Atarly
ATAR Calculator Features Support Privacy Terms
Download on theApp Store

Privacy Policy

Last updated: 22 July 2026

We built Atarly to help VCE students hit their goals. Your privacy matters — here's exactly how we handle your data, in plain English. Governed by the Australian Privacy Act 1988 (Cth).

1About this policy

This Privacy Policy ("Policy") explains what personal information the Atarly mobile application ("App") collects, how it is used, where it is stored, and the choices and rights you have. By creating an account or using the App you confirm you have read and understood this Policy.

This Policy is written to comply with the Australian Privacy Act 1988 (Cth), the thirteen Australian Privacy Principles (APPs), the Notifiable Data Breaches scheme, and Apple's App Store requirements for privacy disclosures.

The rules for using the App (subscriptions, referral codes, acceptable use, disclaimers) are in our Terms of Use, available in the App under Settings and at atarly.app/terms. This Policy and your use of the App are governed by the laws of Victoria, Australia.

If you do not agree with this Policy, please do not create an account or use the App.

2Who we are

The App is operated by Atarly ("we", "us", "our"), an Australian business.

ABN: 98 510 784 300
Contact: support@atarly.app
Location: Melbourne, Victoria, Australia

We are a small independent developer team. We are not affiliated with, endorsed by, or connected to the Victorian Curriculum and Assessment Authority (VCAA), the Victorian Tertiary Admissions Centre (VTAC), the Australian Curriculum, Assessment and Reporting Authority (ACARA), or any school, university, TAFE, or government body.

3Your account — what we collect when you sign up

The App requires an account. When you sign up we collect:

  • Email address — used to verify your account, let you sign in, and send essential account emails (verification links and password resets). We do not send marketing email.
  • Password — you never share it with us in readable form. It is stored only as a secure cryptographic hash by our authentication provider (Supabase Auth). We cannot see or recover your password.
  • Display name and school — your school is optional and you can hide it from other users at any time (Settings → Profile settings → Show my school).
  • Year level (Year 11 or Year 12)
  • A unique @username that you choose — visible to other users
  • A referral code — a randomly generated 5-character code attached to your account

To keep accounts secure, an account can be actively signed in on one device at a time. We store a device identifier against your account to enforce this; signing in on a new device signs the previous one out.

4Signing in with Apple or Google

Instead of a password you can create your account with Sign in with Apple or Sign in with Google. If you do:

  • We receive only your email address and (on the very first sign-in with Apple) your name. We never receive your Apple or Google password, and we get no access to your Apple or Google account, contacts, files, or any other data held there.
  • Apple's Private Relay: if you choose "Hide My Email", Apple gives us a random relay address (…@privaterelay.appleid.com) instead of your real one. That works perfectly with the App — we use it only for essential account emails, and we never attempt to unmask it.
  • Apple shares your name only on the first ever authorisation. We save it then as your display name; you can change it any time in Settings.
  • The sign-in is verified by an identity token passed to our authentication provider (Supabase). We store the resulting account identifier, not the token.

You can revoke the App's access at any time: iOS Settings → your name → Sign-In & Security → Sign in with Apple, or your Google Account's security settings. Revoking access does not delete your Atarly account or data — to do that, use Settings → Delete account.

5Data synced to your account (cloud save)

Your account is your save file. The study data you create in the App is automatically backed up to your account and restored when you sign in — including if you get a new phone. This includes:

  • VCE subjects, subject rankings, target and desired study scores
  • SAC scores, assessment weights, goals, and dates you enter
  • Your ATAR target and calculator settings
  • Tasks, calendar events, and custom categories
  • Study timer logs, streak days, points, and achievements
  • Daily balance reviews and journal entries (mood, productivity, notes)
  • Flashcards you create
  • App preferences and settings (including your focus-mode blocked-apps list, backed up as part of your settings)

This data is transmitted over encrypted connections (HTTPS/TLS), stored encrypted at rest, and protected by row-level security so that it can only be read by your account. We do not read, review, or use the content of your study data for anything other than operating the App for you.

