This page is descriptive, not a legal certification. If TutorMi is deployed under a specific owner or jurisdiction, that owner should adapt this document.
1. Who we are
TutorMi is a private tutoring workspace ("we", "us"). Contact the operator of your workspace for questions about your account.
2. What we collect
- Account data: email, name, hashed password, role (tutor/student/admin).
- Workspace data: student records, lessons, homework, topics, files, and notes that tutors create.
- Submissions: homework files and text that students upload.
- Technical data: IP address, browser/device info, and basic access logs used to operate and secure the service.
3. Why we use it
To provide the tutoring workspace: authenticate you, store your lessons and homework, isolate each tutor's students from every other tutor, and keep the service secure. We do not sell your data or use it to train third-party AI models.
4. Legal basis (GDPR/UK GDPR)
Contract — to provide the service you signed up for. Legitimate interest — to keep the service secure and functional. Consent — where explicitly asked (e.g. optional communications).
5. Minors
TutorMi is typically used by adult tutors who manage records for their students, some of whom may be under 18. Tutors are responsible for obtaining any parental consent required by local law before entering a minor's data. Contact us to request deletion of a minor's records.
6. Storage & security
Data is hosted on Lovable Cloud (Supabase / Cloudflare infrastructure). Passwords are hashed; data in transit is TLS-encrypted; workspaces are isolated at the database row level so no tutor can read another tutor's data.
7. Retention
We keep account and workspace data for as long as your account is active. On account deletion, personal data is removed within 30 days, except where retention is required by law.
8. Your rights
You can request access, correction, export, or deletion of your data at any time by contacting the operator of your workspace. EU/UK residents may lodge a complaint with their local data protection authority.
9. Subprocessors
- Lovable Cloud (hosting, database, file storage, auth).
- Cloudflare (edge delivery).
10. Changes
We may update this policy; material changes will be noted at the top of this page.