Privacy Policy
Last updated · 16 May 2026
This Privacy Policy describes how BEAR Originals Pty Ltd (ABN TBC), trading as DailyMBA ("BEAR Originals," "DailyMBA," "we," "us," "our") collects, uses, discloses, and protects personal information when you use our website, the DailyMBA Desk, the daily framework email, the AI tutor, downloadable templates, and related services (the "Service").
We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and, where applicable, the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
1. Information We Collect
When you sign up or subscribe
- Email address.
- Name (if you provide it).
- Country or region.
- Payment information — handled directly by Stripe, Inc. We do not see or store your full card details; we receive a tokenised reference and the last four digits, card brand, and expiry.
When you use the Service
- Usage data: which Frames you've read, which templates you've downloaded, which drills you've completed, and prompts you submit to the AI tutor (together with the responses generated).
- Device and technical data: browser type, operating system, IP address, time zone, approximate location (derived from IP), and referring URL.
- Cookies and similar technologies — see Section 7 below.
When you contact us
- The content of your message and any information you choose to share (e.g. account ID, name, screenshots).
We do not deliberately collect sensitive personal data (e.g. health, religion, sexual orientation, biometric, or genetic data). Please don't submit such data to the AI tutor or to us by email.
2. How We Use Your Information
We use personal information to:
- Deliver the Service — send your daily Frame, provide Desk access, run the AI tutor;
- Process payments and manage your subscription (billing, renewals, refunds, cancellation);
- Provide customer support;
- Send service emails (receipts, security notices, material changes to these policies);
- Send marketing emails about DailyMBA — you can unsubscribe at any time;
- Analyse usage to understand and improve the Service;
- Detect, prevent, and address fraud, abuse, or security issues;
- Comply with legal obligations and enforce our terms.
We do not sell your personal information. We do not "share" personal information for cross-context behavioural advertising (as those terms are defined under California law).
3. Legal Bases (for users in the EU, UK, and EEA)
If you are in the EU, UK, or EEA, we process personal data on these legal bases:
- Contract — to provide the Service you subscribed to.
- Legitimate interests — to operate, improve, secure, and promote the Service, and to detect and prevent abuse. You can object to processing based on legitimate interests.
- Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
- Legal obligation — to comply with tax, accounting, consumer protection, and other applicable laws.
4. Sharing and Disclosure
We share personal information only with the categories of service providers listed below. Each is bound by contract to protect your data and use it solely on our instructions:
- Payment processing — our payments provider handles card processing. We do not receive or store your full card details.
- Email delivery — our email platform delivers your daily frames and transactional messages.
- Hosting and infrastructure — our hosting and CDN providers serve the website and Desk.
- Analytics — our analytics provider helps us understand how the Service is used so we can improve it.
- AI model provider — our AI model provider processes your tutor prompts and generates responses. We do not permit the provider to use your inputs or outputs to train their general models.
- Professional advisors — lawyers, accountants, auditors — under confidentiality obligations.
- Authorities — where required by law (e.g. a valid court order or subpoena), to protect rights, or to prevent fraud or harm.
- Successors — in the event of a sale, merger, or other corporate transaction, in which case successor obligations will mirror this policy.
5. International Transfers
We're based in Australia. Some of our providers process data in the United States and other countries. Where personal data is transferred from the EU, UK, or EEA to a country without an adequacy decision, we rely on Standard Contractual Clauses or other appropriate safeguards.
6. Data Retention
We retain personal information for as long as needed to provide the Service and to comply with our legal obligations:
- Account and subscription data — for the life of your subscription, plus up to 12 months for chargebacks, disputes, and reactivation.
- Financial records — for 7 years, as required by Australian tax law.
- Marketing data — until you unsubscribe or object, plus a short suppression period to honour your opt-out.
- AI tutor prompts and responses — up to 12 months for quality and abuse-prevention purposes, then deleted or de-identified.
You can request earlier deletion at any time — see "Your Rights" below.
7. Cookies and Similar Technologies
We use:
- Essential cookies — required for login, security, and basic functionality. These cannot be turned off in the Service.
- Analytics cookies — to understand how the Service is used, so we can improve it. Disable these via your cookie preferences (where presented) or your browser settings.
Most browsers allow you to refuse or delete cookies through their settings. Doing so may affect parts of the Service.
8. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Have inaccurate or incomplete information corrected;
- Have your information deleted (the "right to be forgotten");
- Restrict or object to certain processing;
- Receive your information in a portable, machine-readable format;
- Withdraw consent where processing is based on consent;
- Opt out of marketing communications at any time via the "unsubscribe" link in any marketing email or by emailing us;
- Lodge a complaint with a supervisory authority (in Australia, the Office of the Australian Information Commissioner; in the EU/EEA, your local data-protection authority; in the UK, the ICO).
Californians (CCPA/CPRA)
You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of any "sale" or "sharing" of personal information. As noted above, we do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.
To exercise any of these rights, email admissions@dailymba.education. We will verify your identity (typically by confirming control of the email on your account) and respond within the time required by applicable law (typically 30–45 days).
9. Children
The Service is not directed to anyone under 16, and we do not knowingly collect personal information from children under 16. If you believe we have collected such information, contact us and we will delete it.
10. Security
We use commercially reasonable administrative, technical, and physical safeguards — including TLS encryption in transit, encryption at rest where supported by our providers, access controls, and vendor security reviews — to protect personal information.
No system is 100% secure. We cannot guarantee absolute security and you provide personal information at your own risk.
11. AI Tutor — Privacy Notes
When you interact with the AI Tutor, your prompts and the resulting responses are processed by us and by our AI model provider for the sole purpose of generating your response.
Please don't submit information you don't want stored or processed this way, including:
- Confidential business information of others (NDAs);
- Personal information of identifiable third parties;
- Health, financial, or other sensitive personal information.
We do not permit the AI model provider to use your prompts or responses to train their general models.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice on the Service before they take effect. The "Last updated" date at the top tells you when this policy was last revised.
13. Contact
For privacy questions, requests, or complaints — including to exercise any of the rights described above — contact our privacy team at admissions@dailymba.education.
If you are in the EU and need an EU representative, please email us and we will provide our representative's details (where required).
You may also reach our Terms of Service and our Refund Policy for more on how we operate.
These terms are governed by the laws of New South Wales, Australia. For consumers protected by mandatory local laws (e.g. EU, UK, US state consumer protection), nothing in this document limits rights you have under those laws.