Your data

Privacy policy

Plain English, written against the Australian Privacy Act 1988 and the Australian Privacy Principles.

Last updated: 30 September 2026

Our privacy guarantee

Your individual answers are never shown to an employer and never sold. We action deletion requests within 7 days using a documented process, and retention periods are applied automatically by a daily job.

Who we are

Adopt AI is operated in Australia by AJILITY PTY LTD, ABN 39 649 782 427, trading as Adopt AI Co. Equilibrium is provided under the registered business name Equilibrium AI, and ApplyAI under Apply AI Co, both trading names of the same company. Adopt AI is not related to the Australian Government AI Adopt Program or to AdOPT AI Pty Ltd. Contact: hello@adoptai.com.au ApplyAI is the free consumer profile at applyai.com.au. Adopt AI is the company surface and team platform at adoptai.com.au. Equilibrium is the name of the measurement engine used by both, it is a product name, not a separate company.

Privacy contact: privacy@ajility.com.au.

What we collect

  • Your answers to the fixed set of assessment items.
  • How long each answer takes and the position each item appeared in, so we can detect quality issues and improve the instrument.
  • A first name and email address only if you ask us to open the full report.
  • Organisation details (contact name, work email, role, company) for platform customers and enquiries.
  • Basic device and usage data: browser type, language, screen width, timezone, and error reports.
  • The country you took the profile from, as a two-letter code worked out from your connection when you give consent. We never store your city or IP address.

We never ask about health, religion, sexuality, or any clinical or DSM-related content. We collect no biometric, facial, voice or emotion data of any kind.

Why we collect it

  • To score your profile and produce your report.
  • To send you the report you asked for, where you asked us to.
  • To build de-identified norms and reliability statistics.
  • To operate team products for organisations that invite you.
  • To improve the instrument and fix faults.

Consent and choice

Consent is explicit, specific to a purpose, and logged with the version of the text you saw and the time you accepted it. Marketing is a separate opt-in tick-box; you can complete a profile and never hear from us again. You can withdraw consent at any time by emailing privacy@ajility.com.au. Withdrawal stops future processing and flags any aggregate report you contributed to.

What organisations see

An organisation that invites you sees aggregate patterns only. It never sees your individual answers or your individual scores, and it sees nothing at all until five or more people have completed. That floor is enforced on the server, not in the browser, and it cannot be lowered by anyone.

Recruiter features are switched off. If we switch them on, we will update this policy and ask for your consent before any individual result is shared with an organisation.

Automated decisions

We use computer programs that use personal information to make, or to help make, the decisions below. We list all of them so you can see where software is involved, including where we do not expect a decision to significantly affect your rights or interests.

Kinds of personal information these programs use:

  • Your answers to assessment items.
  • How long each answer took and the order items appeared.
  • Your prediction of how many right-or-wrong questions you would answer correctly.
  • The role or role family you choose.
  • For team products, the organisation, campaign and team you were invited through.

No program uses your name, email address or any health or other sensitive information to calculate a score.

Decisions made solely by a program:

  • Calculating your scores, their likely ranges, your calibration type and your Next Move suggestions.
  • Course suggestions on your results page are chosen by fixed rules from your result bands and your lowest area. They are suggestions only and have no effect on your scores.
  • Flagging a session for response quality (for example answering very fast, or missing an attention check). A flagged session still receives its results but may be left out of de-identified norms and research statistics.
  • Deciding whether a team result can be shown. It is withheld until at least five people have completed.
  • Locking a resume link after repeated failed attempts, along with other routine security controls.

Decisions where a program does something substantially and directly related to a decision a person makes:

  • Team Snapshot and Team Diagnostic reports, which an organisation may use when deciding on training, support or ways of working. The program produces an aggregate report and a person at the organisation makes any decision. Organisations never see an individual's answers or scores.
  • Recruiter features are switched off. If we switch them on, we will update this policy and ask for your consent before any individual result is shared with an organisation.
  • The written narrative in your report, produced by a language model around scores it cannot change.

