Amy Carter-James trading as bomm•ee
Terms of Service & Privacy Policy
Document 01
These Terms govern your access to and use of the bomm•ee platform. Please read them carefully. By creating an account or using the service you agree to be bound by them.
Clause 01
1.1 bomm•ee is a structured literacy and phonics platform designed for students in Years 4–9. It is operated by Amy Carter-James trading as bomm•ee (ABN 31 562 325 686), a sole trader operating in Western Australia, Australia ("bomm•ee", "we", "us", or "our").
1.2 These Terms of Service ("Terms") constitute a legally binding agreement between Karst and the individual or entity ("you" or "Account Holder") who creates an account and uses the bomm•ee platform, website, and associated services (collectively, the "Service").
1.3 Account Holders are either:
1.4 Students (children) who use the Service do so under an account created and controlled by an Account Holder. Account Holders are responsible for ensuring that student use of the Service complies with these Terms.
1.5 By creating an account, you confirm that you are at least 18 years of age, that you have the legal authority to enter into these Terms on behalf of yourself or the organisation you represent, and that you have read, understood, and agree to be bound by these Terms and our Privacy Policy.
1.6 If you are creating a School Account, you additionally represent and warrant that you have the authority to bind your school or institution to these Terms.
1.7 We may update these Terms from time to time. We will notify Account Holders of material changes by email and by posting the updated Terms on our website. Your continued use of the Service after the effective date of updated Terms constitutes your acceptance of those changes.
Clause 02
2.1 Subject to payment of applicable fees and compliance with these Terms, Karst grants you a limited, non-exclusive, non-transferable, revocable licence to access and use the Service for your own personal or internal educational purposes during the subscription term.
2.2 Account Holders are responsible for:
2.3 You must not create an account using false or misleading information. You must keep your contact information accurate and up to date.
2.4 Each subscription is for the number of student profiles specified at the time of purchase. You must not exceed this limit without upgrading your subscription.
2.5 You must not share, sell, sublicense, or otherwise transfer access to the Service to any third party outside your family unit (for Family Accounts) or your organisation (for School Accounts).
Clause 03
This clause is particularly important. bomm•ee is designed for use by children. Account Holders take on specific responsibilities when enabling student access to the Service.
3.1 Students access the Service using a class code and PIN only. No email address, surname, date of birth, or device identifier is collected from or required of any student. This is a deliberate privacy protection.
3.2 Family Account Holders:
3.3 School Account Holders:
3.4 bomm•ee does not knowingly permit children to create independent accounts. All student access must be established and supervised by an Account Holder. If we become aware that a child has created an independent account, we will delete it and associated data promptly.
Clause 04
4.1 Access to the Service requires a paid subscription or an active free trial. Subscription plans, pricing, and included features are set out on our website at bomm.ee and may be updated from time to time.
4.2 Free trials. We offer a 14-day free trial for Family Accounts. No payment method is required to commence a free trial. At the end of the trial period, access to the Service will cease unless you purchase a subscription. We reserve the right to modify or discontinue free trial offers at any time.
4.3 Subscriptions are billed in advance on the frequency selected at the time of purchase (monthly or annually). All prices are in Australian Dollars (AUD) and include GST where applicable.
4.4 Subscriptions automatically renew at the end of each billing period unless you cancel before the renewal date. You may cancel at any time through your account settings or by contacting us at hello@bommee.au.
4.5 Refunds. If you cancel your subscription:
4.6 We reserve the right to change subscription pricing. We will give at least 30 days written notice of any price increase before it takes effect for existing subscribers. Your continued use of the Service after a price change takes effect constitutes your agreement to pay the updated price.
4.7 Nothing in these Terms limits any rights you may have under the Australian Consumer Law in relation to guarantees, refunds, or remedies.
Clause 05
5.1 You must use the Service only for its intended educational purpose and in accordance with these Terms and all applicable laws.
5.2 You must not:
5.3 We reserve the right to suspend or terminate your account immediately if, in our reasonable judgement, you have materially breached this clause.
Clause 06
6.1 Our content. All content on the Service — including text, phonics teaching cards, illustrations, software, design elements, and the bomm•ee and Karst trademarks — is owned by or licensed to Karst and protected by copyright, trade mark, and other intellectual property laws. Nothing in these Terms transfers any ownership of our intellectual property to you.
6.2 Your content. Story sentences and other content created by students during use of the Service ("Student Content") remains the property of the student and their family. You grant Karst a limited, non-exclusive licence to store and process Student Content solely for the purpose of providing the Service. We do not use Student Content for any other purpose, including training AI models.
