Privacy Policy

This policy applies to Smart Biscuits and to every mobile application owned or operated by Smart Biscuits, including ASET Practice, whether accessed on iOS, Android, or through our website at smartbiscuits.com.au. If a specific app requires additional disclosures, those will be provided within the app itself, in addition to this policy.

By creating an account, downloading, or otherwise using any Smart Biscuits app, you agree to the collection and use of information as described here.

We collect the following categories of information:

• Account information — name, email address, and a unique account identifier, created when you sign up or sign in.
• Usage data — features used, session length, screens viewed, and general app diagnostics.
• Practice data — questions attempted, answers submitted, and scores, stored locally on your device (see Section 5). Written responses you choose to submit for AI evaluation are sent to our secure backend, as described in Section 6.
• Device information — device type, operating system version, and crash/error logs, used to maintain app stability.

We do not collect more information than is necessary to provide and improve our apps.

Smart Biscuits apps use Firebase Authentication to manage sign-in securely. ASET Practice supports two sign-in methods, and does not offer email/password accounts:

• Sign in with Apple — Apple may share a verified email address or a private relay address, in accordance with Apple’s own privacy practices.
• Google Sign-In — Google may share your name and email address associated with your Google account.

We never receive or store your Apple ID or Google account password. Authentication tokens are managed entirely by Firebase, and your name and email are supplied to us by whichever provider you choose to sign in with.

We use privacy-conscious analytics tools to understand how our apps are used in aggregate — for example, which features are most popular or where users encounter errors. This data is used solely to improve app quality and is not sold to third parties.

Diagnostic and crash data may include device model, OS version, and anonymized stack traces, helping us identify and fix bugs quickly.

To power features like your quiz history and readiness scores, ASET Practice records which questions you attempt, your selected answers, timing, and correctness. This practice data is stored locally on your device rather than on our servers — it is not synced to Firebase or any Smart Biscuits backend, so it does not sync across devices and is never shared with other users. Uninstalling the app or clearing its app data will permanently remove it.

The question bank itself (the practice questions shown in the app) is delivered from Firestore and cached on your device for offline access, but this is separate from — and does not include — your personal attempt history.

When you submit a written response for the Writing Practice feature, your submission is sent to a secure backend service that uses an AI model to generate structured feedback on structure, clarity, grammar, and persuasive technique.

• Submissions are transmitted over encrypted connections.
• Written responses are used only to generate your feedback and to improve the quality of our evaluation system.
• We do not use your written submissions to train third-party, publicly available AI models.

We use the information we collect to:

• Provide, operate, and maintain our apps;
• Personalize your practice experience and track progress;
• Generate AI-evaluated feedback on written responses;
• Diagnose technical issues and improve reliability;
• Communicate with you about your account or support requests; and
• Meet legal, regulatory, and App Store / Google Play compliance obligations.

We do not sell your personal information. We share information only with service providers who help us operate our apps, under appropriate confidentiality and data protection terms, including:

• Firebase / Google Cloud (authentication, the practice question database, support request storage, and app diagnostics);
• Apple (for Sign in with Apple and App Store services); and
• Our secure AI backend provider (for written-response evaluation).

We may also disclose information where required by law or to protect the rights, safety, and security of Smart Biscuits and our users.

Your practice data (questions attempted, answers, and scores) lives on your device, as described in Section 5, and is retained there for as long as the app remains installed — we do not hold a copy on our servers. Account information and any support requests you submit are retained for as long as your account remains active, or as needed to provide our services. If you request deletion, we will remove your data as described in Section 10, except where retention is required for legal or legitimate business purposes.

Because most practice data is stored only on your device, uninstalling ASET Practice (or clearing its app data) immediately and permanently deletes your local quiz history and progress — you can also delete individual saved results at any time from Past Results within the app.

To request deletion of your account itself — your sign-in credentials and any support requests we hold — email support@smartbiscuits.com.au from your registered email address with the subject line “Account Deletion Request,” including the app name and the email associated with your account.

We will process account deletion requests within 30 days. This permanently removes your account profile and authentication credentials from our systems, except where limited data must be retained to comply with legal obligations, resolve disputes, or enforce our agreements — in which case it is retained only as long as necessary and is not used for any other purpose.

We use industry-standard technical and organizational safeguards — including encryption in transit, access controls, and secure cloud infrastructure via Firebase / Google Cloud — to protect your information. No method of transmission or storage is 100% secure, but we work continuously to protect your data.

Some Smart Biscuits apps, including ASET Practice, may be used by students under the age of 18 under the guidance of a parent, guardian, or school. Where an app is directed at children, we limit data collection to what is necessary to provide the service and comply with applicable laws, including COPPA and equivalent regulations. Parents or guardians may contact us at support@smartbiscuits.com.au to review, modify, or delete their child’s information.

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at support@smartbiscuits.com.au.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date at the top of this page, and, where appropriate, communicated within the app.

If you have questions about this Privacy Policy or how your data is handled, contact us at: