Skip to content
Tutitor logoTutitor

Privacy Policy

Last updated: 4 July 2026

This Privacy Policy explains what information Tutitor ("we", "us") collects, how we use it, and the choices you have. Tutitor is a scheduling, attendance, and billing tool for private tutors.

Information we collect

Account information: your name, email address, and profile details, provided when you sign up (via our authentication provider).

Data you enter: your students, sessions, attendance records, and invoices.

Google account data (only if you connect Google): your Google account email address, and the calendar events we create on your behalf for video sessions. When you connect Google we receive an OAuth refresh token that lets us create those events; we do not read your existing calendar.

How we use your information

To provide the service: managing your students, scheduling sessions, tracking attendance, and generating invoices.

To create Google Calendar events with a Google Meet link for your video sessions — only when you have connected your Google account and marked a session as video.

To contact you about your account and important service notices.

Google user data and Limited Use

Tutitor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We request the Google Calendar (calendar.events) and basic profile (email) scopes solely to create and manage calendar events with Meet links for your sessions. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as necessary to provide this feature, to comply with applicable law, or with your consent.

We do not allow humans to read your Google user data unless we have your consent, it is necessary for security or to comply with the law, or the data is aggregated and anonymized.

How we store and protect your data

Data is transmitted over HTTPS. Your Google refresh token is encrypted at rest before it is stored, and access tokens are generated on demand rather than kept.

Access to production data is restricted to authorized personnel for operation and support.

Data retention and deletion

You can disconnect Google at any time from your account settings. Disconnecting revokes our access with Google and deletes the stored token; the previously created calendar events remain in your Google Calendar unless you remove them.

If you delete your account, we delete your associated data, subject to any retention required by law.

Sharing

We do not sell your personal information. We share data only with service providers that help us run the product (such as hosting and authentication) and with Google when you use the Google integration.

Your choices

You can access and update your information in the app, disconnect the Google integration, and request deletion of your account by contacting us.

Children

Tutitor is intended for tutors and is not directed to children. We do not knowingly collect personal information directly from children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above.

Contact

Questions about this policy? Email us at support@tutitor.com.