6What stays on your device only

Some things are never uploaded:

  • Notification schedules — every notification the App sends (reminders, alerts, motivational messages) is scheduled locally on your device. We do not run a push-notification server and no notification data leaves your phone.
  • Focus Mode choices — which apps you block is stored as an opaque token that neither we nor anyone else can decode, and app-usage data never leaves your device.

Signing out of the App removes your data from that device; it stays safely in your account's cloud backup until you sign in again or delete your account.

7What other users can see

Social features are built to share as little as possible:

  • Friends you have accepted, and users on leaderboards, can see: your display name, your @username, your profile photo (if you set one), your points total, and your school (only if "Show my school" is on).
  • Leaderboards (school and global) show only users with a public profile. You can turn "Public profile" off at any time (Settings → Profile settings) to be hidden from leaderboards.
  • Other users can send you a friend request only by typing your exact @username.

Other users can NEVER see your email address, SAC scores, study scores, ATAR estimates, tasks, calendar, journal entries, balance reviews, or any academic data. We will never share identifiable academic or personal data between users.

8Referral codes

Your account includes a randomly generated referral code you can share. When another user redeems your code, both accounts receive one week of complimentary premium access.

To enforce the program's limits (each code redeemable by a maximum of 2 accounts; each account may redeem only one code ever), redemptions are recorded on our servers, linking the redeeming account to the code owner's account. No other personal information is exchanged between the two accounts — the other user never sees your email or study data, only that a code was redeemed.

9How we use your information

We use the information described above solely to:

  • Operate the App's features: ATAR calculator, SAC tracker, task manager, schedule, study timer, focus mode, balance reviews, journal, flashcards, achievements, friends and leaderboards
  • Back up your data to your account and restore it when you sign in
  • Send essential account emails (verification and password reset)
  • Show your profile to friends and leaderboards as described in this Policy
  • Manage your subscription entitlements and referral rewards
  • Respond to support requests you send us
  • Keep the App secure, including enforcing one-device sign-in and preventing referral abuse

We do not sell, rent, or trade your personal information. We do not use it for advertising or behavioural profiling. We do not send marketing communications.

10Photo library access

If you choose to set a profile picture, the App requests access to your device's photo library.

  • Photo access is used only at the moment you select or change a photo — no other photos are ever accessed, scanned, or uploaded
  • The single photo you choose is uploaded to our secure storage so it can be shown alongside your name wherever your profile appears (friends lists, leaderboards, and groups)
  • You can change or remove your profile photo at any time in Settings — removing it permanently deletes the image from our servers
  • Deleting your account also deletes your profile photo

To revoke access at any time: iOS Settings → Privacy & Security → Photos → Atarly → set to "None".

11Notifications

The App asks permission to send notifications. If granted, the App may schedule:

  • Study reminders — before planned study blocks on your schedule
  • Streak reminders — a daily prompt to keep your study streak going
  • SAC & exam alerts — heads-up before assessments you entered, and a good-luck message on the morning of
  • Daily motivation — a motivational message at a varying time each day, with an extra nudge on days with little logged study
  • Check-ins — a morning prompt to rate your sleep and plan the day, and an evening wind-down before your set bedtime
  • Focus session alerts — progress updates during a study session and warnings before a break ends
  • Billing reminders — if you start a free trial, reminders before it converts to a paid subscription

All notifications are generated and scheduled locally on your device from your own data. We do not use third-party push-notification services and no notification content is transmitted to us.

To turn off individual types: Settings → Notifications in the App. To turn off all notifications: iOS Settings → Notifications → Atarly. Disabling notifications does not affect access to any feature.

12Screen Time and app blocking (Focus Mode)

Atarly includes an optional Focus Mode that restricts access to distracting apps while you study, using Apple's Family Controls and Managed Settings frameworks under an entitlement granted by Apple.

