Privacy

A child’s record is deliberately small. We hold:

• their first name or nickname — whatever the teacher types
• optionally a year of birth or school year, to pitch the work
• optionally their first language, which changes which wrong answers we offer
• every question they answered, what they chose, and whether it was right
• what we conclude from that: which skills are strong, which need work

We do not ask for a child’s email address, phone number, photograph, home address or school. A child has no login of their own; they practise inside their parent’s account.

• The child’s own teacher. Everything about that child.
• The child’s parents. Progress, plans that the teacher has made active, and lesson notes.
• Nobody else. In particular, one teacher cannot see another teacher’s students, and one family cannot see another family.

That last point is enforced by the database itself, not by the screens. Every table carries rules that filter rows by who is asking, and those rules are tested by trying to break them — deliberately asking for another teacher’s data and checking that nothing comes back.

When a teacher asks for help drafting questions or preparing a lesson, we send that request to Anthropic’s Claude API. What goes with it is the subject, the skill, and any teaching material the teacher chose to include.

We do not send a child’s name, and we do not send their answers. Where the request needs to reflect how a child is doing, it carries the shape of it — “a learner at about 60% on the past simple” — and not the child.

Nothing an AI produces reaches a child until a teacher has read and approved it.

Data is stored with Supabase, on servers in the European Union, encrypted in transit and at rest. The service runs on Vercel. These are the only two companies that hold your data on our behalf, apart from Anthropic receiving the AI requests described above.

We do not use advertising trackers, we do not sell data, and we do not share it with anyone for marketing.

One kind only: the cookie that keeps you signed in. There are no analytics cookies and no advertising cookies, which is why there is no cookie banner asking you to accept any.

You can ask us for a copy of everything we hold about you or your child, ask us to correct it, or ask us to delete it. Email hello@tutornestil.com and we will act within 30 days.

Deleting a child removes their practice history with them. Because every conclusion we show is derived from that history, deletion is genuine rather than a flag that hides the row.

For as long as the account is open, because a learning record is only useful over time. Delete the account and it goes within 30 days, allowing a short further period for backups to age out.

Questions, or anything that looks wrong, to hello@tutornestil.com.

This page describes the system as it is actually built. It has not been reviewed by a lawyer, and it is not a substitute for legal advice.