Privacy Policy

1. Information We Collect

a) Tutor Account Information. When you register as a tutor, we collect your name, email address, and authentication credentials. You may also sign in via Google Sign-In, in which case we receive your name, email, and Google account identifier. You may optionally provide a phone number and profile photo.

b) Student Account Information. When a tutor creates a student profile, we collect the student's name, and optionally their email address, phone number, guardian name, and guardian phone number. Students authenticate using a system-generated student code and PIN. Students may also sign in via phone number or Google Sign-In.

c) Classroom & Academic Data. We collect data related to classrooms (title, subject, grade, schedule), assignments (title, instructions, due dates, marks), assignment submissions, attendance records, grades, and shared resources uploaded by tutors or students.

d) Messages & Communications. Tutora provides in-app messaging between tutors and students, including one-on-one conversations and classroom group chats. We store message content, file attachments, and read status to deliver the messaging feature.

e) Files & Attachments. Tutors and students may upload files such as images, PDFs, and documents as assignment attachments, submissions, classroom resources, or chat attachments. These files are stored on our servers for as long as the associated content exists.

f) Device & Usage Data. We collect your device platform (iOS or Android), language preference, and theme preference (light or dark mode) to provide and improve the Service. We collect push notification tokens to deliver notifications.

g) Purchase Information. If you subscribe to a paid plan, payment transactions are processed by Apple App Store or Google Play Store. We receive subscription status and entitlement information but do not collect or store your payment card details.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate your identity and manage your account
• Enable tutors to create and manage classrooms, students, assignments, and resources
• Facilitate communication between tutors and students via in-app messaging
• Track attendance and academic progress
• Deliver push notifications for messages, assignments, and classroom updates
• Process and verify subscription purchases and enforce plan limits
• Send transactional emails (password resets, email verification)
• Improve, personalize, and expand the Service
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

3. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal information. We share your data only with the following service providers who assist in operating the Service:

• Google Firebase: Authentication, cloud database (Firestore), file storage (Cloud Storage), and push notifications (Firebase Cloud Messaging). Your data is processed on Google Cloud infrastructure.
• Zoho Mail: Transactional emails such as password resets and email verification are sent via Zoho SMTP servers.
• Google Sign-In: If you choose to sign in with Google, your authentication is handled by Google's OAuth 2.0 service.

We may also share data when:

• Required by Law: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

4. How Tutors and Students See Each Other's Data

Tutora is designed so that tutors can manage their students and classrooms. As part of normal use:

• Tutors can view student names, contact information, attendance records, assignment submissions, grades, and classroom activity.
• Students can view their own grades, assignments, shared resources, and messages from their tutor.
• Students in the same classroom may see each other's names in group chats.

5. Data Retention

• Account data (profiles, classrooms, students) is retained for as long as your account is active.
• Messages and chat history are retained for as long as the conversation exists.
• Files and attachments are retained for as long as the associated assignment, resource, or conversation exists.
• Activity logs are automatically deleted after 90 days.
• Account deletion: You may request deletion of your account at any time. Upon deletion, your personal data will be permanently removed from our systems within 30 days.

6. Data Security

We implement industry-standard security measures to protect your data. All data is transmitted over encrypted connections (TLS/SSL). Authentication is managed through Firebase Auth, and student PINs are stored using one-way cryptographic hashing (bcrypt). File storage and database services are hosted on Google Cloud, which provides encryption at rest. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Permissions We Request

The Tutora app may request the following device permissions:

• Camera: To take photos for profile pictures or file attachments.
• Photo Library / Storage: To select images and files for upload.
• Notifications: To deliver push notifications for messages, assignments, and classroom updates.

We do not request or access your location, contacts, calendar, or microphone.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data and account
• Withdraw consent for data processing
• Object to or restrict certain processing activities

To exercise any of these rights, use the "Delete Account" feature within the app or contact us at [email protected].

9. Children's Privacy

Tutora is an educational tool intended for use by tutors and their students. Students under the age of 18 should use the Service with the knowledge and consent of a parent, guardian, or their tutor. We do not knowingly collect personal information from children under 13 without parental or guardian consent. If we become aware that we have collected data from a child under 13 without appropriate consent, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including countries where Google Cloud infrastructure is located. These countries may have different data protection laws. By using the Service, you consent to such transfers. We take appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or by email. The "Last Updated" date at the top indicates when the latest revisions were made. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

The Four Stars
Email: [email protected]