  • You personally choose which apps to block — we cannot see the full list of apps installed on your device
  • Restrictions are enforced entirely by iOS on your device; no app-usage data is transmitted to us
  • Focus sessions require your explicit activation — we never enable restrictions automatically
  • You can remove restrictions at any time from within the App or iOS Settings → Screen Time
  • Your chosen blocked-apps list is backed up with your settings so it survives reinstalls

13Study timer and study log

The study timer records the duration of completed focus sessions (minutes per day). This log powers your streaks, achievements, points, and study history, and is backed up to your account like your other study data.

During a session the App does not monitor, record, or transmit your screen activity, app usage, or anything else about what you are doing — it only times the session you started.

14ATAR prediction disclaimer

ATAR estimates, study-score estimates, and study plans shown in the App are mathematical models based on the data you enter and publicly available historical scaling data. They are provided for motivation and planning only and are not academic advice or a promise of results. Actual ATARs are determined solely by VCAA and VTAC.

Do not make enrolment, subject-selection, or career decisions based only on the App's numbers. Always refer to official VCAA and VTAC publications. See our Terms of Use for the full disclaimer.

15Subscriptions and payments

Premium features ("Locked In") are sold as an auto-renewing subscription through Apple's App Store.

  • All payments are processed exclusively by Apple. We never see, receive, or store your payment card details or any financial information.
  • We use RevenueCat, a subscription-management service, to verify purchases and unlock premium features. RevenueCat receives an anonymous app-user identifier and purchase receipt information from Apple (product, price, renewal status) — never your payment details.
  • Manage or cancel anytime: iOS Settings → your name → Subscriptions, or the Manage Subscription screen in the App.
  • Refunds are handled by Apple at reportaproblem.apple.com under Apple's policies.

Full subscription terms (pricing, free trials, renewals, cancellation) are in our Terms of Use.

16Third-party services

The App relies on a small set of service providers to function. Each processes only what it needs to do its job:

  • Supabase — our authentication and database provider. Stores your account and synced study data on cloud infrastructure (Amazon Web Services). supabase.com/privacy
  • RevenueCat — subscription entitlement management (anonymous app-user ID and receipt data only). revenuecat.com/privacy
  • PostHog — product analytics: which features are used and when, tied to your account identifier. Hosted in the European Union. No academic, journal, or financial data is ever sent. See "Product analytics" above. posthog.com/privacy
  • Resend — delivers our account emails (verification, password reset) to your email address. resend.com/legal/privacy-policy
  • Apple — App Store distribution, payments, Sign in with Apple, and iOS frameworks. apple.com/legal/privacy
  • Google — Sign in with Google, if you choose it (email address and basic profile only). policies.google.com/privacy
  • Expo / React Native — the frameworks the App is built with; may collect anonymised SDK diagnostics. expo.dev/privacy

These providers act as our processors: they may only handle your information to perform the service we engaged them for, and are contractually barred from using it for their own purposes.

We do not integrate advertising networks, social-media tracking SDKs, or data brokers. We do not sell or share your personal information for advertising, and we do not track you across other companies' apps or websites. If we add a new service that processes personal information, we will update this Policy before it goes live.

17Product analytics (PostHog)

We use PostHog, a product-analytics service, to understand how the App is used so we can fix what's broken and build what students actually need. We deliberately keep this to the minimum.

What we send to PostHog:

  • That a specific action happened, and when — currently: completing signup (including whether a referral code was used), a paywall being shown (and which trigger showed it: finishing onboarding, tapping a locked feature, the Lock In button in Settings, or the periodic app-open prompt), and the outcome of that paywall (purchased, dismissed)
  • Screen names you navigate to within the App
  • Your account identifier, so we can tell that ten events came from one student rather than ten students. This is the same random ID your account already uses — it is not your email or name.
  • Standard technical context the SDK collects: app version, build number, device model, operating-system version, locale, timezone, and a randomly generated device/session identifier.

