Privacy notice
Updated 11 October 2026. Version 2026-10-11.
This is what Gradstack® collects when you use GAFI®, why, who sees it, and how to get it deleted. Graduated Pty Ltd (ABN 51 671 531 758), trading as Gradstack®, is responsible for it under the Privacy Act 1988 (Cth).
What we collect
From you, as you go:
- Your email address, to send your sign-in code and your result.
- Your name.
- Your country and region.
- Whether you study or work, and the details you choose to give: course, institution, job title, industry, years of experience and employer.
- Whether you are open to work, if you answer. This is your choice and separate from everything else here.
- How you rate your own AI fluency, before you start.
- Your answer to every scenario, exactly as you gave it.
- Your result: your band, your five dimension scores and the version of the scoring that produced them.
What we collect without asking
How long you took and whether you picked the same option every time. We use this only to spot attempts that were not genuine. It does not change your score.
Your IP address and basic device details, to limit abuse of the sign-in code and to check you are not a bot. We also count which pages and buttons are used, to see what needs fixing.
What your university gives us
If your university invited you, it gave us your email address and may also have given your name, your student number and the faculty or course you are in. We use these to invite you, to check the invitation is yours and to count your result in your university's figures.
If you came in through a link your university shared, you give us your email address and student number yourself. We use your student number only to check it looks like one your university issues, and we do not keep it.
What we use it for
To sign you in, score your answers, show you your result and the learning that fits it, and email you your report. To explain a result if you ask, and to recalculate it if we correct an error in our scoring. To keep GAFI® fair and working. We do not sell your information and we do not use it for advertising.
Who sees it
Your result is yours. If a university or employer gave you your access to GAFI®, they see that you finished and your band. They do not see your individual answers. Your result also counts toward group figures, which are shown only when enough people are included that nobody can be picked out.
If you came in with a code from Gradstack®, no university or employer sees anything.
If you say you are open to work, that is the only time something is shared for that purpose, and only with who it tells you before it is shared. You can take that back at any time.
Our service providers handle it for us under contract: hosting and database, email delivery, and bot checking. Some of them are outside Australia, so your information can be processed overseas. We share it with anyone else only when the law requires.
How long we keep it
Your answers and result are kept for as long as you have an account, so a result can always be explained. When you ask us to delete your account, there is a 14 day window to change your mind, then your profile is erased and your results are withdrawn.
Your choices
You can ask to see what we hold, fix it, take back an optional choice or delete your account by emailing hello@gradstack.ai. You can also delete your account yourself from your profile. We reply within 30 days.
If you are not happy with how we handled a request, tell us first. You can also complain to the Office of the Australian Information Commissioner (OAIC).
Changes
If this notice changes in a way that matters, we show it to you and ask you to look again before you carry on. The date and version are at the top.
Contact
Privacy Officer, Graduated Pty Ltd. hello@gradstack.ai