Privacy Policy — WritePath Education (United States)

Effective date: 14 October 2026

Which edition applies to you: this is our United States policy — it applies to families who live in the US. If you live anywhere else, our main Privacy Policy applies: writepatheducation.com/policies/privacy-policy.

WritePath Education is an online English program for students in Grades 5–12. Many of our students are under 13, so this policy is written to do two jobs at once: it is our privacy policy for everyone, and it is our children's privacy notice under the U.S. Children's Online Privacy Protection Act (COPPA). We have tried to write it the way we write everything — plainly, so you can actually read it.

1. Who we are

WritePath Education is operated by GISE Australia Pty Ltd, trading as WritePath Education (ABN 70 664 663 049), an Australian company.

• Email: hello@writepatheducation.com — a person reads this inbox.
• Mail: PO Box 772, Gungahlin ACT 2912, Australia
• Phone: +61 450 577 061

For everything in this policy, we are the "operator" collecting information through our website and program, and the responsible entity is GISE Australia Pty Ltd.

2. The short version

• A parent builds every account. Children cannot sign up themselves. You register each child, you pay (or start the free trial), and you can see everything your child receives from us.
• We collect little, and we say exactly what. For a child: name, email address, grade, the work they submit, and the marks and feedback we produce on it. No date of birth, no address, no photo, no social profile.
• Your child's writing is not kept on our servers. Feedback is delivered by email, and the email is the family's copy. The narrow exceptions are listed in §6 — journals, a tutor link you set up yourself, and our free writing test, each with its own short clock.
• We never sell personal information, we show no third-party advertising, and our learning pages carry no third-party analytics or ad trackers at all.
• AI helps mark the work; it doesn't know who wrote it. Marking requests carry the task, the marking key, the grade band, and the writing — not your child's name or contact details (§7).
• You are in control. You can review your family's data, have it deleted, or stop collection at any time (§11).

The rest of this policy is the detail behind those sentences.

3. How WritePath accounts work

WritePath memberships are parent-registered. A parent (or legal guardian — "parent" throughout this policy) creates the membership, registers each child on it, and manages it from their own account. The information we hold about a child is information the parent gave us at registration, plus the record of the child's own work in the program. Children have no profile to fill in, no public presence, and no way to add information about themselves beyond doing their schoolwork.

We direct our marketing to parents. Our learning pages — the module pages where students read, write, and submit — are built for students to work on, and we treat all learner data as children's data regardless of the student's age.

4. The information we collect

About you (the parent)

• Your name and email address, and — if you choose — a separate "feedback email" address where copies of your child's feedback are sent.
• Your subscription details: plan, status, order numbers, and the subscription identifiers our commerce platform assigns. Payments are processed by Shopify and its subscription billing partner; your card details go to them, not to us. We never see or store your full card number.
• If you signed up through an ad or a link, the campaign parameters and the page you landed on, so we know which of our marketing works.
• Your requests and correspondence with us — refund requests, plan changes, emails to hello@.

About your child (provided by you)

• First and last name, email address, and grade (Grade 5–12). That is the whole profile. We do not collect a date of birth, address, phone number, photograph, or anything else about your child, and we never ask a child for more information than the program reasonably needs — participation is not conditioned on giving us more.

From your child's participation (the work itself)

• Submissions: answers to daily quizzes and the text of writing tasks, at the moment of marking. What happens to the writing afterwards is §6 — for most work, it is not retained.
• Results: marks, the written feedback we produce, skill-level scores, word counts, and the type of writing — the record that powers your child's progress page and, if you link a tutor, their reports.
• How the work was produced: for writing tasks, simple signals such as time actively writing, whether text was typed or pasted in, and an AI-authorship estimate. These exist for one reader: you. They appear in the parent copy of the feedback so you can see how the work happened. The estimate is exactly that — an estimate, shown as context, never a determination or an accusation, and we never use it to punish a student.
• Safety review: if a piece of writing raises a serious concern about a child's safety or wellbeing, it may be flagged for same-day review by a person, and we may contact you directly instead of sending the usual feedback.

From our free tools (before you have an account)

• Our free tests — the English Competence Test and the Writing Skill Level Test: the email address the report should go to (a parent, or a tutor working with the family with the parent's permission — consent always comes from the parent), your child's first name and grade, the answers or writing your child submits, anything you write in the optional concern box, and the timing of the sitting (when it started, when it finished, and whether it ran over the allotted time — shown in the report as context, never punished). If you choose "send the link to the child," your child's email address is used to deliver that link and for nothing else. Results and submissions are kept briefly (§10), and every report carries a one-click link that deletes them immediately.
• Open sample lessons: anyone can read our sample modules. If a sample quiz or writing task is submitted, we collect the name and email address typed into the form, the answers, and the mark — used to send that one feedback email and a short follow-up series with a one-click unsubscribe. Sample submissions are not linked to any account. Samples are intended to be sent with a parent's email address.

