Privacy Policy — Tutorly AI
Last updated: 2026-09-24
Effective date: September 24, 2026 Last updated: September 24, 2026
Tutorly AI is operated by LeadRescue LLC ("we," "us," "our"). This Privacy Policy explains what information we collect from users of the Tutorly AI mobile app ("App"), why we collect it, how long we keep it, who we share it with, and the choices and rights available to you and, where applicable, your parent or guardian.
Who this policy covers
This policy applies to anyone who downloads or uses the Tutorly AI app, including students, parents/guardians who set up or pay for an account, and anyone who contacts our support channels.
Information we collect
Account information: name or display name, email address or phone number used to register, age or grade-level/school-level indicator (needed to select the correct curriculum content and to apply minors' protections — see "Children's and minors' data" below), country/territory selection, and parent/guardian contact information where a parental-consent flow applies.
Subscription and billing information: subscription tier (Free / Pro Monthly / Pro Annual) and status, and transaction identifiers processed through Google Play Billing. We do not receive or store your full payment card number, e-wallet credentials, or mobile-money PIN — those are handled entirely by Google Play and its payment partners.
Chat/tutoring content: the questions, homework problems, exam-practice prompts, and any text, images, or files you submit to the AI tutor ("Chat Content"), the AI-generated responses returned to you, and any feedback you give on those responses. Please avoid submitting sensitive personal information (health, financial, government ID numbers) in Chat Content — it is not needed for tutoring.
Usage and device information: app usage events (features used, queries per day, session length, curriculum topics accessed), device model, OS version, device/advertising identifiers, IP address (used for coarse location/country detection and fraud prevention), app version, language/locale, and crash/diagnostic logs.
Information from others: if a parent/guardian creates or manages an account on behalf of a minor, we collect the parent/guardian's contact details as part of the consent record.
Why we collect this information
- To provide the core tutoring service: matching your questions to the correct national curriculum content and generating an explanation or practice answer.
- To operate your account: authentication, subscription status, free-tier daily query limits, customer support.
- To process payments via Google Play Billing and reconcile subscription entitlements.
- To improve the product: understanding which curriculum topics are most used, where answers are rated unhelpful, and where the app crashes or is slow.
- To meet legal obligations: responding to lawful requests, enforcing our Terms of Service, and satisfying minors'-data and consumer-protection law in each territory.
- We do not sell personal information to third parties, and we do not use Chat Content to build public-facing advertising profiles.
Third parties who process your data
- AI model providers (Anthropic, primary; OpenAI, fallback) receive the text/content of your tutoring query and account-level metadata needed to route the request, in order to generate the AI tutoring response.
- Google Play Billing receives purchase/subscription events and device/account identifiers needed for entitlement, to process subscription payments and manage renewals/refunds.
- Backend hosting and database providers receive account records, usage logs, and Chat Content stored for service delivery, to run the app's servers, database, and backups.
- Analytics and crash-reporting tooling receives device/usage/crash data (not Chat Content), to detect bugs and measure feature usage.
- Email/SMS delivery providers receive contact information and transactional message content, to send account, billing, and parental-consent communications.
We require each provider to only use data as instructed by us and not for their own independent purposes. We may also disclose information where required by law, to protect the rights and safety of users, or in connection with a merger, acquisition, or sale of assets, with notice to users where required.
Data retention
- Account data is retained for as long as the account is active, plus a limited period after account closure (typically up to 12 months) to handle billing disputes, legal holds, and account recovery, then deleted or anonymized.
- Chat Content is retained to maintain your tutoring history and enable "review past answers" features. You (or a parent/guardian) may request deletion at any time. Absent a deletion request, Chat Content is retained for as long as the account is active and a limited period thereafter.
- Billing records are retained as required by applicable tax and accounting law.
- Device/usage/crash logs are retained for a limited operational window (typically 12–24 months) then deleted or aggregated.
- Parental consent records are retained for as long as required to demonstrate compliance with minors'-data law in the relevant territory, even if the underlying account is later deleted.
Children's and minors' data — parental consent
Tutorly AI is an education app primarily used by school-age students, many of whom are minors under the applicable age of consent in every launch territory (Philippines, Indonesia, Vietnam, Nigeria, Kenya). This is a real, verifiable onboarding gate, not a checkbox.
- Age gate at signup: the app asks for the user's age or grade level as an explicit, non-skippable onboarding step.
- Parental consent flow: where the user indicates they are a minor under the age of consent defined by local law, the app blocks full account creation until a parent/guardian is identified, collects a parent/guardian's contact information, sends the parent/guardian a clear consent request describing what data will be collected from the child and why, and only unlocks full tutoring functionality once affirmative parental consent is recorded, timestamped, and stored.
- Parents/guardians can review the child's data, revoke consent, and delete the child's account at any time, without needing to go through the child's device.
- We collect the minimum data needed to deliver curriculum-matched tutoring and avoid collecting sensitive categories (health, precise location, biometric, government ID) from minor accounts.
- Minor accounts are not used for targeted/behavioral advertising profiles.
- The exact statutory age threshold, form of consent, and regulator differ by country (Philippines NPC, Indonesia PDP Law, Vietnam Decree 13, Nigeria NDPA, Kenya ODPC).
Legal bases and consumer rights
Depending on your country, you (or your parent/guardian) may have rights to access a copy of the personal data we hold about you, correct inaccurate data, delete your account and associated personal data, export your data in a portable format, object to or restrict certain processing, withdraw parental consent previously given for a minor's account, and lodge a complaint with your local data protection regulator.
How to exercise your rights (export / deletion requests)
- In-app: Settings → Privacy → "Request my data" or "Delete my account."
- By email: [email protected] with the subject line "Data Request — Tutorly AI."
- We verify the identity of the requester (and, for minors, the requesting parent/guardian's relationship to the account) before fulfilling the request, and aim to respond within the timeframe required by applicable local law (commonly 30 days).
- Data export is provided in a common machine-readable format (JSON) covering account information and Chat Content history.
- Account deletion removes personal account data and Chat Content from active systems, subject to the legal retention exceptions above.
International data transfers
Tutorly AI's backend and AI providers may process data outside the country where you live, including in the United States. Where local law imposes data-residency or cross-border-transfer conditions, we implement the required safeguards as confirmed by local legal review in that country.
Security
We use industry-standard technical and organizational measures (encryption in transit, access controls, least-privilege access to Chat Content, environment-isolated API keys) to protect your data. No system is 100% secure; we will notify affected users and regulators as required by applicable law in the event of a data breach affecting personal data.
Changes to this policy
We will post any changes to this policy in the app and update the "Last updated" date above. Material changes affecting minors'-data handling will trigger a renewed parental notice where required by local law.
Contact us
LeadRescue LLC — Tutorly AI Email: [email protected] Mailing address: 5902 E Conservation Dr, Frederick, CO 80504, USA