Privacy at Ashi
This draft explains the intended handling of information. Before opening registration to the public, Ashi needs a named legal operator, contact details, a confirmed hosting and AI data flow, retention periods, and a review against the privacy laws that apply to students in New Zealand.
Last updated: 12 November 2026
Information used
Account registration collects your name, email address, year level, and password. The service may also store the subjects and learning goals you choose to add, your calendar, tasks, notes, AI tutor conversations, and activity you enter into the learning tools.
How it is used
Information is used to create and secure your account, show your learning workspace, respond to your requests, and operate and protect the service. The AI tutor receives the question and only the learning context needed to answer it. Do not enter sensitive personal details or another student's information.
Who can receive it
Information is stored by Ashi's hosting provider. When you use the AI tutor, relevant conversation content is sent to the configured AI provider. The AI provider is selected and configured by the operator; its retention and processing terms need to be reviewed and disclosed before public launch. We do not sell student information.
Children and family involvement
Ashi is designed for school students, including children. A parent or guardian should review the service and agree to its use for students under 16. The current signup records that the user makes this confirmation; it does not independently verify parental consent. A family contact and a verifiable consent process must be published before public launch.
Security and choices
Passwords are stored as password hashes. Email must be verified before a new student can sign in. Accounts are separated in the workspace. Contact the service operator to request account access, correction, or deletion; verified contact and deletion procedures must be provided by the operator before launch.
Contact
For privacy enquiries, contact privacy@ashi.study. The service operator should ensure this address is monitored before launch.