Privacy & data

Your Work Stays Yours.

Last updated: 7 November 2026

otto is a study coach, not a data business. Here's exactly what we collect, how it's protected, and the promises behind our "data-safe" AI, in plain English.

Private by Default

Every student's notes, quizzes, progress and Otto conversations are visible only to them. Database row-level security enforces this on every request, so one student can never see another's work.

Never Used to Train AI

Otto runs on Anthropic's Claude API. Your work is used only to answer you in the moment. It is not used to train Anthropic's models, and we do not train any models on student data.

Built Not to Cheat

Otto coaches you to the answer and won't complete your actual assessments. That protects the integrity of your marks and keeps otto something schools can trust.

Never Sold

We never sell student data, and no study content — your notes, quizzes or Otto conversations — ever reaches an advertiser. The one thing that does go to Meta is a scrambled version of your email when you subscribe, so we can tell which ad worked. That's it, and it's spelled out below.

Who we are

otto is operated by studywithotto (ABN 89 774 636 516), based in Australia. We are the entity responsible for the personal information handled through the otto app and website, in line with the Australian Privacy Principles. You can reach our privacy contact at hello@studywithotto.com.

What we collect

Only what's needed to coach a student's study:

  • Account: name, email, year level and the subjects being studied.
  • State at sign-up: which state your internet connection appeared to be in when you created your account — Victoria, New South Wales, elsewhere in Australia, or overseas. We use it to set you up for the right certificate (VCE or HSC) without asking, and we keep it so we can check that we got it right. We do not record your IP address, your town or your location at any other time.
  • Parent or guardian email: only if a student chooses to add one, so we can send a short weekly progress digest. Leave it blank and we send nothing.
  • Study material: notes, handouts and past papers a student chooses to upload, which we turn into lessons and practice.
  • Activity: quiz results, topic mastery, study sessions, timetable and the questions asked of Otto, used to show progress and pick what to study next.

How Otto (our AI) handles your work

Otto is powered by Anthropic's Claude. When a student asks a question, the relevant context is sent to the Claude API to generate a reply, and that's it. Under Anthropic's API terms, that content is not used to train their models. We also never train our own models on student data.

Otto is deliberately built to teach, not do the work for you. It explains, guides and checks understanding, and it declines to complete assessments, so a student's marks stay their own.

How it's kept secure

  • Data is stored with our infrastructure provider (Supabase) and encrypted in transit.
  • Row-level security is enforced on every table: a student's data is only ever readable by that student's own logged-in account.
  • Access to the account is protected by the student's login.

Where your data is stored (overseas disclosure)

Your data is stored by our infrastructure provider, Supabase, on servers located in Singapore. Your questions to Otto are processed by our AI provider, Anthropic (Claude), on servers located in the United States. By using otto you consent to your personal information being disclosed to and stored by these providers overseas. We take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles.

Cookies, analytics & advertising

We use essential cookies to keep you logged in, and analytics tools (Google Analytics and the Meta pixel) to understand how people find and use otto. We also keep our own count of which pages on this website are visited, using a random visitor id in a cookie that is not linked to your name or account. These may set cookies and collect usage and device information.

Advertising measurement goes one step further, and we'd rather be specific than vague about it. When someone starts a paid subscription, we send Meta a one-way scrambled (hashed) version of their email address and account id, together with the amount paid, so we can tell which ad led to it. Meta cannot read an email address back out of the hash, but it can match it against an account it already holds. We do not send your notes, your quizzes, your conversations with Otto, or anything about how you study.

None of these tools can reach your study content. You can control cookies through your browser settings, and you can email us to have your account left out of advertising measurement entirely — we'll do it, and it changes nothing about your access to otto.

How long we keep it

We keep your personal information for as long as your account is active and as needed to provide otto. If you delete your account, we remove the associated personal data within a reasonable period, except where we're required to retain limited records (for example, transaction records for tax and accounting) or where data has been de-identified.

Students under 18

otto is built for VCE and HSC students, and many of them are under 18. We collect only what's needed to provide the study coaching described here — we don't ask for your date of birth, your home address or your phone number.

We never sell student data, and no study content ever reaches an advertiser. Our own advertising is targeted at adults aged 18 and over, though we know younger students find otto and sign up. The advertising measurement described above is the only place a student's information touches an advertising platform, and you can ask us to exclude any account from it.

If you're a parent or guardian with questions about your child's information — including asking us to delete it, or to keep their account out of advertising measurement — contact us at the email below and we'll act on it.

Access, correction & complaints

You can see everything otto holds about you inside the app, and can correct it, export it, or permanently delete your account and its data at any time. If you have a privacy concern, email us and we'll respond within a reasonable time. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

For schools

A student can join a teacher's class with a code. When they do, teachers at their school who use otto (and whom we have verified as teachers) can see that student's answers to in-class checks and their progress in that class's subject: topic mastery, quiz results, when they last studied it, and SAC marks they record. Nothing else in their otto is shown. Students are told this before they join and can leave a class at any time in Settings.

Questions students ask otto in a class subject can be summarised for those teachers as anonymous themes: written by otto in its own words, never quoted, never with a name, and only shown once at least three different students have asked about it. Other students never see anyone's results. A student can answer an in-class check with just a first name and no account; that answer is seen only by the class's teacher.

We're happy to work through a data-processing agreement with any school as part of onboarding.

Questions

Email us at hello@studywithotto.com and we'll get back to you.

This is otto's privacy policy, written in plain English and covering how we handle personal information under the Australian Privacy Principles. We may update it from time to time; the "last updated" date above reflects the current version, and material changes will be notified in the app.