (GDPR) for the European Union (EU)

1. Preamble Al Pty Ltd will comply with the principles of data protection set out in the GDPR for the purpose of fairness, transparency and lawful data collection and use.
2. We process your personal information as a Processor and/or to the extent that we are a Controller as defined in the GDPR.
3. We must establish a lawful basis for processing your personal information. The legal basis for which we collect your personal information depends on the data that we collect and how we use it.
4. We will only collect your personal information with your express consent for a specific purpose and any data collected will be to the extent necessary and not excessive for its purpose. We will keep your data safe and secure.
5. We will also process your personal information if it is necessary for our legitimate interests, or to fulfil a contractual or legal obligation.
6. We process your personal information if it is necessary to protect your life or in a medical situation, it is necessary to carry out a public function, a task of public interest or if the function has a clear basis in law.
7. We do not collect or process any personal information from you that is considered "Sensitive Personal Information" under the GDPR, such as personal information relating to your sexual orientation or ethnic origin unless we have obtained your explicit consent, or if it is being collected subject to and in accordance with the GDPR.
8. You must not provide us with your personal information if you are under the age of 16 without the consent of your parent or someone who has parental authority for you. We do not knowingly collect or process the personal information of children.

8. Your rights under the GDPR

1. If you are an individual residing in the EU, you have certain rights as to how your personal information is obtained and used. Preamble Al Pty Ltd complies with your rights under the GDPR as to how your personal information is used and controlled if you are an individual residing in the EU
2. Except as otherwise provided in the GDPR, you have the following rights:
   • access your personal information (we will provide you with a free copy of it);
   • to be informed how your personal information is being used;
   • to correct your personal information if it is inaccurate or incomplete;
   • to delete your personal information (also known as "the right to be forgotten"); to restrict processing of your personal information;
   • to retain and reuse your personal information for your own purposes;
   • to object to your personal information being used; and
   • to object against automated decision making and profiling.
3. Please contact us at any time to exercise your rights under the GDPR at the contact details in this Privacy Policy.
4. We may ask you to verify your identity before acting on any of your requests.

9. Hosting

(a) The hosting facilities for our website are situated in Australia. Currently there is no international data transfer.

10. Security of your personal information

1. Preamble Al Pty Ltd is committed to ensuring that the information you provide to us is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.
2. Where we employ data processors to process personal information on our behalf, we only do so on the basis that such data processors comply with the requirements under the GDPR and that have adequate technical measures in place to protect personal information against unauthorised use, loss and theft.
3. The transmission and exchange of information is carried out at your own risk. We cannot guarantee the security of any information that you transmit to us, or receive from us. Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure you that personal information that we collect will not be disclosed in a manner that is inconsistent with this Privacy Policy.

11. Access to your personal information

(a)  You may request details of personal information that we hold about you in accordance with the provisions of the Privacy Act 1988 (Cth), and to the extent applicable the EU GDPR. If you would like a copy of the information which we hold about you or believe that any information we hold on you is inaccurate, out of date, incomplete, irrelevant or misleading, please email us at hi@limalabs.io.

12. Complaints about privacy

(a)  If you have any complaints about our privacy practices, please feel free to send in details of your complaints to support@limalabs.io. We take complaints very seriously and will respond shortly after receiving written notice of your complaint.

13. Changes to Privacy Policy

(a)  Please be aware that we may change this Privacy Policy in the future. We may modify this Policy at any time, in our sole discretion and all modifications will be effective immediately upon our posting of the modifications on our website or notice board. Please check back from time to time to review our Privacy Policy.

14. Website

(a)  When you visit our website

When you come to our website (https://limalabs.io/), we may collect certain information such as browser type, operating system, website visited immediately before coming to our site, etc. This information is used in an aggregated manner to analyse how people use our site, such that we can improve our service.

(b)  Cookies

We may from time to time use cookies on our website. Cookies are very small files which a website uses to identify you when you come back to the site and to store details about your use of the site. Cookies are not malicious programs that access or damage your computer. Most web browsers automatically accept cookies, but you can choose to reject cookies by changing your browser settings. However, this may prevent you from taking full advantage of our website. Our website may from time to time use cookies to analyses website traffic and help us provide a better website visitor experience.

15. Rights and Responsibilities for Parents of Children Under the Age of 13

1. This section of the policy only applies to children under the age of 13.
2. We do not permit children under the age of 13 to create an account or provide us personal information without your or the school's verifiable consent. Such consent may be provided, for example, through teachers providing a secure class join code to permit a student to set up an account. If you believe we have collected information from a child under age 13 without such consent from the school, please contact us at hi@limalabs.io so that we may delete the information as soon as possible.
3. We will not require a child under the age of 13 to provide us with more information than is reasonably necessary to use our site and services.
4. At any time, you may review your child's personal information maintained by us, including requiring us to correct or delete the personal information and/or withdrawing and refusing to permit us from further processing your child's information. You can also refuse to allow us to disclose information to third parties that is not necessary for the use of our site and services. You can do this by sending us an email at hi@limalabs.io. To protect the privacy and security of your child, we may require you to take certain steps to verify your identity.

16. Where you can find more information

1. If you have any questions about our Privacy Policy, please ask your teachers or parents for guidance. Otherwise, you can reach out to us directly at the contact details below and we would be more than happy to help.
2. If you receive marketing communications from us (as further explained in this Privacy Policy), you will always have the option to "unsubscribe" by simply clicking the link in the relevant email or by contacting us.

17. Contact us

1. In relation to your personal data because where you use our services through your school, we will only use your personal data on the instructions of your school to provide you with access to our services.
2. Your school will be what is called a "data controller" so if you have questions about the use of your personal data, you should ask your teachers first. However, you can always contact us at the following details if you do have any questions.

18. Effective date

This policy is effective from 16 July 2025.