Privacy Policy

Who we are

Tuterly is a tutoring report platform operated by Bayside Academics (Brighton, Victoria, Australia). This Privacy Policy explains what information we collect when you use the Tuterly app at app.tuterly.com.au, how we use it, and your rights over it.

For privacy questions or to exercise the rights below, contact learning@baysideacademics.com.au.

What we collect

• Account info: name, email address, role (parent, tutor, student) and a hashed password (or Google identifier for OAuth signups).
• Student records: first/last name, year level, school, subjects, learning goals and concerns. Entered by the tutor or parent.
• Session content: tutor notes, uploaded photos of working, uploaded audio recordings, and uploaded resources (textbook contents, school reports, term outlines).
• Generated reports: AI-produced session summaries, confidence ratings, flagged practice questions.
• Usage telemetry: standard Vercel and Supabase logs (IP address, user agent, request paths) to operate and debug the service.

Why we collect it

• To deliver tutoring reports to parents and students.
• To track per-student progress over time so tutors can pick up where they left off.
• To send transactional emails (invites, report notifications, password resets).
• To keep the service running reliably and to prevent abuse.

AI processing

Tutor notes, session photos, audio, and uploaded resources are sent to Anthropic Claude (for report generation and explanations) and OpenAI Whisper (for audio transcription) so reports can be produced. These providers process the data on our behalf and don't use it to train their models.

Where data is stored

Account, student, session, and report data is stored in Supabase (Singapore region). Files (photos, resources) are stored in private Supabase Storage buckets and accessed via short-lived signed URLs. Email is sent through Resend. The app itself runs on Vercel.

Who can see what

• Tutors can see students they have been linked to, plus all sessions, reports, ratings and resources for those students.
• Parents can see their own children's reports, progress, and resources, plus the photos and PDF that go with each session.
• Students can see their own reports, progress, and resources, plus the practice questions they've flagged.
• Database-level Row Level Security enforces these boundaries.

Your rights

• Access — see what we hold about you. Email us.
• Correction — most fields can be edited directly in the app; otherwise email us.
• Deletion — ask us to delete your account and associated data. Email us; we'll action within 14 days.
• Withdraw consent — stop using the service at any time.

Retention

We keep account and report data for the lifetime of the account. When an account is deleted, associated student rows, sessions, reports, ratings, resources, photos, and audio are removed. Vercel and Supabase operational logs are retained per their respective defaults.

Children's data

Tuterly is used to track tutoring sessions for school-age students. We rely on tutors and parents to confirm that they have authority to enter student information into the platform. If you believe a student's data has been entered without consent, contact us and we will investigate and remove it.

Changes

We may update this policy as the service evolves. The "last updated" date at the top reflects the most recent revision. Material changes will be notified by email.