What we NEVER send to PostHog:

  • Your academic data — SAC scores, study scores, subjects, ATAR targets or estimates
  • Your journal entries, balance reviews, mood or sleep ratings, tasks, calendar events, or flashcards
  • Your points or coin balances and streak values (we record only that a points-related event occurred, never the values)
  • Your email address, password, display name, @username, school, or profile photo
  • Your blocked-apps list or any Screen Time / app-usage data
  • Any payment or financial information

Data is sent to PostHog's European Union servers (eu.i.posthog.com) and is used solely by us to improve the App. PostHog acts as our processor under contract — it does not sell your data, and we do not use it for advertising, ad targeting, or cross-app tracking. We do not use Apple's App Tracking Transparency framework because we do not track you across other companies' apps or websites.

Crash and diagnostic information: standard anonymised crash data may also reach us through Apple (only if you opted in to sharing analytics with app developers in iOS settings) and through our development frameworks. It cannot identify you and is used only to fix bugs.

PostHog's privacy policy: posthog.com/privacy

18Overseas disclosure

Some of our service providers store or process data outside Australia. This means your personal information may be transferred overseas as described in APP 8. Specifically:

  • Supabase — account and study data, on Amazon Web Services infrastructure
  • PostHog — product-analytics events, on servers in the European Union
  • RevenueCat, Resend, Apple, Google, Expo — United States

We only use reputable providers that commit to strong data-protection standards, encrypt data in transit and at rest, and process your information solely on our instructions. Because these recipients are outside Australia, we may not be able to ensure they handle your information in a way that is enforceable under the Australian Privacy Act, and APP 8.1 accountability may not apply to them. By using the App you consent to this overseas handling.

19Reporting other users

If another user's display name, @username, or profile photo is offensive or breaches our Terms of Use, you can report them from their profile in the Friends or Leaderboard screens.

  • A report records who reported whom, the reason you selected (name, photo, or other), and any detail you type
  • We review reports and aim to action them within 24 hours, and may rename, hide, or suspend accounts that breach our Terms
  • Reports are visible only to us — the person you report is never told who reported them
  • Reports are retained after they are actioned so we can identify repeat offenders

Submitting deliberately false or malicious reports is itself a breach of our Terms.

20What we never collect

To be completely unambiguous, Atarly does NOT collect, and has no technical ability to collect:

  • Your location — the App requests no location permission of any kind
  • Your contacts, calendar outside the App, photos other than the one you deliberately pick, microphone, or camera
  • Your browsing history, or what you do in any other app
  • Your payment card details, bank details, or any financial information — Apple handles all payments
  • Health, biometric, racial, religious, political, or sexual-orientation information. Your sleep and mood ratings are wellbeing inputs you type into your own private journal; they stay in your account, are never shared with other users, and are never sent to analytics.

We do not build advertising profiles, we do not use your data to train machine-learning models, and we do not sell data to anyone, ever.

21Data storage and security

We take reasonable steps as required by APP 11 to protect your information:

  • All traffic between the App and our servers uses HTTPS/TLS encryption
  • Data is encrypted at rest on our database provider's infrastructure
  • Row-level security ensures each account can only access its own data
  • Passwords are stored only as secure cryptographic hashes
  • Server credentials and administrative access are restricted and never shipped inside the App

Our recommendations for your device: keep iOS up to date, use Face ID/Touch ID or a passcode, and don't share your login details.

Data breach notification: if a data breach occurs that is likely to result in serious harm, we will notify affected users and the OAIC as required under the Notifiable Data Breaches scheme (Privacy Act 1988, Part IIIC).

22Data retention and deletion

Your account data is retained while your account exists, so your save file is always there when you sign in.

Delete your account: Settings → Delete account. This permanently deletes your account and its data from our systems, including your profile, synced study data, and friendships. Your @username becomes available again and cannot be recovered.

