Privacy policy

1. Data controller and contact

In this policy, “Tutorwise”, “we” and “us” refer to the operator of the Tutorwise service. For any question or request about your personal data, write to info@tutorwise.academy.

For the information teachers enter about their own students and parents, the teacher is the data controller; we process that data on the teacher's behalf and only to provide the service (see “Student and parent information added by teachers”).

2. Data we collect

• Account information: name, email address and password (the password is stored only by the authentication service, in hashed form). If you sign in with Google, Apple or Microsoft, the name and email address that service shares with us.
• Lesson and learning information: students and parents, lesson plans and the calendar, availability and bookings, assignments and submissions, notes, weekly summaries, messages, drawings on the shared whiteboard, uploaded PDFs, images and videos, lesson packages and payment records.
• Subscription information: the Tutorwise Pro plan, subscription status and billing details. Your card details stay with the payment provider and never reach us.
• Technical information: IP address, device and browser type, sign-in times and error logs. We use these to keep the service secure and working properly.
• Website visits: on tutorwise.academy, Cloudflare Web Analytics keeps aggregate statistics such as page view counts, without cookies and without identifying you.

3. How we use your data

• To create your account, verify your sign-in and protect your account.
• To provide the service: lesson planning, live lesson links, the shared whiteboard, assignments, file and video sharing, messaging, package and payment tracking, and the weekly summary for parents.
• To send service emails such as invitations, password resets and lesson notifications.
• To manage and bill subscriptions.
• To prevent abuse and security problems, find and fix errors, and answer your support requests.
• To meet our legal obligations.

We do not sell your data, we do not use it to show ads and we do not build marketing profiles about you.

4. Legal bases

We process your data on the basis of entering into and performing our contract with you, our legal obligations, our legitimate interests such as keeping the service secure and, where required, your consent (Article 5 of Turkey's Personal Data Protection Law No. 6698 and Article 6 of the EU General Data Protection Regulation).

5. Student and parent information added by teachers

Teachers add their students and parents to Tutorwise and invite them to their workspace. The teacher is responsible for the accuracy of this information, for informing students and parents, and for obtaining any permissions required.

Students and parents see only what has been shared with them. A student or parent can first raise their rights about this information with their teacher; they can also write to us directly, and we will resolve the request together with the teacher.

6. Children

Tutorwise may include students under 18. Accounts for minors should be opened with a parent's consent; parents can follow their child's lessons and progress with their own parent account. If you believe a child's information was added without permission, write to us; we will review it and delete it if needed.

7. Who we share data with

We share your data only with service providers that help us run the service and process the data on our instructions:

• Supabase: accounts and authentication, file storage.
• Cloudflare: hosting of the website and the app, security, video hosting and playback (Cloudflare Stream), cookieless website statistics.
• Resend: sending service emails.
• Lemon Squeezy: collecting Tutorwise Pro payments and invoicing.
• Google, Apple and Microsoft: verifying your identity, only if you choose to sign in with these accounts.

The Google Meet, Zoom, Microsoft Teams or Jitsi links you use in lessons take you to those services, where their own privacy policies apply. Where the law requires it, we may also share data with the competent authorities.

8. International transfers

Our service providers' servers may be located outside Turkey, in countries such as the member states of the European Union and the United States. We make these transfers on the basis of the safeguards in Article 9 of Turkey's Personal Data Protection Law and in the EU General Data Protection Regulation (for example, standard contractual clauses).

9. How long we keep data

We keep your data for as long as your account is open. When you delete your account, your data is deleted or anonymised so that it can no longer be linked to you; copies in backups are deleted automatically as the backup cycle runs. Records we must keep by law, such as invoices, are kept for the period the law requires.

10. Cookies

This website uses a single cookie that remembers your language (for one year). The app stores the essential cookies that keep you signed in and your theme preference. We do not use advertising or tracking cookies; Cloudflare Web Analytics does not use cookies.

11. Security

Your data is encrypted in transit (TLS). Each user sees only the workspaces they are authorised for; students and parents see only what has been shared with them. Files are accessed through signed links that expire. No system is completely free of risk; if a security breach occurs, we will inform you and the competent authority as the law requires.

12. Your rights

Under Article 11 of Turkey's Personal Data Protection Law and the EU General Data Protection Regulation, you have the right to:

• find out whether your data is processed and ask for information about it,
• access your data and get a copy,
• ask for incomplete or incorrect data to be corrected,
• ask for your data to be deleted or its processing to be restricted,
• object to processing and withdraw the consent you have given,
• receive your data in a portable format for another service.

Send your request to info@tutorwise.academy; we will reply within 30 days at the latest. If you are not satisfied with our reply, you can complain to Turkey's Personal Data Protection Authority or, if you are in the European Union, to the data protection authority in your country.

13. Changes to this policy

We may update this policy from time to time. The date of the last update is shown at the top of the page; we announce important changes in advance on the website and, where appropriate, by email.