6.3 You may request deletion of all Student Content associated with your account at any time in accordance with the process set out in our Privacy Policy.
6.4 Feedback. If you provide feedback, suggestions, or ideas about the Service, you grant us a perpetual, irrevocable, royalty-free licence to use that feedback for any purpose without compensation or attribution to you.
Clause 07
7.1 The Service uses certain third-party services to function. These include:
7.2 AI features. Where AI-powered features are used within the Service, requests to Anthropic's API include only the target word and partial sentence context required to generate a response. No student name, student identifier, or personal information is included in API payloads sent to Anthropic.
7.3 Karst does not guarantee the accuracy of AI-generated content. AI features are designed to assist learning and should not be relied upon as the sole source of educational assessment or advice.
7.4 We are not responsible for the privacy practices, availability, or performance of third-party services. You are encouraged to review the privacy policies of Supabase (supabase.com/privacy), Anthropic (anthropic.com/privacy), and Google (policies.google.com/privacy).
Clause 08
8.1 We aim to provide the Service continuously, but we do not guarantee uninterrupted availability. The Service may be unavailable from time to time due to maintenance, infrastructure issues, or circumstances beyond our reasonable control.
8.2 We reserve the right to modify, update, or discontinue features of the Service at any time. We will endeavour to give reasonable notice of material changes that affect core functionality.
8.3 If we discontinue the Service entirely, we will provide at least 60 days written notice to all active Account Holders and offer a pro-rata refund of any prepaid subscription fees.
Clause 09
9.1 To the maximum extent permitted by Australian law, the Service is provided on an "as is" and "as available" basis. Karst makes no warranty, express or implied, that the Service will be error-free, secure, or continuously available, or that it will meet your specific educational requirements or outcomes.
9.2 bomm•ee is a structured literacy practice tool. It is not a diagnostic instrument, a therapeutic service, or a substitute for qualified educational assessment or specialist intervention. Any improvements in literacy outcomes experienced by students reflect individual effort and consistency of practice and cannot be guaranteed.
9.3 Nothing in this clause limits or excludes any guarantee, warranty, or right that cannot be excluded under the Australian Consumer Law, including the consumer guarantees under the Competition and Consumer Act 2010 (Cth).
Clause 10
10.1 To the maximum extent permitted by law, Karst's total aggregate liability to you for any claim arising under or in connection with these Terms or the Service is limited to the total subscription fees paid by you in the 12 months immediately preceding the event giving rise to the claim.
10.2 To the maximum extent permitted by law, Karst is not liable to you for any indirect, incidental, special, consequential, or punitive loss or damage, including loss of data, loss of revenue, loss of opportunity, or loss of goodwill, even if we have been advised of the possibility of such loss.
10.3 Nothing in these Terms excludes or limits Karst's liability for:
Clause 11
11.1 Termination by you. You may cancel your subscription and close your account at any time through your account settings or by emailing hello@bommee.au. Cancellation will take effect at the end of the current billing period.
11.2 Termination by us. We may suspend or terminate your account immediately if you materially breach these Terms and, where the breach is capable of remedy, you fail to remedy it within 7 days of written notice from us. We may also terminate your account on 30 days written notice for any other reason.
11.3 Effect of termination. On termination:
11.4 Clauses 6, 9, 10, 12, and 13 survive termination of these Terms.
Clause 12
12.1 If you have a complaint or dispute about the Service, please contact us in the first instance at hello@bommee.au. We will acknowledge your complaint within 5 business days and endeavour to resolve it within 20 business days.
12.2 If a dispute cannot be resolved informally, either party may refer it to mediation before commencing legal proceedings. The parties agree to participate in mediation in good faith before escalating to litigation.
12.3 These Terms are governed by the laws of Western Australia, Australia. Subject to clause 12.2, each party submits to the non-exclusive jurisdiction of the courts of Western Australia.
Clause 13
13.1 Entire agreement. These Terms and our Privacy Policy constitute the entire agreement between you and Karst in relation to the Service and supersede all prior understandings, representations, or agreements.
13.2 Severability. If any provision of these Terms is found to be invalid, unlawful, or unenforceable, that provision will be severed from the remaining Terms, which will continue in full force and effect.
13.3 Waiver. A failure or delay by us to exercise any right or remedy under these Terms does not constitute a waiver of that right or remedy.
13.4 Assignment. You may not assign your rights or obligations under these Terms without our prior written consent. We may assign our rights and obligations on notice to you, including in connection with a merger, acquisition, or sale of substantially all of our assets.
