Privacy Policy

HSC Command Centre Pty Ltd ("HSC Command Centre", "we", "us") is the operator of this service and is the data controller responsible for the personal information described in this policy. We decide what data is collected, why, and how it is handled. You can reach us through the contact page.

Account details you provide when signing up (email address, first name, optional username). If you sign in with Google, we receive your email address and basic profile details from Google.

Academic data you enter: subjects, assessments, marks, ranks, cohort sizes, study sessions, errors, revision topics, calendar events, school name and target ATAR.

Payment records: when you purchase Pro, our payment provider processes the transaction and sends us a record of the purchase. We never see or store your card details.

Solely to run the product for you: showing your dashboard, calculating study totals, scheduling error reviews, and generating your ATAR estimate. Your marks are never used to rank you against other students.

Where data protection law requires a legal basis, we rely on: performance of our contract with you (creating and running your account, storing your academic data, delivering Pro features you have paid for); our legitimate interests (keeping the service secure, preventing fraud and abuse, and improving the product using aggregated usage data); your consent (opt-in social and discoverability features, and any marketing email — you can withdraw consent at any time in Settings); and compliance with legal obligations (tax, accounting and lawful requests).

Nothing, unless you choose it. Marks, ranks, assessments, errors and ATAR estimates are never shared with anyone — there is no setting that exposes them.

Social features are opt-in and controlled from Settings. You choose whether you are discoverable, whether friends can see your study status, your study hours, your school and your current subject. You can revoke any of this at any time, and blocking someone removes the connection immediately.

Data is stored in a managed Postgres database with row-level security, so queries are restricted to your own account at the database level. Access is over encrypted connections.

You can view and edit everything you have entered inside the app. You can request deletion of your account and all associated data by contacting us — we action deletion requests within 30 days.

We share personal data with: hosting, database and authentication providers that store your data on our behalf; Paddle.com Market Ltd, our Merchant of Record, which handles checkout, subscription management, payments, invoicing and tax compliance; professional advisers (legal and accounting) where needed; and authorities where required by law. We do not sell your data, and we do not run advertising trackers.

HSC Command Centre is built for senior secondary students, many of whom are under 18. We collect only what the product needs to function and never require a photo, phone number or address.

Questions about your data can be sent through the contact page.