Privacy Policy

1. Who We Are

Tutelee Technologies Ltd ("Tutelee", "we", "us") is the data controller for personal data processed through the Tutelee platform. We are registered in England and Wales.

If you have questions about how we handle your data, contact us at privacy@tutelee.com.

2. What Data We Collect

We collect the following categories of personal data:

Account data: name, email address, profile photo, role (learner, parent, tutor), and account credentials.

Session data: session recordings, tutor notes, progress records, and session metadata (date, duration, subject).

Payment data: billing details are processed by our payment processor (Stripe). We do not store full card numbers on our servers.

Usage data: pages visited, features used, device type, browser, and approximate location derived from IP address.

Communications: messages sent between users through the Platform, and any communications with our support team.

3. How We Use Your Data

We use your personal data to:

— Operate the Platform and facilitate tutor-learner sessions — Process payments and manage escrow — Provide customer support and dispute resolution — Verify tutor identities and credentials — Send transactional emails (booking confirmations, receipts, notifications) — Improve the Platform through anonymised usage analytics — Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for automated decision-making that has legal or significant effects on you.

4. Legal Basis for Processing (UK/EU Users)

We process your data under the following lawful bases:

Contract: processing necessary to provide the services you have requested.

Legitimate interests: platform security, fraud prevention, product improvement.

Legal obligation: compliance with applicable laws and regulations.

Consent: where we ask for your explicit consent (e.g. marketing emails), which you may withdraw at any time.

5. Session Recordings

All sessions conducted on the Platform are recorded by default. Recordings are:

— Stored securely for up to 12 months — Accessible only to the session participants and Tutelee's Trust & Safety team — Used solely for dispute resolution, quality assurance, and learner review — Never sold or shared with third parties

You may request deletion of a specific recording by contacting privacy@tutelee.com. Deletion of a disputed session's recording may not be possible until the dispute is resolved.

6. Children's Data

Learners under 18 may use the Platform only with the supervision and consent of a parent or legal guardian who holds the account. We do not knowingly collect personal data directly from children under 13.

If you believe a child under 13 has provided us with personal data without parental consent, please contact privacy@tutelee.com and we will delete it promptly.

7. Data Sharing

We share your data only with:

Payment processors (Stripe) to handle transactions securely.

Cloud infrastructure providers (for hosting and storage) under data processing agreements.

Identity and background verification providers for tutor screening.

Legal authorities where required by law.

We require all processors to handle your data in accordance with applicable data protection law.

8. Your Rights

Under UK GDPR and applicable data protection law, you have the right to:

— Access the personal data we hold about you — Correct inaccurate data — Request deletion of your data (subject to legal retention requirements) — Restrict or object to certain processing — Data portability (receive your data in a machine-readable format) — Withdraw consent at any time where processing is based on consent

To exercise these rights, email privacy@tutelee.com. We will respond within 30 days.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account closure, we retain certain data for up to 7 years to comply with legal and financial obligations.

Session recordings are retained for 12 months. You may request earlier deletion subject to any ongoing dispute resolution requirements.

10. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. No system is completely secure, so if you believe your account has been compromised, contact us immediately at security@tutelee.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 14 days before they take effect. The current version is always available at tutelee.com/privacy.