13.5 Notices. Notices under these Terms must be in writing. Notices to you will be sent to the email address associated with your account. Notices to us must be sent to legal@bommee.au or to our registered address.
13.6 Contact.
ABN 31 562 325 686
Margaret River, Western Australia, Australia
General enquiries: hello@bommee.au
Legal notices: legal@bommee.au
Privacy: privacy@bommee.au
Document 02
bomm•ee takes the privacy of students and families seriously. This policy explains exactly what data we collect, how we use it, and the protections we have put in place — particularly for children.
Plain English summary: We collect the minimum data necessary to run the Service. Children are identified by first name and PIN only — no email, no surname, no date of birth. Student data stays in Australia. We do not sell, share, or use student data for advertising. Parents and schools can request deletion of student data at any time.
Section 01
1.1 This Privacy Policy ("Policy") describes how Amy Carter-James trading as bomm•ee (ABN 31 562 325 686) ("bomm•ee", "we", "us", or "our") collects, holds, uses, and discloses personal information in connection with the bomm•ee platform and associated services (collectively, the "Service").
1.2 This Policy is issued in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs") contained in Schedule 1 of that Act.
1.3 By creating an account or using the Service, you acknowledge that you have read and understood this Policy. If you are an Account Holder creating profiles for children, your continued use of the Service constitutes consent to the collection and processing of student data on the terms set out in this Policy.
1.4 This Policy applies to all users of the Service including parents, teachers, school administrators, and students. Where this Policy refers to different treatment of information held about different user types, this is indicated clearly.
1.5 We may update this Policy from time to time. Material changes will be notified by email to Account Holders and by posting the updated Policy on our website. The effective date of the current version is shown at the top of this document.
Section 02
2.1 We collect only the personal information necessary to provide and improve the Service. The table below sets out what we collect, who it relates to, and why.
| Category | Data collected | Who it relates to | Why we collect it |
|---|---|---|---|
| Account data | Name, email address, hashed password | Parents, teachers, school admins | To create and authenticate accounts; to communicate with Account Holders about the Service |
| Child profile | First name only, year level, PIN | Students (children) | To identify the student within a session and personalise their experience; the PIN enables session authentication without requiring an email address or password |
| Learning behaviour | Words attempted, correct/incorrect responses, time on task, mastery dates | Students | To track progress, generate mastery reports, and adapt the learning sequence |
| Student-generated content | Story sentences written during sessions | Students | To support the writing component of the learning sequence and enable review by the Account Holder |
| Spelling flags | Misspelled words noted by parent | Students | To enable the parent-flagging feature within the Service |
| Engagement data | Stars, waves, game sessions, personal bests | Students | To power progress tracking and motivational features within the Service |
| Organisational data | School name, class name, join codes | Schools and classes | To enable school-based account structures, class grouping, and teacher access |
| Marketing analytics | Pages visited, session duration, general location (country/region) — anonymised | Visitors to our marketing website only | To understand how visitors find and navigate our marketing website; collected via Google Analytics |
2.2 What we deliberately do not collect. The following data is not collected under any circumstances:
2.3 Session navigation data. During a student's session, the browser uses sessionStorage and localStorage to hold temporary state information (including the student's first name, a session identifier, current pack ID, and draft story content). This data is processed entirely within the browser and is never transmitted to our servers. sessionStorage is wiped when the browser tab closes. localStorage persists on the device until cleared by the user but is never sent to our servers except for specific data that is explicitly synced (such as completed story sentences). Navigation within a session — the screens visited and time spent within each step — is processed in the browser only. Only outcomes (correct or incorrect attempts, words mastered) are stored on our servers.
Section 03
3.1 We collect personal information in the following ways:
3.2 We do not collect personal information about students from any source other than the Account Holder and the student's own interactions with the Service.
3.3 In accordance with Australian Privacy Principle 5, we notify Account Holders of the purpose and nature of collection at the point of account creation.
Section 04
4.1 We use personal information only for the purposes for which it was collected and for directly related purposes. Specifically:
4.2 We do not use personal information — including student data — for any of the following purposes:
4.3 AI features. Where AI-powered features are used within the Service, requests to Anthropic's API include only the target word and partial sentence context required to generate a response. No student name, student identifier, account information, or any other personal information is included in API payloads transmitted to Anthropic. Anthropic's API is engaged as a service processor under terms that prohibit use of input data for model training. Anthropic's standard data processing terms apply.
4.4 Aggregate and de-identified data. We may use aggregate, de-identified data (which cannot identify any individual) for product development, research, and reporting purposes. This data is not personal information and is not subject to this Policy.