No program we operate decides anything about your employment, pay, promotion, credit, insurance or eligibility for a service.

You can ask for a person to review any output we produce about you by emailing privacy@ajility.com.au.

Where your data is stored

Assessment and account data is stored in a managed PostgreSQL database hosted in Singapore (AWS ap-southeast-1) and is never used to train AI models. Behaviour analytics is stored by Google (GA4) and PostHog in the United States. We intend to move primary storage to Australia before onboarding enterprise customers and will update this page when that happens. Questions to privacy@ajility.com.au.

Our sub-processors, and where they hold data, are listed below. Before disclosing personal information overseas we take reasonable steps so that these providers handle it consistently with the Australian Privacy Principles.

  • Supabase, database and authentication, Singapore.
  • Lovable, application hosting and AI gateway, may process data in the United States and the European Union.
  • Resend, transactional email, Japan (Tokyo region); Resend Inc. is based in the United States.
  • Google Workspace, support and enquiry mail, United States and other countries where Google operates.
  • Google Analytics 4, site analytics, United States.
  • PostHog, site analytics, United States.
  • Google Gemini, reached through the Lovable AI gateway, writes the narrative text in your report. Region not fixed; may include the United States. It receives your scores, their likely ranges, percentiles where shown, the response-quality status, the norm version and the content used to write your next step. It never receives your name, email address, session identifier or item answers.
  • Calendly, booking a debrief call, if you choose to book one, United States.

How long we keep it

These are our retention periods. A daily job applies them automatically. By default, assessment sessions and raw item responses are minimised after 730 days (24 months); consumer leads and the email queue after 365 days; campaign invitations after 365 days; and voluntary self-identification data after 365 days. Organisations may set shorter windows for their own data. De-identified statistics, norms and reliability figures that cannot be traced to a person, are kept indefinitely.

Your rights

You can ask for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Deletion requests are actioned within 7 days of the request. Email privacy@ajility.com.au.

If you are unhappy with how we handled your information, complain to us first at privacy@ajility.com.au. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Security

Access is controlled row by row in the database, so a query can only ever return the rows the caller is entitled to. Data is encrypted in transit. Score-affecting events and report views are written to an append-only audit log. Automated privacy and access-control tests run on every release.

Cookies and analytics

We do not use advertising cookies or third-party tracking pixels. The app stores a small amount of data in your browser's local storage so you can resume an assessment in progress and stay signed in. Our hosting provider records standard request logs, and we record application errors so we can fix faults.

We use Google Analytics 4 to understand how the site is used. IP addresses are anonymised, Google Signals and ad personalisation are switched off, and no assessment responses, scores or contact details are sent to Google Analytics. You can block it with a browser extension or by disabling JavaScript.

We also use PostHog to understand how visitors move through our public pages, including clicks. Session recording is switched off everywhere. Automatic click capture is switched off on the assessment, results, snapshot, candidate, invite and account screens. On the assessment, results and snapshot screens we record only named steps: that the introduction was viewed, consent was ticked, the start button was pressed, a session started or failed to start (with a general reason), the first question appeared, a part started, the prediction screen appeared, a resume link was copied or used (with whether it worked), the profile was completed, Go deeper was offered, started or completed, a share card was previewed or shared, the full report was unlocked, team invitations were sent and a team snapshot was unlocked. Each step carries the brand and, where relevant, the part number, the calibration type or a time in milliseconds or seconds. We never send answers, scores, names, email addresses or session identifiers, and identifiers such as session ids, invitation tokens, company links and resume codes are removed from page addresses before any analytics are sent. This analytics data is stored by Google and PostHog in the United States. To object, contact privacy@ajility.com.au.

Changes and contact

We may update this policy as the product or the law changes. The version you accepted when you started an assessment governs that session, unless the law requires otherwise. Questions: privacy@ajility.com.au.

See also our terms of use and our limitations page.

Canonical URL: https://applyai.com.au/privacy