Privacy Policy
Last updated: 4 July 2026
This Privacy Policy explains what information Tutitor ("we", "us") collects, how we use it, and the choices you have. Tutitor is a scheduling, attendance, and billing tool for private tutors.
Information we collect
Account information: your name, email address, and profile details, provided when you sign up (via our authentication provider).
Data you enter: your students, sessions, attendance records, and invoices.
Google account data (only if you connect Google): your Google account email address, and the calendar events we create on your behalf for video sessions. When you connect Google we receive an OAuth refresh token that lets us create those events; we do not read your existing calendar.
How we use your information
To provide the service: managing your students, scheduling sessions, tracking attendance, and generating invoices.
To create Google Calendar events with a Google Meet link for your video sessions — only when you have connected your Google account and marked a session as video.
To contact you about your account and important service notices.
Google user data and Limited Use
Tutitor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We request the Google Calendar (calendar.events) and basic profile (email) scopes solely to create and manage calendar events with Meet links for your sessions. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as necessary to provide this feature, to comply with applicable law, or with your consent.
We do not allow humans to read your Google user data unless we have your consent, it is necessary for security or to comply with the law, or the data is aggregated and anonymized.
How we store and protect your data
Data is transmitted over HTTPS. Your Google refresh token is encrypted at rest before it is stored, and access tokens are generated on demand rather than kept.
Access to production data is restricted to authorized personnel for operation and support.
Data retention and deletion
You can disconnect Google at any time from your account settings. Disconnecting revokes our access with Google and deletes the stored token; the previously created calendar events remain in your Google Calendar unless you remove them.
If you delete your account, we delete your associated data, subject to any retention required by law.
Sharing
We do not sell your personal information. We share data only with service providers that help us run the product (such as hosting and authentication) and with Google when you use the Google integration.
Your choices
You can access and update your information in the app, disconnect the Google integration, and request deletion of your account by contacting us.
Children
Tutitor is intended for tutors and is not directed to children. We do not knowingly collect personal information directly from children.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date above.
Contact
Questions about this policy? Email us at support@tutitor.com.