Privacy Policy

Tutoring AI Analyzer - Privacy Policy

Last updated: August 12, 2026

This Privacy Policy explains how Tutoring AI Analyzer ("we", "our", or "us") collects, uses, shares, retains, and otherwise processes personal information through the Tutoring AI Analyzer platform and website (the "Service") available at https://tutoringaianalyticer.digital. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of personal information:

  • Account information - your username, email address, and a securely hashed password when you register as a tutor. We also collect session tokens to keep you signed in.
  • Student information - the student profiles, subjects, goals, notes, and consent records that tutors enter into the Service for their tutoring sessions.
  • Lesson content - audio recordings of tutoring sessions captured by our meeting bot (through Recall.ai), transcripts generated from those recordings (through Deepgram), and the AI-generated analyses, insights, and lesson plans derived from them.
  • Connected account information - when you link a Zoom or Google account: your provider user ID and email address, and (for Zoom) an encrypted refresh token used only to create meetings on your behalf. Access tokens are never stored - they exist only in memory during a request and expire within about an hour.
  • Usage information - which features you use, rate-limited request counts, and session activity timestamps needed to secure your account.

2. How We Use Information

We use the information we collect to:

  • Provide and operate the Service, including scheduling lessons and dispatching the recording bot to your meetings.
  • Transcribe and analyze tutoring sessions to generate insights, evaluations, learning maps, and next-lesson plans.
  • Create meetings automatically on your behalf when you connect a Zoom account, or accept the meeting links you choose to paste.
  • Sync lesson events with your Google Calendar when you connect it.
  • Authenticate your account, enforce rate limits, and protect the Service from abuse.
  • Support, troubleshoot, and improve the Service.

3. How We Share Information

We do not sell your personal information. We share information only with the third-party processors that are required to operate the Service, and only to the extent necessary:

  • Zoom - to create meetings under your account when you connect Zoom (OAuth) and to let the recording bot join meetings as a guest.
  • Recall.ai - to dispatch the meeting bot that records tutoring sessions.
  • Deepgram - to transcribe recorded sessions into text.
  • LLM providers (accessed through LiteLLM) - to generate analyses, summaries, experts, lesson plans, and learning maps from transcripts.
  • Google - to sync lesson events with your Google Calendar when you connect it.
  • Tavily - to discover study materials on the web for a student's subtopic when you request it.
  • Service infrastructure (hosting provider, database, queue) - to store and process data securely.

Student consent: the Service includes a consent step when a student profile is created, and recordings are only captured for students for whom a tutor has confirmed consent. We may disclose information where required by law, legal process, or in response to a valid request from a public authority.

4. Data Retention & Security

We retain personal information only for as long as needed to provide the Service or comply with legal obligations. Specifically:

  • Account and student data are retained while your account is active and are deleted when you delete your account.
  • Recording transcripts and analyses are retained to support the tutor's ongoing use of the Service and can be removed with the associated student or account.
  • Zoom refresh tokens are stored encrypted (Fernet: AES-128-CBC with HMAC-SHA256, keyed from your session secret). Access tokens are kept in memory only and expire automatically.
  • Passwords are stored as salted hashes; we cannot read them.

We apply industry-standard safeguards - encryption in transit (TLS), encryption of stored tokens, structured access controls, and regular backups - to protect your information.

5. Your Rights

Depending on your jurisdiction (including the GDPR), you may have the right to:

  • Access the personal information we hold about you.
  • Export your data - the Service provides account and student export endpoints that return your data in a portable format.
  • Correct inaccurate information.
  • Delete your account and data - account deletion removes your profile and cascades to your students and their lesson data.
  • Withdraw consent for connected accounts (disconnect Zoom or Google) at any time.
  • Lodge a complaint with your local data protection authority.

6. Cookies & Local Storage

The Service uses httpOnly session cookies to keep you signed in, along with local storage for lightweight client state (for example, wizard progress). These are required for core functionality. We do not use third-party advertising cookies.

7. Children's Privacy

The Service is designed for tutors working with students of any age. Student information is entered by tutors who are responsible for obtaining the necessary parental or guardian consent, which the Service supports through its consent step. The Service does not knowingly collect personal information from children directly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date. Material changes will be highlighted through the Service where appropriate.

9. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at valeryo@tutoringaianalyticer.digital.