Section 05
5.1 We do not sell, rent, or trade personal information. We disclose personal information only in the following limited circumstances:
5.2 Service providers. We share personal information with third-party service providers who help us operate the Service, strictly on a need-to-know basis and subject to contractual obligations consistent with this Policy. Current service providers include:
5.3 Authorised personnel within your account. For School Accounts, teachers can see the first names, progress data, and learning records of students within their assigned class. Teachers cannot see data for students in other classes or schools. A parent using a Family Account can see all data associated with student profiles on their account. No Account Holder can see data belonging to another account.
5.4 Legal requirements. We may disclose personal information where required by law, court order, or government authority, or where we reasonably believe disclosure is necessary to prevent serious harm.
5.5 Business transfers. If Karst is involved in a merger, acquisition, or sale of substantially all of its assets, personal information may be transferred to the successor entity. We will notify affected Account Holders before any such transfer and the successor will be required to honour the terms of this Policy.
5.6 All data is stored in Australia. We do not transfer personal information to recipients outside Australia without your consent, except as described in clause 5.2 in relation to Anthropic (which is a United States-based entity). We rely on the privacy protections afforded by Anthropic's standard data processing terms and the limited nature of data transmitted (no personal information, as described in clause 4.3).
Section 06
6.1 Infrastructure. All personal information stored by the Service is hosted on Supabase infrastructure in the Sydney, Australia region (AWS ap-southeast-2). Data does not leave Australia except as described in clause 5.6.
6.2 Technical security measures. We implement the following security measures in accordance with Australian Privacy Principle 11:
6.3 No security system is impenetrable. In the event of a data breach that is likely to result in serious harm, we will notify affected Account Holders and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).
Section 07
7.1 We retain personal information only for as long as necessary to provide the Service and to comply with our legal obligations.
7.2 For Family Accounts, student learning data is retained for 12 months following the end of your subscription, after which it is permanently deleted — unless you request earlier deletion.
7.3 For School Accounts, student and class data is retained for 30 days following the end of your subscription to allow for data export requests, after which it is permanently deleted.
7.4 Account Holders may request deletion of their account and associated data at any time by contacting us at privacy@bommee.au. We will action all deletion requests within 30 days.
Section 08
8.1 Under the Australian Privacy Principles, you have the right to:
8.2 To exercise any of these rights, please contact us at privacy@bommee.au. We will acknowledge your request within 5 business days and respond fully within 30 days.
8.3 We may ask you to verify your identity before actioning a request. This is to protect the privacy of Account Holders and students.
Section 09
9.1 Marketing website (bomm.ee). Our marketing website uses Google Analytics to collect anonymised data about site usage, including pages visited, session duration, and general geographic location (country or region). This data is collected via cookies and is used solely to understand how visitors find and navigate our site. It is not linked to any individual user account or student record.
9.2 The bomm•ee Service (student-facing pages). No third-party cookies, analytics scripts, or advertising pixels are present on any student-facing pages within the bomm•ee Service. Session state is managed using sessionStorage and localStorage within your browser as described in clause 2.3.
9.3 You can opt out of Google Analytics tracking on our marketing website by using the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings.
Section 10
This section describes our specific protections for children's data. We have designed the Service from the ground up to minimise the data collected from and about children.
10.1 bomm•ee is designed for use by school-age children. We take children's privacy seriously and have implemented the following protections by design:
10.2 Consent for the collection of student data is provided by the Account Holder (parent or school) at account creation. We do not rely on consent from the child.
10.3 Where a school is the Account Holder, the school represents that it has appropriate authority and, where required, parental consent to enable students to use the Service, in accordance with applicable law and the school's own data governance policies.
10.4 We do not knowingly permit children under the age of approximately 8–9 years (Year 4) to use the Service as a target user. If we become aware that personal information has been collected from a child without appropriate consent from an Account Holder, we will delete that information promptly.
Section 11
11.1 If you have a concern about how we have handled your personal information, please contact our Privacy Officer in the first instance:
Email: privacy@bommee.au
We will acknowledge your complaint within 5 business days and endeavour to resolve it within 30 days.
11.2 If you are not satisfied with our response, you have the right to make a complaint to the Office of the Australian Information Commissioner (OAIC):
Website: www.oaic.gov.au
Phone: 1300 363 992
GPO Box 5218, Sydney NSW 2001
Section 12
12.1 For any questions about this Policy or our privacy practices, contact us at:
ABN 31 562 325 686
Margaret River, Western Australia, Australia
Privacy enquiries: privacy@bommee.au
General enquiries: hello@bommee.au