Privacy Policy

What data we collect

If you're a tutor (account holder):

• Account information: Name, email address, password (encrypted)
• Profile information: Subjects you teach, hourly rate, availability, timezone, booking page URL
• Payment information: Stripe account connection details (we do not store your bank details — Stripe handles this directly)
• Usage data: When you log in, features you use, lessons you schedule

If you're a parent or adult student:

• Contact information: Name, email address, phone number (provided by your tutor)
• Booking information: Lessons booked, dates, and times
• Communications: Lesson notes and homework shared with you by your tutor

About children's data:

• We do not collect personal data directly from children, and children do not create accounts or interact with Syllavo
• Some records a tutor keeps — a student's first name, subjects, and lesson notes — may relate to a child. This is provided by the tutor (and, where relevant, the child's parent or guardian), not by the child, and is used only to help the tutor manage their lessons
• We never use children's data for profiling, behavioural tracking, advertising, or marketing

How we use your data

We use your data to:

• Provide the Syllavo service (scheduling, lesson notes, invoicing)
• Send transactional emails (booking confirmations, lesson reminders, invoice notifications, lesson notes shared by your tutor)
• Process payments through Stripe (Pro plan users)
• Improve our service and fix bugs
• Respond to support requests

We do not:

• Sell your data to third parties
• Use your data for advertising
• Share your data with other tutors or users
• Send marketing emails without your consent

Lawful basis for processing

Under UK and EU GDPR, we process your personal data on these legal bases:

• Performance of a contract — to provide the Syllavo service to tutors, including scheduling, lesson notes, invoicing, and the transactional emails that go with them
• Legitimate interests — to secure and improve the service, fix bugs, prevent abuse, and respond to support requests
• Consent — for any optional marketing communications, which you can withdraw at any time
• Legal obligation — where we are required to keep records, such as for tax and accounting

For data a tutor enters about their students and those students' parents, the tutor decides how it is used (the tutor is the data controller) and Syllavo processes it on the tutor's behalf.

Third-party services

We use the following services to operate Syllavo:

Data storage and security

• Your data is stored on servers in the EU/UK (Supabase)
• All data is transmitted over encrypted connections (HTTPS/TLS)
• Passwords are hashed and never stored in plain text
• We use row-level security to ensure tutors can only access their own data

International data transfers

Your account data and lesson records are stored in the EU (Supabase, in Sweden). Some of our other providers — Stripe, Resend, and Vercel — are based in or may transfer data to the United States. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards under UK and EU data protection law (such as the UK International Data Transfer Agreement or Standard Contractual Clauses, and, where applicable, providers' certification under the UK and EU–US Data Privacy Frameworks). You can ask us for more information about these safeguards.

Your rights (UK GDPR / EU GDPR)

You have the right to:

• Access your personal data — request a copy of what we hold
• Correct inaccurate data
• Restrict how we use your data in certain circumstances
• Delete your account and all associated data
• Export your data in a portable format
• Object to processing of your data
• Withdraw consent for optional communications at any time

To exercise any of these rights, email us at hello@tutor-kit.com. We will respond within 30 days.

Data retention

• Active accounts: We retain your data for as long as your account is active
• Deleted accounts: When you delete your account, all your data (profile, students, lessons, invoices) is permanently deleted within 30 days
• Parent/student data: If a tutor deletes a student record, associated parent contact information is deleted immediately
• Legal and anonymised exceptions: We may keep some records longer where the law requires it — for example, invoice and payment records may be retained for up to 6 years to meet UK tax and accounting obligations. Any feedback you send us may be kept after deletion in anonymised form (with your name and email removed) to help us improve Syllavo.

Cookies

Syllavo uses only essential cookies required for the service to function (authentication session cookies). We do not use tracking cookies, analytics cookies, or advertising cookies.

Changes to this policy

We may update this policy from time to time. We will notify registered users by email of any material changes.

Contact us

If you have questions about this policy or your data:

• Email: hello@tutor-kit.com
• Address: 71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ

If you're not satisfied with our response, you can contact the Information Commissioner's Office (ICO) at ico.org.uk.