Other controls:

  • Sign out (Settings) — removes all data from the device you signed out of
  • Delete individual items (tasks, events, journal entries, SAC scores) anytime within the App
  • Remove your profile photo — Settings → tap your photo

Deleting your account does NOT cancel an active subscription — manage subscriptions in iOS Settings → your name → Subscriptions. Referral redemption records may be retained in de-identified form to enforce program limits.

Analytics events already sent to PostHog are retained for up to 12 months and are then automatically deleted. If you delete your account, email support@atarly.app and we will erase your analytics history too — deleting your account removes the identifier that links those events to you, and we will purge them on request.

We may retain limited records for longer where the law requires it (for example, tax records relating to a purchase) or where we need them to resolve a dispute or enforce our Terms.

For any deletion request you can't complete in-app, email support@atarly.app and we will action it within 30 days.

23App Store privacy label — how it maps

Apple requires every app to declare its data practices on its App Store listing. Here is exactly how our declaration matches this Policy:

Data linked to you (tied to your account):

  • Contact info — your email address (account creation and essential emails)
  • User content — the study data, journal entries, and profile photo you create, stored as your cloud save
  • Identifiers — your account identifier and a device identifier for one-device sign-in
  • Usage data — the product-analytics events described above
  • Purchases — subscription status, via Apple and RevenueCat

Data NOT collected: location, contacts, health & fitness, financial info, browsing history, search history, sensitive info, and audio/photo data beyond the single profile photo you choose.

Data used to track you: NONE. We do not link your data with third-party data for advertising, and we do not share it with data brokers. That is why the App does not show an App Tracking Transparency prompt.

24Age requirements and children's privacy

Atarly is designed for VCE students, typically aged 15–18. You must be at least 13 years old to create an account. If you are under 18, we encourage you to review this Policy and the Terms of Use with a parent or guardian, and the Terms require guardian consent for your use of the App including any purchases.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at support@atarly.app and we will delete the account and its data as quickly as practicable.

We never show behavioural advertising and never share user data — including student data — with advertisers or data brokers, regardless of age.

25Your rights under Australian law

Under the Privacy Act 1988 (Cth) and the APPs you have the right to:

  • Access (APP 12): request a copy of the personal information we hold about you
  • Correction (APP 13): ask us to correct inaccurate, incomplete, or outdated information — most of your information can be corrected directly in the App
  • Deletion: delete your account and all associated server data yourself at any time (Settings → Delete account)
  • Complain: lodge a complaint with us if you believe we have breached the APPs

To exercise any right, contact support@atarly.app. We will acknowledge your request within 5 business days and respond substantively within 30 days.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au · 1300 363 992 · GPO Box 5218, Sydney NSW 2001.

26Changes to this policy

We may update this Policy as the App evolves. The "Last updated" date above and at atarly.app/privacy always reflects the current version.

Material changes — new categories of data collected, new sharing, or changes to your rights — will be announced in the App at least 7 days before they take effect. Minor clarifications may be made without individual notice.

Continued use of the App after a material change takes effect constitutes acceptance. If you disagree with a change, stop using the App, delete your account, and (if applicable) cancel your subscription before the change takes effect.

27Contact us

For privacy enquiries, data requests, or complaints:

Atarly
ABN: 98 510 784 300
Email: support@atarly.app
Location: Melbourne, Victoria, Australia

Response times:

  • General enquiries: within 5 business days
  • Data access, correction, or deletion requests: within 30 days
  • Children's privacy or suspected data breaches: within 24 hours

This Policy is also available at: https://atarly.app/privacy

Atarly

The study-life balance app for VCE students. Built in Melbourne by students who get it.

Download on theApp Store

Now live on the App Store

Legal

Privacy Policy Terms of Use

Company

support@atarly.app ABN 98 510 784 300 Melbourne, Australia

Follow

TikTok Instagram

© 2026 Atarly. All rights reserved. Not affiliated with VCAA or VTAC.