Privacy Policy

For tutors, we collect listing details such as display name, headline, biography, subjects or tutoring areas, learner groups, availability, rates, contact settings, identity-review status, and membership state.

A tutor may save a client's household contact email, name, phone, billing identity and address, and private tutor-only notes. We use the saved household contact email to deliver a learner-portal invitation and related tutoring or billing notices when the tutor requests them. Invitation records include the invited email, expiry, delivery attempts and status, acceptance state, and related account and tutor-client identifiers. The invitation record stores a one-way digest rather than the raw invitation secret. After the link is opened, the signed-in or browser session keeps only a short-lived claim tied to that invitation attempt.

We collect enquiry messages, guest message-board email addresses, moderation events, message activity, tutor-client relationship records, invitation delivery and acceptance metadata, whiteboard session data, relationship-specific classroom identifiers, per-session viewer links, live stream signaling metadata, recording metadata and files, PDF export metadata, membership invoice records, tutor-created invoice records, receipt records, recorded payment history, and analytics events such as tutor profile views and enquiry activity.

Classroom and viewer links are bearer capabilities. Their identifiers are stored so the Platform can route an intended household to the correct current session, revoke access, enforce viewer limits, and retain eligible lesson documents for their stated periods.

We use information to operate the service, publish and order eligible tutor profiles, deliver secure guest and household invitation links, verify control of an invited email, connect a household account only after explicit acceptance, provide tutor tools, route a saved client's reusable classroom entrance to the correct active lesson, support lesson records, verify requested membership invoices, send invoice and receipt emails, support troubleshooting, enforce legal documents, moderate abuse, and understand how the Platform is being used.

We also use explicit tutor-client and account links, verified-email checks, immutable billing-recipient snapshots, and per-resource tokens to decide which private records a signed-in household or bearer-link holder may access.

Eligible tutor listing information may be shown publicly in the directory. The default order may rank profiles with more useful completed fields ahead of sparse profiles; paid membership does not buy ranking. Learner, saved-client, invitation, and guest enquiry information is not shown publicly.

When a household accepts an invitation, eligible records explicitly tied to that tutor's saved-client relationship may be shown in the household portal. Each tutor's relationship remains separate. Private tutor notes are not shown. Billing records also require the verified household email to match the issued recipient snapshot. Email similarity alone does not transfer unrelated client records.

A learner household uses one email and password. Anyone the household authorises by sharing those credentials may see the eligible records available to that account. Reusable classroom entrances and other bearer links may also be used by anyone who receives the link, so recipients must share them only within the intended household and report unintended disclosure.

A learner portal invitation is normally usable for 14 days and can be rotated or revoked sooner. Delivery and acceptance audit metadata may be retained for security, support, and relationship records after the raw link expires. A reusable classroom entrance remains associated with an active saved-client relationship until it is reset or invalidated; it does not itself provide access to historical files.

Whiteboard public lesson links and PDFs are available for 30 days after a board ends. Tutor dashboard PDF copies are retained for 12 months unless deleted earlier under Platform rules. Recordings are retained for 24 hours so tutors can download them before expiry. Sensitive identity document files are encrypted and restricted to admin review workflows.

We retain other information for as long as needed to provide the service, preserve issued-document and payment audit integrity, maintain Platform safety, enforce legal documents, and meet legal or operational obligations. No online system or delivery method is guaranteed secure or continuously available.