Privacy Policy
Last updated 30 May 2026
This Privacy Policy explains how TutorDash (“TutorDash”, “we”, “us”) collects, uses, and protects personal data when you use the tutoring platform at www.tutordash.io. We are the data controller for the personal data described here, except where we act as a processor on behalf of a tutoring organization that uses our platform with its own students.
Who this applies to
Our platform is used by students (many of whom are under 18), their parents or guardians, tutors, and organization administrators. Where a student is a minor, we rely on the consent of a parent or guardian for certain processing, including lesson transcription (see below).
What we collect
- Account & identity: name, email, username, and, collected once at student sign-up, date of birth, used to determine whether a student is a minor.
- Tutoring records: school, goal scores, test dates, assignments, submissions, practice-test results, skill progress, and free-text notes written by tutors.
- Lesson audio & transcripts: when a lesson is transcribed, we capture lesson audio and generate a written transcript and AI-assisted summary.
- Parent/guardian details: name, email, and (where provided) address, used for reports, scheduling, and billing.
- Billing: payer name and email, card metadata (such as the last four digits and card brand), and, for tutors, payout details. Card numbers are handled by our payment processor, not stored by us.
- Technical & diagnostic: limited device, browser, and IP information in our security and diagnostic logs.
How we use it & our legal bases
- To provide the service (lessons, grading, progress tracking, scheduling), performance of a contract.
- To transcribe and summarize lessons: consent (parental consent where the student is a minor).
- To send reports, reminders, and invoices: contract and, for optional communications, consent.
- To secure the platform and prevent abuse: our legitimate interests.
- To meet legal and accounting obligations: legal obligation.
Lesson transcription
Online lessons may be transcribed so the tutor can focus on teaching and so we can produce a written summary and progress report. Where we know from their date of birth that a student is under 18, we ask a parent or guardian for permission before transcribing. Lesson audio is stored securely and is automatically deleted after 30 days. It can be reached only by the tutors teaching the lesson and, where the student belongs to an organization, that organization's administrators. Our staff cannot play it in the app and handle it only to operate the service, such as deleting it. Consent can be withdrawn at any time.
If lesson audio cannot be uploaded or transcribed because of a technical problem, a copy is saved to the tutor's own device so the lesson is not lost. That copy is in the tutor's control, and we cannot delete it.
Who we share data with
We share personal data with the service providers below, who process it on our behalf under contract. All are based in the United States, so using our platform involves transferring data internationally; we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.
| Provider | Purpose | Location |
|---|---|---|
| Clerk | Authentication & account management | United States |
| Supabase | Database & secure file storage | United States |
| Vercel | Application hosting | United States |
| Anthropic (Claude) | AI lesson summaries & progress reports | United States |
| AssemblyAI | Lesson transcription, live and after the lesson | United States |
| Deepgram | Live lesson transcription (secondary provider, only when enabled) | United States |
| Google (Gemini, Calendar) | Transcription fallback from saved lesson audio; calendar scheduling | United States |
| Resend | Transactional & notification email | United States |
| Stripe | Billing & payment processing | United States |
We do not sell personal data, and we do not use student data to train third-party AI models.
How long we keep it
- Lesson audio: deleted automatically after 30 days.
- Transcripts: kept until you ask us to delete them. If a parent or guardian withdraws consent, we stop saving that student's lesson audio and transcripts (within a few minutes if a lesson is in progress), do not transcribe later lessons, and remove archived transcript copies. Lesson audio already saved is deleted on the normal 30-day schedule.
- Account, tutoring records, reports, and billing records: retained for as long as the account is active and as required for legal and accounting purposes.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. For a minor, a parent or guardian may exercise these rights on the child's behalf. To make a request, contact us at privacy@tutordash.io. You may also lodge a complaint with your local data protection authority.
Security
We use access controls, encryption in transit, and reputable infrastructure providers to protect personal data. No system is perfectly secure, but we work to protect your information and to respond promptly to any incident.
Children
Accounts for students under 18 are created through an invitation from their tutor or organization. We collect a student's date of birth at sign-up to identify minors, and we seek parental or guardian consent for lesson transcription.
Changes & contact
Contact
Questions about this policy or your data? Email privacy@tutordash.io.
We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.