1. Introduction
[TutorAI Inc.] ("we," "us," or "our") operates TutorAI, an AI-powered SAT tutoring platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service.
2. Data We Collect
We may collect the following categories of information:
- Account information: name, email address, date of birth, and password hash.
- Profile information: target SAT score, test date, and display name.
- Usage data: practice session history, question responses, chat conversations with the AI tutor, skill mastery levels, and session metadata.
- Device and log data: IP address, browser type, operating system, and access timestamps.
3. How We Use Your Data
- Provide, personalize, and improve the tutoring experience.
- Adapt question difficulty and provide targeted feedback using our adaptive learning algorithms.
- Process conversations through our AI model to deliver tutoring responses.
- Communicate with you about your account or service updates.
- Ensure platform security and prevent abuse.
- Comply with legal obligations.
4. Children's Privacy (COPPA Compliance)
We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA).
- Users under 13: We do not knowingly collect personal information from children under 13 years of age. Our registration process includes an age verification step, and users under 13 are blocked from creating accounts.
- Users 13–17: Minors aged 13–17 may use TutorAI with parental awareness and consent. During signup, we notify minors that their parent or guardian should be aware of their use of the service.
- If we discover we have inadvertently collected personal information from a child under 13, we will promptly delete that information.
- Parents or guardians may contact us at [privacy@tutorai.academy] to request review, deletion, or cessation of data collection for their child.
5. Third-Party Services
We use the following third-party services to operate TutorAI:
- Supabase: Authentication, database storage, and backend infrastructure. Data is stored in Supabase-managed servers. See Supabase Privacy Policy.
- Anthropic: AI model provider powering the tutoring conversations. Chat messages are sent to Anthropic's API for processing. See Anthropic Privacy Policy.
We do not sell your personal information to third parties. Data shared with third-party services is limited to what is necessary to provide the service.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our services. Practice history and conversation data are retained to support adaptive learning and progress tracking. You may request deletion of your account and associated data at any time by contacting us.
7. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS), secure authentication, row-level security policies, and rate limiting. However, no method of electronic transmission or storage is 100% secure.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to or restrict certain processing.
- Export your data in a portable format.
To exercise any of these rights, please contact us at [privacy@tutorai.academy].
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.