This policy explains what personal data TutorAura (“we”, “us”) collects when you use tutoraura.com and the TutorAura app, why we collect it, and the choices you have. We serve students around the world, and we apply the same privacy protections to everyone.
Data we collect
- Account data: your email address and a securely hashed password (or the identity your sign-in provider shares with us).
- Profile and preferences: optional display name, time zone, language, country (optional), exam pathway, exam board, exam date, goals and self-rated confidence.
- Learning data: your answers, diagnostic results, practice and assessment history, topic mastery, study plans, lessons completed and saved questions.
- Whiteboards and conversations: the content of your whiteboards and your conversations with the AI tutor.
- Usage and security data: records of AI requests (time, feature, model and token counts, used for limits and costs) and a keyed hash of your IP address for rate limiting. We do not store raw IP addresses for this purpose.
- Billing data: if you subscribe, our payment provider (Stripe) processes your payment details. We receive a customer reference and subscription status, but never your full card number.
- Messages you send us through the contact form or by email.
How we use your data
- To provide the service: scoring answers, building your study plan, saving your work and showing your progress.
- To provide AI tutoring: when you request feedback, we send your message, the relevant question and, if you choose, an image of your whiteboard working to our AI provider.
- To manage your trial and subscription, enforce fair-use limits and prevent abuse.
- To respond to your messages and send essential service emails (for example, account verification and password resets).
We do not sell your personal data, and we do not use it for advertising.
AI processing
AI features are provided by a third-party AI provider configured by TutorAura. Only the content needed to answer your request is sent, and only when you ask. AI responses can be inaccurate. We label AI output, curated content from our question bank, and AI-generated practice questions separately.
Service providers
We use trusted providers to run TutorAura: hosting and database (such as Vercel and Supabase), AI model providers, Stripe for payments, and email delivery for account emails. They process data on our behalf under contractual safeguards. Some of these providers may process data outside your country. Where required, we rely on appropriate transfer safeguards such as standard contractual clauses.
Cookies, analytics and local storage
We use strictly necessary cookies to keep you signed in. Your browser stores your theme preference (light or dark). We do not use advertising cookies.
On our public website and sign-in pages we use Google Analytics to understand how visitors find and use the site (for example, which pages are visited and roughly where visitors come from). Google Analytics only sets cookies if you click "Accept" in the cookie notice; if you decline, no analytics cookies are stored. Advertising features are switched off. You can change your choice at any time with "Cookie settings" in the website footer. Google Analytics is not used inside the student app, so your lessons, conversations, answers and whiteboards are never sent to it. Google processes this data as described in its privacy policy (policies.google.com/privacy).
Children and students
TutorAura is designed for secondary-school and pre-university students. If you are below the age at which you can consent to online services in your country, you may use TutorAura only with the involvement and consent of a parent or guardian. If you believe a child has given us personal data without appropriate consent, contact us and we will delete it.
How long we keep data
We keep your account and learning data while your account is active. When you delete your account in Settings, we permanently delete your profile, answers, whiteboards, conversations and usage records from our live database. Encrypted backups held by our database provider expire on their normal rotation. We keep billing records that the law requires us to retain.
Your rights
Depending on where you live, you may have rights to access, correct, delete, export or restrict the use of your personal data, and to object to certain processing. You can update most information in Settings and delete your account at any time. For other requests, email privacy@tutoraura.com. You may also have the right to complain to your local data protection authority.
Security
Data is encrypted in transit. Access to student records is restricted per user at the database level, and passwords are never stored in plain text. No system is perfectly secure, but we work to protect your data and will notify you of a breach where the law requires.
Changes and contact
We'll post any changes here and update the date above. Questions? Contact privacy@tutoraura.com or use our contact form.