Privacy and safety, in plain words
Modus Ordo is made for students, and most are under 18. This page says what the app keeps, where, who can see it, and what’s still being built. This page is our privacy policy. When something here changes, this page changes too.
The short version
- Stored in
- Sydney, Australia
- Other accounts
- Can’t read yours
- Ads
- None
- This website
- No cookies, no analytics
- The AI
- Not switched on yet
- Teacher or parent view
- None
- Sign-in
- Off for now
- Last changed
- Tue 13 Oct 2026
What the app asks for
| When | What |
|---|---|
| To join the beta list | Your email, and which part of the app interests you most if you say |
| To make an account (closed for now) | A first name or nickname, an email address and a password |
| In setup, so the plan fits you | Year level, your school’s name (typed in), your subjects, your timetable, what’s due, and things outside school like sport |
| As you use it | Your plans, tasks, notes, files you add, study sessions, marks you enter and chats with the cast |
| Never asked for | Your date of birth, home address, phone number or student ID |
The beta list
When you join the beta list, we keep your email, your answer to “What would you use most?” if you gave one, and when you joined. We use them only to email you about the beta: when it’s ready, and your invitation. No newsletters and no ads, and the list is never sold or shared.
Only the person who runs Modus Ordo can read the list. It’s stored in Sydney with everything else, and deleted automatically 12 months after you join, or sooner if you ask. The server looks at your connection’s address for a few minutes to stop automated sign-ups; it isn’t stored with the list. Beta emails will come from Kshitij.m.formal@gmail.com, a Gmail address, so Google carries them, possibly outside Australia.
To come off the list, or to see or correct what we hold, email Kshitij.m.formal@gmail.com from the address you joined with, or reply to any beta email. It’s done within 5 working days.
Where it’s kept, and who can see it
Your data is stored in a database in Sydney, Australia, hosted by Supabase. The app and this website are delivered through Cloudflare’s network, so a page may be served from a location near you.
Other accounts can’t read yours. Every table in the database is locked to its owner (row-level security), and every request runs as the person signed in. A test checks that one student can’t read or change another’s records, even when asking for them directly.
Modus Ordo is run by Kshitij Mutyala, who can manage the database, as with any online service, so this page doesn’t promise “only you, ever”. There’s no teacher view and no parent view.
Questions, corrections or a complaint about your data: email Kshitij.m.formal@gmail.com. If you’re not happy with the answer, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
This website sets no cookies and loads no analytics, ads or third-party scripts. Its fonts and images come from the site itself.
The app has no ads and no analytics scripts. When you sign in, your browser keeps a sign-in token so you stay signed in. Cloudflare keeps request logs and request counts for the service, so it can be kept running.
The AI isn’t switched on yet, so nothing you write is sent to an AI provider. When it is, it’ll run on your own key, and before anything goes, the app will show what’s sent, to which provider and where it’s processed.
Who handles your data
| Who | What they do | Where |
|---|---|---|
| Supabase | Hosts the database and sign-in: your account details and everything you store in the app | Sydney, Australia |
| Cloudflare | Delivers this website and the app, runs the app’s server code and connects it to the database. Keeps request logs and request counts so the service can be kept running | Its global network, usually a data centre near you, so a request may be handled outside Australia |
| An AI provider | None in this build: no AI is called. Later, the provider you choose (such as Anthropic, OpenAI or Google), under your own key | Shown in the app before anything is sent |
| None sent by the app. Beta list emails will come from the operator’s Gmail address, so Google carries them | Google’s servers, which may be outside Australia |
The preview keeps nothing
The preview runs the app in your browser on the week of Sam Reyes, a fictional student. It needs no account, and nothing you do in it is saved or sent, except the Feedback form if you use it: what you liked, what confused you, and your email if you choose to leave it.
Protections that are built today
| What | Status |
|---|---|
| Row-level security on every table, tested | Built |
| Sign-in checked on every request | Built |
| Sign-in and new accounts switched off while the app is built | Built |
| No date of birth, address, phone or student ID asked for | Built |
| Undo, and a History of changes with who made each one | Built |
| Things picked up in passing wait in To confirm for your yes | Built |
| Ctrl Shift H hides the screen; a discreet mode for class | Built |
| Marks shown by default, with an opt-in to hide them in class | Built |
| A fixed safety card with Australian helplines | Built |
| No streaks, badges, leaderboards, messaging or public profiles | Built |
Still being built
These matter, and they aren’t done yet. They’re listed here so nobody assumes otherwise.
| What | Status | Notes |
|---|---|---|
| An age check, with a parent or carer confirming for younger students | Planned | |
| Keys held by a parent or carer for students under 18 | Planned | |
| A “what’s sent, to whom, where” table before the AI first runs | Planned | |
| Exporting everything, and deleting your account, on the live service | Planned | |
| Time limits on what’s kept (for example, History cleared after 12 months), applied automatically | Planned | |
| Email: password reset and sign-in alerts | Planned | No emails are sent yet |
Safety and wellbeing
The app is built to be calm: no guilt words, no comparing you with anyone, and lateness shown in amber with words, never red. The cast are simple shapes with a job each, and they don’t pretend to have feelings.
The Tutor is built not to write assessed work, and draft feedback doesn’t edit your words. Your school sets the rules about AI for assessment.
Read next
See it for yourself
The preview opens the real app in your browser, on a fictional student’s school week. No account needed, and nothing is saved. When you’re ready, join the beta list and we’ll email you when it starts.
Under 15? Look around the preview first, and ask a parent or carer before you join the beta list.