Privacy Policy

1. Who Uses Tutora

• Tutors create an account themselves and are responsible for the classrooms and student details they add. Tutor accounts are for adults (18 or older).
• Students can only join from a tutor's invite. A student cannot sign up on their own.
• Guardians do not have an account. They use a private link to give, decline, or withdraw consent for a student under 18 (see Section 4).

2. Information We Collect

a) Tutor Account. Your name, email address, and password, or your Google account details (name, email, Google account ID) if you sign in with Google. You may add a phone number, a profile photo, and branding for your papers (a logo, banner, and footer).

b) Student Records Added by Tutors. A tutor adds each student to their list with the student's name and date of birth, and may add an email address, phone number, photo, guardian name, guardian phone and email, and private notes. For a student under 18, the tutor also adds a guardian's name and phone number. Tutors may import this list from a file. Only the tutor who added a record can see it.

c) Student Account. When a student joins, we create a Student ID and the student chooses a PIN. We store the PIN only as a one-way hash, never in readable form. Once allowed (see Section 4), a student may add a phone number, photo, guardian details, and a recovery email, and may link a Google account or an email and password for signing in.

d) Classroom Content. Classrooms, sessions and attendance, assignments, students' submissions and attachments, marks, grades and feedback, resources in the library, question papers and answer keys, notifications, and a history of recent activity.

e) Tora Conversations. What a tutor asks Tora and Tora's replies, and the question papers it helps build.

f) Guardian Consent Records. When a guardian answers a consent request, we keep their name, relationship to the student, email address, country, and language; their answer; the exact notice they were shown; the student details the request was about; the date and time; and the IP address and browser used.

g) Device & Usage Data. A push notification token for your device, your notification settings, and your language and theme preferences. On the web version, we use Google Analytics to understand how Tutora is used: it records pages viewed and actions taken, along with your account ID and whether you are a tutor or a student.

h) Purchases. If a tutor buys a paid plan or a Tora token top-up, payment is handled by our payment providers (see Section 6). We receive the plan and purchase status but never your card details.

3. How We Use Your Information

• Run the Service: classrooms, sessions, assignments, resources, and papers
• Sign you in and keep your account secure
• Ask for, record, and respect guardian consent for students under 18
• Answer tutors' requests to Tora and build question papers
• Send notifications and emails you need, such as invites, consent copies, sign-in codes, and account deletion codes
• Apply plan limits and process purchases
• Understand how Tutora is used so we can improve it
• Prevent fraud, abuse, and security incidents, and meet legal obligations

We do not sell your personal information, and Tutora does not show advertisements.

4. Students Under 18 & Guardian Consent

A student's age comes from the date of birth their tutor entered. If a student is under 18, a parent or guardian must agree before the student can use that tutor's classrooms. Consent is given separately for each tutor.

• The student or tutor shares a one-time consent link with the guardian. The link expires after 7 days.
• The guardian reads a notice explaining what the tutor and Tutora will hold and why, and then agrees, declines, or asks for a correction.
• To confirm that the person agreeing is an adult, we use Kids Web Services (KWS), a service of Epic Games. We send KWS the guardian's email address, and KWS runs the check on its own pages using a method allowed in the guardian's country. KWS handles that data under its own privacy policy. If the same guardian passed the check within the last year, we email them a confirmation link instead.
• Until consent is given, a student's own account holds only their name. They cannot add a phone number, photo, guardian details, recovery email, or a Google sign-in.
• Once the guardian agrees, the confirmed date of birth and the guardian's name and email are added to the student's profile. The guardian's email cannot then be changed by the student.
• The guardian receives a copy of the consent and can view, download, or withdraw it at any time from the link in that email. If consent is withdrawn, the student loses access to that tutor's classrooms again.

Tutora is designed for use under a tutor's supervision. We do not knowingly let a child under 18 use a tutor's classrooms without a guardian's consent. If you believe this has happened, contact us and we will act promptly.

5. Tora, Our AI Assistant

Tora is available to tutors only. Students do not use it. When a tutor asks Tora something, we send the request to Google's Gemini AI models along with the information needed to answer it. That can include details from the tutor's own classrooms, assignments, attendance, and student list, such as student names and dates of birth. Student PINs are never sent.

If a tutor turns on "Use with Tutora AI" for a resource, we read the text of that file and store it in a search index only that tutor's Tora can use. Tutors can turn this off for any resource.

We do not use your data or your students' data to train AI models. Google processes it to produce Tora's replies under its terms for the Gemini API. Tora's answers and papers can contain mistakes, so tutors should check them before use.

Each plan includes a monthly amount of Tora use, measured in tokens.

6. Who We Share Data With

We share data only with the service providers that help us run Tutora, and only for that purpose:

• Google Firebase: sign-in, database, web hosting, and Google Analytics on the web.
• Google Gemini: the AI models behind Tora (see Section 5).
• Cloudflare: storage for files you upload (photos, logos, attachments, and resources) and secure connections to our servers.
• Kids Web Services (Epic Games): checking that a guardian giving consent is an adult (see Section 4).
• Expo: delivering push notifications to your device.
• Zoho Mail: sending emails such as invites, consent copies, and sign-in or deletion codes.
• RevenueCat and Stripe (and Apple or Google, for in-app purchases): processing plan purchases.
• Hosting providers: the servers that run our services.

We may also disclose data when required by law, court order, or a governmental authority, or as part of a merger, acquisition, or sale of assets.

7. Who Can See What in Tutora

• A tutor sees their own student list, their classrooms, and their students' submissions, marks, and attendance.
• A student sees their own classrooms, sessions, assignments, marks, feedback, and the resources their tutor shares.
• Students in the same classroom may see each other's names.
• A tutor's private notes about a student are never shown to the student or their guardian.

8. Data Retention & Deletion

• We keep account data and classroom content for as long as the account is active.
• Tutors can delete their account in the app or at thefourstars.com/tutora/delete-account. This deletes their classrooms with everything in them, their student list, papers, Tora conversations, branding, files, and the account itself.
• Students can delete their account in the app. This removes their submissions, files, and account. Their tutor's record of them stays on that tutor's list until the tutor removes it.
• Guardian consent records are kept after an account is deleted, as proof of what was agreed, for as long as the law requires.
• Tora keeps the working state of a conversation for up to 7 days. Saved conversations and papers stay until the tutor deletes them or their account.
• Consent links expire after 7 days, and PIN reset requests after 1 hour.

After deletion, remaining copies are removed from our systems within 30 days, except where we must keep them by law.

9. Data Security

All data is sent over encrypted connections (TLS). Files are not public: the app reaches them only through our service, using signed links. Student PINs are stored only as one-way hashes. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Permissions We Request

• Photos and files: to choose pictures and documents to upload, only when you pick them.
• Notifications: to tell you about invites, assignments, reviews, and session changes. You can turn each kind off in the app.

Tutora does not access your location, contacts, camera, or microphone.

11. Your Rights & Choices

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data and account
• Withdraw consent, including a guardian's consent for a student
• Object to or restrict certain processing

Tutors add and manage their students' records. If you are a student or guardian, you can ask the tutor to correct or remove details, or contact us at [email protected].

12. International Data Transfers

Our service providers and servers are located in several countries, so your information may be processed outside the country where you live, where data protection laws may differ. We take steps to keep it protected in line with this policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will tell you about material changes in the app or by email. The "Last Updated" date at the top shows when it last changed.

14. Contact Us

The Four Stars
Email: [email protected]