Collected automatically

• On our marketing pages (the pages that describe and sell the program): standard Shopify analytics, and Google measurement tags that tell us whether our own ads led to a signup. Your approximate country may be detected so we can suggest the right store region and currency.
• On our learning pages (where students actually work): no third-party analytics, no advertising trackers, no pixels. The only measurement is our own — the time-on-task and writing signals described above, which go to us alone and surface only in your feedback email.
• Cookies: Shopify sets the cookies any online store needs (sign-in, cart, checkout, security). Our marketing tags set measurement cookies on marketing pages only. Your browser can block or clear cookies; the learning experience does not depend on marketing cookies.

From educators, if you use the tutor program

Tutors who join our Educator Partner Program give us their own (adult) professional details. A tutor sees a child's information only if you connect them (§8).

5. Parental consent — how we get it, and how you take it back

Because a parent supplies every piece of a child's profile, consent is built into the front door rather than bolted on:

• Free trial: the registration form is completed by the parent and includes a required consent statement; we store the exact text you agreed to and the form version, and we confirm the registration by email to your address. If you did not start that trial, reply to that email or write to hello@writepatheducation.com and we will delete the registration.
• Paid membership: you register each child from your own signed-in account after checkout, giving the same consent; the payment transaction verifies that a parent, not a child, is at the wheel.
• Withdrawing consent: at any time, you can stop further collection and use of your child's information by removing the child from your plan or cancelling (both self-service), or by emailing us. §11 covers deletion.

We will not knowingly collect personal information from a child without parental consent. If we learn that we hold information collected from a child without it — for example, a child who submitted a sample with their own email address — we will delete it.

6. Your child's writing — our retention posture, stated plainly

This is the part of our design we most want parents to know, so here it is in full.

Daily quiz answers and writing tasks are not retained on our servers once marking is complete and the feedback email is confirmed delivered. The feedback email — which contains the work, the marks, and the full written feedback — is the family's durable copy. What stays with us is the results record (marks, feedback text, skill scores, word count, writing type), which powers the progress page. If a feedback email fails to deliver, the submission is held and flagged until a person resolves it, so a delivery failure never silently destroys your child's work.

The exceptions, exactly:

1. Trio Journals. Journal entries are the product — they are retained so the journal works, and they fall under the deletion clocks in §10 and your deletion rights in §11.
2. A tutor link you created. If you connect an educator to your child (§8), the child's submissions are mirrored into that tutor's toolkit so they can teach from real work. The mirror is purged on a rolling monthly cycle and the link ends the moment either side ends it.
3. Our free tests. Test submissions — the Writing Skill Level Test piece, and English Competence Test answers including their short written responses — are kept for a short period (§10) so we can answer your questions about the report, with a one-click delete in every report.

We do not use your child's writing to train AI models, and by deliberate design we keep no library of student writing that could train one.

7. AI-assisted marking

Marking at WritePath is done by an AI model working against teacher-authored marking keys and criteria — the model applies our teachers' standards; it does not invent its own. To do this, each marking request is sent to our AI provider (currently OpenAI) containing: the task or question, the teacher's marking key, your child's grade band, the skill being assessed, and the writing or answers themselves. The request does not include your child's name, email address, or any account details. (One nuance: in the free Writing Skill Level Test, the optional "concern" box you fill in is passed to the assessor verbatim so it can be answered directly — write it without personal details if you prefer.)

We send student work to our AI provider solely to produce the mark and feedback. We do not use student work to train AI models, and we keep no store of it that could be used that way.

8. When information is shared — the complete list

We share personal information with no one for their own marketing, ever, and we do not sell it or trade it. The complete list of recipients:

• Service providers who run our infrastructure, bound to use the data only to provide their service to us: Shopify (our store, checkout, and customer records) and its subscription billing partner Simplee; Google (the Workspace tools our program runs on — mail, forms, spreadsheets, and application scripts); OpenAI (AI marking, as described in §7). Program email is currently delivered through Google's infrastructure; if we adopt a dedicated email delivery service, we will add it to this list and let you know before it carries your family's email.
• An educator, only if you connect one. The tutor link is created by you, accepted by the tutor, and visible on your account. A linked tutor sees that child's submissions, results, and progress reports — nothing about your other children, and nothing about you beyond what the link needs. Either of you can end it at any time, and the tutor's mirrored data is purged on a rolling monthly cycle.
• Authorities or parties we are legally required to answer — a lawful subpoena, court order, or a genuine emergency involving a child's safety.
• A successor business, if WritePath is ever sold or merged — under this policy's protections, and we would notify you.

