What we store about a student
A parent creates the student profile. We store a nickname or display name chosen by the parent, a username used for signing in, the selected grade range, which tutoring modes are switched on, whether AI is paused, and the account plan. We do not ask a student for an email address, phone number, home address, school name, birthday, or photo.
We also store a timestamped counter row each time the tutor is used — the tool used and a short topic label — so daily limits and the progress screen work.
What we do not store
We do not store chat conversations. Student messages and tutor replies are not written to the database and are not kept in server logs. Once a reply has been shown, the exchange only exists in that browser session.
Third parties that process data
Running this service involves third-party providers for hosting, the database and sign-in, and OpenAI for generating tutor replies. A student's message text, the selected grade range and the selected tutoring mode are sent to OpenAI in order to produce a reply. Account details such as the username are not sent.
We apply automated redaction before sending: things that look like an email address, phone number, street address, password or social media handle are replaced with a placeholder. Automated redaction is a safety net, not a guarantee that every possible piece of personal information is caught.
Needs legal decision: Whether to name each provider explicitly, and what to state about their retention and training practices. Do not publish claims about any provider's handling of data without confirming them against that provider's current terms.
How long we keep things
Automatic deletion of usage and activity records is currently switched off, with a placeholder window of 400 days configured in the codebase. No retention period has been approved yet.
Needs legal decision: The actual retention period for usage counters and learning-activity records, and whether automatic deletion is enabled at launch.
Deleting a student
A parent can delete a student profile from their dashboard at any time. Deleting the profile also deletes that student's usage counters and learning-activity records, and removes their ability to sign in.
Contact
Needs legal decision: A real contact route for privacy requests — postal address, email address, and who is responsible for responding — must be added before launch.