Privacy Policy

1. Who we are

Pratham Technologies Pty Ltd ("Pratham," "we," "us," "our") builds and operates a family of AI-powered products, including OmniHub, GeneHealth, PAI Affiliate OS, PAI eCommerce OS, REOS, and StudyMate (each a "Product," together the "Products"). This Privacy Policy explains how we collect, use, share, and protect personal information across pratham.au and every Product, unless a specific Product presents its own supplementary notice for something unique to that Product (for example, GeneHealth's health-data handling or StudyMate's children's-privacy practices, both covered specifically below).

We are based in Australia and this Policy is written to meet the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). If you are located outside Australia, additional local rights may apply to you (see "International visitors" below).

2. What we collect

What we collect depends on how you interact with us:

• Contact and sales enquiries — name, work email, company, and whatever you tell us in a contact or partnership form.
• Account and product data — when you sign up for a Product, we collect the information needed to run that account: login credentials (via our authentication provider), billing details (processed by Stripe — we never store your full card number), and the operational data that Product needs to function (for example: clinic intake records in OmniHub, affiliate campaign data in PAI Affiliate, storefront and order data in PAI eCommerce OS, listing and CRM data in REOS).
• Health and genomic data — specifically for GeneHealth. See section 6.
• Children's data — specifically for StudyMate, collected from and about a child only through that child's parent's account. See section 7.
• Technical data — standard web server logs (IP address, browser type, pages visited) generated automatically when you use our sites and apps, used for security and reliability, not for advertising profiles.

We do not buy personal information from third-party data brokers, and we do not sell personal information to anyone.

3. How we use it

• To provide, operate, and improve the Product you use;
• To process payments and manage your subscription;
• To respond to enquiries you send us and follow up on sales/partnership conversations;
• To send you service-related communications (e.g. booking confirmations, billing receipts, security alerts) — these are operational, not marketing, and you cannot opt out of them while your account is active;
• To detect fraud, abuse, and security issues;
• To comply with our legal obligations.

4. AI processing — please read this section

Several Products use third-party AI models (for example OpenAI, Anthropic, or Google) to power features like AI assistants, content generation, and automated analysis. When a Product's AI feature is used, the relevant data is sent to that AI provider to generate a response. We select providers carefully and, where a Product handles sensitive categories of data (like GeneHealth's genomic information), we gate that specific AI use behind your own explicit, revocable opt-in consent inside the Product — it is never on by default for sensitive data.

We do not have a signed Business Associate Agreement (or local equivalent) with every AI provider used across every Product today. Where that matters — principally GeneHealth, discussed below — we tell you plainly rather than overstating our compliance posture.

5. Who we share it with

We share personal information only with the service providers ("sub-processors") that help us run our Products, under contracts that require them to protect it, including:

• Infrastructure: Amazon Web Services, Hetzner, Vercel, Neon, Upstash, Cloudflare
• Payments: Stripe (subscriptions, marketplace/tutor/provider payouts)
• Communications: Resend, Amazon SES, Twilio (transactional email and SMS only — never marketing without your consent)
• AI providers: as described in section 4

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, property, or safety of Pratham, our users, or the public. We do not share personal information across unrelated Products for cross-marketing purposes.

6. Health information (GeneHealth)

GeneHealth handles genomic and health data with extra care:

• Patients use GeneHealth free of charge; providers pay a subscription. We never sell either party's data.
• Genomic data is only used by an AI feature when you have explicitly opted in inside the app; you can withdraw that consent at any time.
• If you deactivate your GeneHealth account, your health/genomic data is permanently deleted approximately 30 days after deactivation — this is an automated process, not a manual one, and it cannot be undone once it runs.
• We are working toward a fully HIPAA/BAA-covered AI processing path for genomic data; until that is complete, we disclose this openly rather than claim a compliance status we haven't fully reached yet.

7. Children's privacy (StudyMate)

StudyMate is designed for use by children (Year 3–4 students) under the direct supervision and account ownership of a parent or guardian. We do not knowingly collect personal information directly from a child independent of a parent's account, and StudyMate contains no advertising, no in-app purchases a child can make unsupervised, and no public profile or open chat with strangers.

• A parent creates and controls the account; a child's activity (missions, chat with the AI tutor, tutor bookings) happens inside that parent-owned account.
• AI tutor conversations are moderated in both directions before being shown, and flagged for parent/human review if anything concerning is detected.
• A parent can export or permanently delete everything StudyMate stores about their account and every child linked to it, at any time, from account settings — this is immediate and self-service, with no grace period.
• If you believe a child has provided us with personal information outside a parent's account, contact us at connect@pratham.au and we will investigate and delete it.

8. Your rights

Depending on the Product and your location, you generally have the right to:

• Access a copy of the personal information we hold about you;
• Correct inaccurate information;
• Request deletion of your account and associated data (self-service in StudyMate; a 30-day automated process for GeneHealth; contact us for other Products);
• Object to or restrict certain processing;
• Lodge a complaint with your local privacy regulator (in Australia, the Office of the Australian Information Commissioner, oaic.gov.au).

To exercise any of these rights, email connect@pratham.au and tell us which Product your request relates to.

9. Security

We use industry-standard measures appropriate to the sensitivity of the data involved — encryption in transit (TLS) everywhere, encrypted credential storage, access controls scoped per tenant/account, and audit logging on sensitive data access (for example, every view of genomic data in GeneHealth is logged). No system is perfectly secure, and we will notify affected users and relevant authorities without undue delay if we become aware of a data breach likely to result in serious harm, as required by law.

10. International visitors

Our infrastructure runs across multiple countries (including the United States, Australia, and the European Union, depending on the sub-processor). By using our Products you understand your information may be processed outside your home country. If you are in the European Economic Area or United Kingdom, you may have additional rights under the GDPR/UK GDPR; contact us and we will address your request under the relevant framework.

11. Changes to this Policy

We will update the "Last updated" date above whenever we make a material change, and where a change significantly affects how we handle health or children's data, we will make a reasonable effort to notify affected users directly (e.g. by email) in addition to updating this page.

12. Contact us

Pratham Technologies Pty Ltd
Email: connect@pratham.au

This policy describes our practices in good faith and is reviewed periodically. If you have questions about how a specific Product handles your data, contact us and reference that Product by name.