That is the whole list.

9. How we use information

To run the program: registering and gating access; marking work and sending feedback to your child and to you; building the progress page; running the journal; producing tutor reports where you have linked one. To run the business: billing through our commerce platform; answering your requests; sending service messages (welcome, expiry, plan changes, deletion warnings). To tell parents about WritePath: follow-up email series after a free trial, test, or sample — to parents, never marketed to children, and every marketing email has a working one-click unsubscribe. To keep the service safe and honest: abuse prevention (rate limits, bot checks), the safety review in §4, and fraud protection. To comply with law.

10. How long we keep things — the actual schedule

We keep personal information only as long as the program needs it, on these clocks:

Information	Kept for
Daily writing and quiz answers	Not retained once the feedback email is confirmed delivered (§6)
Results records (marks, feedback text, skill scores)	While the child has access; deleted about 30 days after access ends — paid and complimentary memberships get a warning email at day 23 first
Trio journal entries	While the child has access; deleted on the same 30-day clock
Child's profile (name, email)	De-identified 12 months after access ends — name and email are replaced with anonymous placeholders and the child's store record is deleted
Tutor-mirror data (linked students only)	Rolling purge, roughly the last one to two months
Free tests (English Competence Test, Writing Skill Level Test)	Up to 6 months, then answers, writing, name, and results are purged automatically; one-click delete available immediately in every report, and test links sent to a child's email have that address cleared once the link expires
Writing-effort signals held in processing queues	Cleared on delivery; residual telemetry stripped within 30 days
Copies of feedback in our own sent-mail	Purged after 30 days
Your account, order, and billing records	Kept while your account exists and then as required for tax, accounting, and legal purposes — deleting a child never touches your billing history

Re-subscribing before a clock runs out stops the deletion, so a returning family keeps its history.

11. Your rights as a parent

For your child's information, U.S. law (COPPA) gives you three rights, and we extend them without charge and without hoops:

• Review: ask us and we will send you an export of the personal information we hold for your family, by email, in a machine-readable file.
• Delete: ask us and we will delete your child's personal information and work. Deletion is confirmed to you by email. The Writing Skill Level Test also has an instant, self-service delete link in every report.
• Refuse further collection: remove a child from your plan or cancel your membership (both self-service from My Account), or tell us to — we will stop collecting from that child immediately, and the §10 clocks then run on what remains.

We may not require your child to hand over more information than participation reasonably needs — and we don't.

To exercise any of these, email hello@writepatheducation.com from the email address registered on the account; that address match is how we verify it's you before releasing or deleting anything. If you write from a different address we will take reasonable steps to confirm you are the account parent first.

12. U.S. state privacy rights

Some U.S. state privacy laws (such as the California Consumer Privacy Act) grant residents rights to access, correct, delete, and port their personal information, to opt out of the sale or sharing of it and of targeted advertising, and to not be discriminated against for exercising those rights. Several of those laws apply only to businesses above certain size thresholds, which we may not meet — but the substance costs us nothing to honor, because our practices already sit inside it: we do not sell personal information, we do not share it for cross-context behavioral advertising, we show no targeted advertising, and we use no sensitive-category data. Any U.S. resident (parent or educator) can exercise access, correction, deletion, and portability by emailing hello@writepatheducation.com, and we will not treat you differently for asking. If you are a California resident and believe we have fallen short, you may also contact us to appeal, and we will answer within 45 days.

13. Where your information lives

We are an Australian company: your information is processed in Australia, and by the U.S.-based service providers named in §8 (Shopify, Google, OpenAI) in the United States and on their global infrastructure. Wherever it is processed, this policy governs what we do with it, and our handling of Australians' and Americans' data alike is anchored in the Australian Privacy Act's requirements — we do not lower the bar for either audience.

14. Security

Access to accounts and learner pages is controlled by per-customer signed tokens; registration forms are protected against bots and abuse; secrets are held in managed configuration, not code; and staff access is limited to the people who run the program. Our infrastructure providers (Shopify, Google) encrypt data in transit. Just as important is what isn't there to breach: no card numbers, no dates of birth, no addresses for children, and — for most work — no stored writing. No online service can promise perfect security, so we promise the honest version: we minimize what we hold, and if a breach ever put your family's information at risk, we would tell you promptly and plainly.

15. Changes to this policy

If we change this policy in a way that matters — new categories of data, new recipients, new uses — we will email the parent address on every active account before the change takes effect, and where the change involves children's information in a way that requires fresh consent, we will ask for it rather than assume it. The effective date at the top always tells you when this page last changed.

16. Talk to a person

Questions, requests, or something in this policy that doesn't match your experience: hello@writepatheducation.com. A person reads it, and privacy requests are handled by the people who actually run the program.