TutorAptly SATGet started

Privacy Policy

Last updated: January 2025

We built TutorAptly to help students learn — not to monetise their data. This policy explains clearly and honestly what we collect, why, and how you can control it.

1. Who We Are

TutorAptly ("TutorAptly", "we", "us", or "our") is an AI-powered SAT preparation platform. This Privacy Policy explains how we collect, use, store, and protect information about you when you use our website and services at tutoraptly.com (the "Service"). By creating an account or using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Information you provide directly

• Account information: your name, email address, and password (stored as a secure hash — we never see your plain-text password). • Profile preferences: your target SAT exam date, estimated baseline score, and notification preferences. • Payment information: billing details for paid subscriptions. Payment processing is handled by our payment provider; we do not store full card numbers. • Communications: if you contact us by email, we retain that correspondence.

Information generated through your use of the Service

• Study data: your conversations with Dash (our AI tutor), question responses, skill mastery scores, XP, level, streaks, and achievement records. • Usage data: pages visited, features used, session duration, and error logs. This is collected to improve the Service and diagnose issues. • Device and technical data: IP address, browser type, operating system, and approximate location (country/region level only).

Information we do not collect

We do not collect sensitive personal information such as government ID numbers, precise geolocation, biometric data, or financial account numbers. We do not track your activity across third-party websites.

3. How We Use Your Information

We use your information to: • Provide and personalise the Service, including generating AI tutor responses tailored to your study history. • Process payments and manage your subscription. • Send transactional emails (account confirmation, password resets, billing receipts). • Send marketing updates and product news, if you opted in at registration. You can unsubscribe at any time. • Analyse aggregate usage patterns to improve the Service (using anonymised or aggregated data). • Detect and prevent fraud, abuse, or security incidents. • Comply with legal obligations.

4. How We Share Your Information

We do not sell your personal data. We share information only with the following categories of service providers who help us operate the Service: • Anthropic (anthropic.com) — processes your study conversations to generate AI tutor responses. Conversation content is sent to Anthropic's API and subject to their usage policies. • Neon (neon.tech) — hosts our database where account and study data is stored. • Vercel (vercel.com) — hosts and delivers the web application. • Resend (resend.com) — delivers transactional and marketing emails. • Payment processor — processes subscription payments (card data is handled directly by the payment processor and not stored on our servers). Each provider is contractually required to handle your data securely and only for the purpose of providing services to us. We may also disclose information if required by law, court order, or to protect the rights and safety of our users.

5. AI Conversations

Your study conversations with Dash are processed by Anthropic's API to generate responses. Please be aware: • Do not share sensitive personal information (such as passwords, financial details, or personal identification numbers) in your conversations with Dash — Dash is a tutor, not a secure vault. • Conversation history is stored in your account to provide continuity across sessions. You can clear your conversation history for any skill at any time using the reset function in the app. • Anthropic may use API interactions to improve their models in accordance with their privacy policy. We recommend reviewing Anthropic's privacy policy at anthropic.com/privacy if you have concerns.

6. Data Retention

We retain your account and study data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (such as billing records, which are retained for up to 7 years as required by law). Anonymised or aggregated data (which cannot identify you) may be retained indefinitely for analytical purposes.

7. Your Rights

Depending on where you live, you may have the following rights regarding your personal data: • Access: request a copy of the personal data we hold about you. • Correction: ask us to correct inaccurate or incomplete data. • Deletion: request deletion of your account and associated data. • Data portability: request your study data in a machine-readable format. • Opt-out of marketing: unsubscribe from marketing emails at any time using the link in any email, or by updating your account settings. • Withdraw consent: where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, contact us at privacy@tutoraptly.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

8. Children's Privacy

The Service is intended for students aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has created an account, please contact us at privacy@tutoraptly.com and we will delete the account promptly. Students aged 13–17 should have parental permission before creating an account. The SAT is typically taken by students aged 15–18, and our content and interactions are designed for this age group.

9. Security

We take reasonable technical and organisational measures to protect your data, including: • Passwords are hashed using bcrypt before storage — we cannot retrieve your plain-text password. • Data is transmitted over HTTPS (TLS encryption). • Database access is restricted and authenticated. • We conduct periodic reviews of our security practices. No system is completely secure. If you believe your account has been compromised, change your password immediately and contact us at support@tutoraptly.com.

10. Cookies

We use essential cookies required for the Service to function (authentication session cookies). We do not use advertising or third-party tracking cookies. Your browser may allow you to control cookies through its settings. Disabling essential cookies may prevent you from logging in.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email or by a notice within the app at least 14 days before the change takes effect. Your continued use of the Service after the effective date of any change constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: Email: privacy@tutoraptly.com We aim to respond to all privacy-related enquiries within 5 business days.