Privacy Policy

Daily AI Bites (“Daily AI Bites”, “we”, “us”, or “our”) is operated by an Australian-owned business (ABN 51 559 072 584). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit dailyaibites.com or use our services. By using the service, you agree to the practices described here.

We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where they apply to you, we also act consistently with the EU and UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, as amended by the CPRA (collectively, the “CCPA”).

Information we collect

We collect the following categories of personal information:

• Account information— name, email address, and authentication credentials, managed on our behalf by Clerk.
• Payment information— billing details and transaction records processed by Stripe. We never see or store your full card number; it is handled directly by Stripe.
• Learning data— lessons completed, quiz results, XP, streaks, badges, course enrolment, and other progress data.
• AI tutor interactions— the questions you submit to, and responses you receive from, the AI tutor.
• Usage, device, and log data— IP address, browser and device type, pages viewed, and timestamps, collected automatically to operate and secure the service.
• Communications— messages you send us, including support requests.

How we use your information

We use personal information to:

• provide, maintain, and improve the service and your learning experience;
• create and manage your account and process subscription payments;
• operate the AI tutor and gamification features (XP, streaks, badges);
• send transactional emails (receipts, account and service notices);
• respond to enquiries and provide support;
• detect, prevent, and address fraud, abuse, and security incidents; and
• comply with our legal obligations and enforce our Terms of Service.

Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases: performance of our contract with you (to deliver the service you sign up for); our legitimate interests (to secure, operate, and improve the service), balanced against your rights; your consent (where required, such as optional communications); and compliance with legal obligations. You may withdraw consent at any time where processing is based on consent.

Third-party services we share data with

We share personal information only with service providers who process it on our behalf, under contract, for the purposes described above. These include:

• Clerk — authentication and account management;
• Stripe — payment processing and subscription billing;
• Anthropic — powering the AI tutor;
• Resend — transactional email delivery;
• Cloudflare R2 — media and content storage;
• Upstash — rate-limiting and usage counters;
• our cloud hosting and database providers — running the application and storing data.

Each provider maintains its own privacy policy. We do not sell your personal information, and we do not share it with third parties for their own marketing.

The AI tutor

When you use the AI tutor, your prompts are transmitted to Anthropic to generate a response. Do not submit sensitive personal information, credentials, or confidential data to the tutor. AI-generated responses may be inaccurate or incomplete and are provided for educational purposes only — see our Terms of Service for the applicable disclaimers.

International data transfers

We and our service providers may store and process personal information in countries outside your own, including the United States. Where we transfer data internationally, we take reasonable steps to ensure it is protected, including relying on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses where applicable.

Data retention

We retain personal information for as long as your account is active or as needed to provide the service, and thereafter only as required to comply with our legal obligations, resolve disputes, and enforce our agreements. When no longer required, we delete or de-identify it.

Security

We take reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access, disclosure, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your privacy rights

Subject to applicable law, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, to data portability, and to withdraw consent. Under the Australian Privacy Act you may request access to and correction of your personal information. Under the GDPR you additionally have the right to lodge a complaint with a supervisory authority. Under the CCPA you have the right to know what we collect, to request deletion, to opt out of any “sale” or “sharing” of personal information (note: we do not sell or share your personal information), and not to be discriminated against for exercising your rights.

To exercise any of these rights, email hello@dailyaibites.com. We will respond within the timeframe required by applicable law. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.

Children

The service is intended for general audiences and is not directed to children under 16, and we do not knowingly collect personal information from children under 16. Family plans allow an account holder to invite other people to join under a shared subscription; each member registers and maintains their own account, and the information we collect about them is handled as described in this Policy. If you believe a child under 16 has provided us with personal information, contact us at hello@dailyaibites.com and we will take reasonable steps to delete it.

Cookies

We use strictly necessary cookies for authentication and to keep you signed in. We do not use advertising or third-party tracking cookies. You can control cookies through your browser settings, but disabling necessary cookies may prevent you from signing in or using the service.

Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the service after changes take effect constitutes acceptance of the updated Policy.

Contact us

For any privacy questions, requests, or complaints, email hello@dailyaibites.com.