Skip to content
Back

Draft: not yet in force. This document still contains details marked [TO CONFIRM]. It is published for review and should not be relied on until those are filled in.

Privacy

This explains what three30 collects, what leaves your device, and who else can see it. It is written to be read rather than skimmed, the section that matters most is What leaves your device.

Last updated 29 July 2026

Who is responsible

three30 is operated by James Bailey, trading as three30, a sole trader in Australia. For anything in this policy, including access and correction requests and complaints, contact [TO CONFIRM: a mailbox that can receive mail].

This policy follows the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What is collected

Three separate things, held in three different places.

  • Your email address. Used to sign you in. There is no password. A link is emailed to you instead.
  • Your profile. First name, year levels you teach, school name, state, role, and your school’s term dates if you enter them. This personalises drafts and follows you to a new device.
  • Your drafts. Stored in your browser only, never on any server operated by us. Signing out deletes them. Clearing your browser data deletes them. There is no copy to recover.

Your email address and profile are stored in a Supabase database hosted in Sydney, Australia (ap-southeast-2). There is deliberately no table for drafts.

What leaves your device

To write a draft, what you type into the form is sent to Anthropic, the company behind Claude, and processed on their servers in the United States. That includes the student’s first name and whatever you describe about the situation. Your drafts are not stored outside your browser, but they cannot be written without being sent.

This is the part most easily misunderstood, so to be exact: when you press generate, the following is sent: the answers you gave in the form, including any free text; your first name, so the draft can be signed off; and your state, so the draft uses the right terminology for your jurisdiction.

The following is not sent: drafts you have already saved, your email address, your school name, or anything belonging to another teacher.

Anthropic’s published terms for API customers state that inputs and outputs are deleted from their systems within 30 days, and that retained data is not used to train models without express permission. Where content is flagged by their automated safety systems, they may retain it for up to two years. See Anthropic’s data retention policy and their privacy policy for the current position.

Because this involves sending personal information overseas, it is a cross-border disclosure under Australian Privacy Principle 8. Anthropic offers no Australian processing region. Requests are deliberately pinned to United States infrastructure rather than being routed to whichever region happens to have capacity, so the destination is known and does not move.

Information about children

You decide what goes into the form. three30 is built so that a first name or an initial is enough, and the instructions given to Claude tell it never to ask for, repeat or infer a full name, address, date of birth or diagnosis.

Please use first names or initials only. Never enter a full name, home address, date of birth, medical or diagnostic information, or anything about a child’s family circumstances. Once it is typed, it is sent.

If you are using three30 in connection with your employment, your school or department may have its own rules about what may be entered into third-party software. Those rules apply to you regardless of what this policy says, and checking them is your responsibility.

Cookies and tracking

three30 sets cookies for one purpose: keeping you signed in. There is no analytics, no advertising, no tracking pixels, no third-party scripts, and nothing that follows you to other websites. Nothing here requires a cookie banner because nothing here is optional to the service working.

Who else is involved

Running the service means using a small number of other companies. Each receives only what its job requires.

  • Anthropic (United States) generates the drafts. Receives your form answers as described above.
  • Supabase (Sydney, Australia (ap-southeast-2)) stores your account and profile.
  • Resend sends your sign-in emails. Receives your email address only.
  • Vercel hosts the application. Keeps standard server logs, which include IP addresses.

Your information is not sold, rented, or shared with anyone for marketing, and there are no advertising partners.

Getting to your information

Your profile is visible and editable at any time in Settings. Your drafts are in your browser, and Drafts shows all of them.

To request a copy of what is held about you, to correct it, or to delete your account entirely, email [TO CONFIRM: a mailbox that can receive mail]. Deleting your account removes your profile from the database. Drafts need no request, because signing out removes them from your device immediately.

Keeping it secure

Access to profiles is enforced at the database level by row-level security, so one teacher’s account cannot read another’s even if the application had a bug. Drafts are stored separately per signed-in account within a browser, and another teacher signing in on the same device removes them.

No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, you will be notified along with the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Complaints

If you think your privacy has been mishandled, email [TO CONFIRM: a mailbox that can receive mail] and you will get a response within 30 days. If the response does not resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If this policy changes in a way that affects what happens to your information, the date at the top changes and you will be told before the change takes effect. Continuing to use three30 after that means the updated policy applies.