The short version
We collect what Tutorey needs to work and nothing else. We do not sell your data or your students’ data, to anyone, ever. You can export or delete all of it whenever you want.
Questions: chat@tutorey.app
Who this covers
Tutorey is used by tutors. This policy covers you, the tutor, and the records you keep in the app.
Guardians and students do not have tutor accounts. A student may be given a link by their own tutor to a page showing their attendance and what they owe, which they open with their email address and a four-digit PIN — that page shows only their own record and nothing about anybody else.
What we collect
Your account. Name, email address, phone number, district, date of birth and qualification, if you give them. Email and password are needed to sign you in. The rest appears on your profile and in what guardians see.
What you enter about your teaching. Batches, students, guardians’ names and phone numbers, attendance records, fees and payments. You decide what goes in.
Technical information. Basic logs from your device and browser so we can find faults. No advertising identifiers and no third-party trackers.
If you write to us. The contact form sends your name, email and message to our inbox so we can answer. It is used for that and nothing else — no mailing list, no marketing.
Students are usually children
Most people recorded in Tutorey are under eighteen. That places a duty on both of us.
Ours: student records are treated as sensitive, they are never used for advertising, and they are never sold. No other tutor can read them — the only exception is somebody you have invited onto your own team, who sees what you granted them and nothing more.
Yours: you decide what to record about a child. Only enter what you need to teach them and collect their fee. Do not enter medical details, national ID numbers or anything else Tutorey does not ask for. If a guardian objects to their child’s details being in the app, remove them — the app can do this in a few taps and it takes the attendance and payment history with it.
What we do with it
- Run the app — show your batches, keep attendance, work out dues.
- Sign you in and keep your session secure.
- Send you account email: confirming your address, resetting your password.
- Find and fix faults.
- Answer you when you contact support.
We do not use your data or your students’ data to train models, we do not build advertising profiles, and we do not sell or rent it.
Messages to guardians
There are two ways a message reaches a guardian, and they are genuinely different. Which one you use is your choice.
From your phone. Tutorey writes the reminder or receipt, then opens WhatsApp or your SMS app with it ready. Sending happens from your own number, and the message never passes through our servers.
Sent for you. If you switch on automatic fee reminders, our servers send them without you pressing anything. To do that we pass the guardian’s phone number and the message to MiMSMS, an SMS gateway in Bangladesh, or the guardian’s email address to our email provider. They are given only what is needed to deliver that one message.
This is off unless you turn it on, and you can turn it off again at any time in Settings.
Your team
If you invite somebody to help run your coaching — an assistant, a teacher, a manager — they can see the parts of your records you gave them access to. You choose what each person may do when you invite them, you can change it afterwards, and you can remove them. A teacher restricted to their own batches cannot see the rest of your students.
Inviting somebody sends their email address to our email provider so the invitation can reach them, and shows them your name so they know who is asking.
Notifications on your phone
If you allow notifications, your phone registers an anonymous device token with Google (Firebase Cloud Messaging) and we store it against your account. It is what lets us tell you that somebody applied to join, that a payment needs checking, or that your teaching days have changed. It identifies a device, not you, and it is deleted when you sign out or turn notifications off.
Paying for Tutorey
Subscriptions bought in the Android app are handled by Google Play. Your card details go to Google and never reach us — we are told which plan you are on and when it renews, and nothing else.
Refer and earn. If you take part and ask to be paid, we store the bKash or Nagad number you give us so somebody can send the money to it. It is used for that and kept with your payout record.
Who else can see it
Only the companies that run the pieces the app is built on:
- Supabase — the database and sign-in service where your records are stored.
- Vercel — serves this website.
- Resend — delivers account email, team invitations and, if you switch them on, fee reminders by email.
- MiMSMS — an SMS gateway in Bangladesh. Receives a guardian’s phone number and the message text, but only for reminders you have set to send automatically.
- Google — Firebase Cloud Messaging delivers notifications to your phone; Google Play handles subscription payments; and Google confirms it is you if you sign in with a Google account.
- Meta — only if you choose to sign in with Facebook, and only to confirm it is you.
Each holds data only to do that job. We also disclose data if the law genuinely requires it — and we will tell you unless we are forbidden from doing so.
Where it is kept, and for how long
Records are held on Supabase infrastructure, which may be outside Bangladesh.
We keep what you enter until you delete it. Attendance, fees and student records stay for as long as your account is open — we do not expire them, because a tutor asked for a register from two years ago is a tutor who needs it to still be there. If you would rather older records were removed on a schedule, ask us and we will do it for your account.
On your own device. So the app works during a class with no signal, recent screens and anything you have entered but not yet synced are stored on your phone. Logging out clears it; so does uninstalling.
When you delete your account we remove your records within 30 days, except anything we are legally required to keep. Backups roll on a 30-day cycle, so a copy can survive in one for up to 30 days after that — nobody reads a backup except to recover from a failure.
Keeping it safe
Data travels encrypted and is stored encrypted. Access is enforced at the database itself, so one tutor’s account cannot read another’s records even if the app has a bug. Access by our own team is limited to people who need it to run the service.
No system is perfect. If your data is ever exposed we will tell you what happened, what was affected and what to do, without delay.
Your choices
- See it — everything about you is visible in the app.
- Correct it — edit it in the app, or ask us.
- Take it with you — ask at chat@tutorey.app and we will send your records in a readable format.
- Delete it — see the data deletion page.
If you are in the UK or EU, the GDPR gives you these rights and more, including the right to complain to your data protection authority. We honour them wherever you are.
Children using Tutorey
Tutorey is for teachers. It is not intended for anyone under eighteen to sign up as a tutor, and we do not knowingly create accounts for them.
Changes
If we change this policy in a way that matters, we will email you before it takes effect. The date at the top always says when it last changed.
Contact
Privacy: chat@tutorey.app
Anything else: chat@tutorey.app
Dhaka, Bangladesh