Privacy Policy

Last updated: 31 August 2026

This Privacy Policy explains how LovableStudent ("we", "us", "our"), the operator of Lovable Student at lovablestudent.com (the "Site"), collects, uses, discloses, stores and protects personal information. We are based in Australia and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs"). Where the UK GDPR or EU GDPR applies to a visitor, we also comply with those regimes and act as the controller of the personal data described below. By using the Site you acknowledge this Policy. If you do not agree with it, please do not use the Site.

1. Who we are and how to contact us

Entity: LovableStudent, Australia. Privacy contact: info@lovablestudent.com. All privacy enquiries, access requests, correction requests, erasure requests and complaints may be sent to that address and will be handled by the person responsible for privacy at LovableStudent.

2. Personal information we collect

You may read the Site without an account and without providing personal information. We collect personal information only where you choose to provide it, or where it is generated automatically by your use of the Site:

Information you submit. Where you complete a help request, "fix my project" request, guide request, content request or similar form, we collect the details you enter, which may include your name, email address, business or project name, project URLs, budget or timeframe indications, and a free-text description of your project or problem.
Voting and request signals. Where you vote on or request upcoming content, we record the vote together with a coarse, non-identifying browser signal used solely to reduce duplicate voting.
Usage information. We record on-site search terms, pages viewed, referring URL, landing page and campaign parameters (for example UTM values), together with technical information supplied by your browser such as approximate device and browser type.
Correspondence. Where you email us, we retain your message and our reply.

We do not deliberately collect sensitive information as defined in the Privacy Act (such as health, biometric, racial, political or religious information), and we ask that you do not submit it through the Site. We do not collect government identifiers.

3. Why we collect and use it

We use personal information for the following purposes only:

to respond to your enquiry, request or complaint;
to arrange for a paid build or fix quote to be provided to you where you have asked for expert help;
to operate, secure, maintain and improve the Site and its content;
to decide which guides, answers and prompts to publish next, based on aggregate demand;
to prevent abuse, spam, fraud and duplicate voting; and
to meet our legal, record-keeping and dispute-resolution obligations.

Where the UK/EU GDPR applies, our lawful bases are: performance of a contract or steps taken at your request (responding to your enquiry); our legitimate interests in operating, securing and improving an educational site and in editorial prioritisation; your consent (optional analytics cookies, and any optional email you ask to receive); and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

4. Disclosure to third parties

We do not sell personal information and we do not disclose it for third-party advertising or profiling. We disclose personal information only:

to PromptSites.com, our build partner, where you have submitted a help or fix request, so that a builder can respond to you and quote for that work, and for no other purpose;
to our service providers who host our database, deliver our transactional email and provide analytics, in each case bound to use the information only to provide those services to us;
where required or authorised by law, including to a court, regulator or law enforcement agency, or to establish, exercise or defend legal claims; and
with your consent, or where you would reasonably expect the disclosure.

5. Cookies, analytics and consent

The Site uses a small number of strictly necessary cookies and browser storage items, and — only if you opt in — Google Analytics 4. Google Consent Mode v2 is set to denied by default, so no analytics or advertising storage is written until you accept. Full detail of each cookie, its purpose, its retention and how to change or withdraw your choice at any time is set out in our Cookie Policy. We do not operate advertising networks, retargeting pixels or cross-site tracking on the Site.

6. Email communications

We send email only in response to something you submitted, or to confirm receipt of a request. We do not add you to a marketing list unless you have expressly asked to join one, and every such email includes an unsubscribe mechanism. Transactional email is sent from our notification domain.

7. Overseas disclosure and storage

Our database, email and analytics providers may store and process information on servers outside Australia, including in the United States and the European Union. Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it in a manner consistent with the APPs, and where the UK/EU GDPR applies we rely on transfer mechanisms permitted under that legislation, such as the provider's standard contractual clauses.

8. Security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include encrypted transport, access controls and row-level database permissions restricting submissions to authorised personnel. No transmission over the internet can be guaranteed secure, and you provide information to us at your own risk. Where a data breach is likely to result in serious harm, we will assess and notify it as required under the Notifiable Data Breaches scheme and any other applicable law.

9. Retention

We keep enquiry and request records for as long as needed to assist you and to maintain our business records, ordinarily no longer than two years from our last contact with you, unless a longer period is required by law or to resolve a dispute. Usage information is retained in aggregate or de-identified form. When personal information is no longer needed for any permitted purpose, we delete or de-identify it.

10. Your rights

You may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it. Where the UK/EU GDPR applies, you also have rights to restrict or object to processing, to data portability, and to withdraw consent. Send your request from the email address you used, to info@lovablestudent.com. We may ask you to verify your identity. We will respond within 30 days, and we do not charge a fee for a reasonable access request. If we refuse access or correction, we will tell you why in writing.

11. Complaints

If you believe we have breached the APPs, the UK GDPR or the EU GDPR, contact us first at info@lovablestudent.com and we will investigate and respond in writing, ordinarily within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au), the UK Information Commissioner's Office, or your local EU supervisory authority.

12. Children

The Site is intended for adults building software. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided personal information to us, contact us and we will delete it.

13. Third-party sites

The Site links to third-party platforms, documentation and tools. Those sites are governed by their own privacy policies and we are not responsible for their handling of your information.

14. Changes to this Policy

We may update this Policy to reflect changes in our practices or the law. The current version is always published on this page and identified by the "Last updated" date above. Material changes will be highlighted on the Site. Continued use of the Site after a change indicates your acknowledgement of the updated Policy.