Privacy Policy

What we collect

• Account details: name, email, and password (stored as a one-way bcrypt hash — we never see or store your plain-text password). Phone number is optional.
• Guest checkout: if you buy a digital product without an account, we store the name and email you enter, solely to send your download link and receipt.
• Booking details: session times, notes you add for your tutor, and booking status.
• Payment information: handled entirely by Razorpay. We never receive or store your card, UPI, or bank details for your own payments — only the payment status and a transaction reference.
• Tutor payout details: if you're a tutor, your UPI ID / bank details are encrypted at rest (AES-256-GCM) and only decrypted, on demand, by an admin processing your payout — every such access is logged.
• Uploaded/purchased files: digital products you buy are stored on Cloudflare R2 and served to you via a short-lived, signed link (valid 24 hours) rather than a public URL.

What we don't do

We do not currently use third-party analytics or advertising trackers (no Google Analytics, ad pixels, or similar) anywhere on the site. We do not sell or rent your data to anyone.

Cookies & sessions

We use one essential, httpOnly cookie to keep you logged in (a refresh token, rotated on each use, valid for 30 days). It can't be read by JavaScript and is only sent back to our own backend. We don't use cookies for advertising or cross-site tracking.

Emails we send

Transactional emails only, via our email provider (Brevo): email verification, purchase receipts, booking confirmations, session reminders, and cancellation notices. We don't send marketing emails unless you separately opt in to something in the future, in which case this policy will be updated first.

Who we share data with

Only the processors needed to run the service: Razorpay (payments), our email provider (Brevo, for sending the emails above), and Cloudflare R2 (file storage). We don't share your data with anyone else, including other tutors or students beyond what's needed to fulfill a booking (e.g. a tutor sees the name/email of a student who books them).

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete your account and associated personal data (subject to what we're legally required to retain, e.g. payment records) by contacting us — see the Terms page for contact details.

Changes to this policy

If this policy changes in a material way, we'll update the date at the top of this page.