Privacy Policy
Version 2026-08-04 · In effect from 4 August 2026
This explains what Edunara Tutoring collects about you, why, who else sees it, how long we keep it and what you can tell us to do about it.
It is written to be read, not to be survived. If anything here is unclear, write to us and we will explain it.
What we collect, and why
- Who you are
- Name, email address and date of birth. We ask for a date of birth because the law treats children differently from adults, and we cannot apply the right protections without knowing which you are.
- For learners under 18
- The name, email address, relationship and (if given) phone number of a parent or guardian, so we can ask their permission and keep them informed.
- What you tell us about your learning
- Subjects, school or year group, and a short profile description. All optional except the subjects.
- Your lessons
- When each lesson ran, who taught it, how long you were both there, the subject, and the tutor’s notes on how it went.
- What happens inside a lesson
- Chat messages, code written in the shared editor, whiteboard drawings, and any files shared. This is stored so you can come back to your own work.
- Money
- What was charged, what was paid, refunds and adjustments.
- Keeping the account safe
- Sign-in times and a record of who viewed or changed personal information.
We do not record or store lesson video or audio. Video and audio are streamed live between the people in the lesson and then gone.
What we never do
- We do not sell personal information, and we never have.
- We do not show advertising, and we do not let anyone target you with advertising based on anything you do here.
- We do not build behavioural profiles, and we do not track anyone across other websites.
- We do not use anything a child does on this platform for marketing, profiling or automated decisions about them.
Indian law prohibits tracking, behavioural monitoring and targeted advertising directed at children. So does US law for under-13s. We have written the platform so there is nothing to switch off: the capability is not there.
Who else sees your information
Only the people who need it to run a lesson or run the service.
- Your tutor
- Sees your name, the subjects you study, your lesson history with them and their own notes on your progress. Tutors cannot see other learners’ contact details.
- Other learners in a group lesson
- See your name only.
- Our administrators
- Can see accounts in order to run the service, approve tutors and deal with problems. Every time an administrator changes personal data it is written to an audit log.
- Supabase
- Hosts our database, sign-in system and file storage. Our data sits in their Mumbai region.
- Vercel
- Runs the website itself.
- Whereby
- Carries the live video and audio during a lesson. Nothing is recorded.
- Resend
- Sends our emails, such as sign-in confirmations and guardian permission requests.
Where your information is held
Our database and files are stored in Mumbai, India. Some of our service providers operate from other countries, which means information may be handled outside India. We only use providers who are contractually bound to protect it and to process it only on our instructions.
How we keep it safe
- Every table has row-level security, so the database itself refuses to return a record to someone who has no right to it — the protection does not depend on a screen behaving correctly.
- Lesson files and whiteboard images are stored privately and are reachable only through short-lived links issued to the people who were in that lesson.
- Passwords are hashed by our sign-in provider and are never visible to us.
- Connections are encrypted in transit, and data is encrypted at rest by our hosting provider.
- Administrator actions on personal data are written to an audit log that cannot be edited from the application.
- Access to the keys that bypass these controls is limited to server-side code and is never exposed to a browser.
Your rights
Whatever your age, and wherever you are, you can ask us to:
- Show you everything we hold about you, in a file you can keep.
- Correct anything that is wrong.
- Delete your information. Some billing records must be kept for tax purposes; we will tell you exactly what we are keeping and why.
- Stop using your information in a particular way, or withdraw a permission you gave earlier.
- Nominate someone to exercise these rights for you if you cannot.
Signed-in learners can do the first two, and start the rest, from Privacy in their dashboard. Everyone else can write to us. We answer within 30 days, and within 90 days for a formal grievance.
Children
Anyone under 18 needs a parent or guardian to approve their account before they can book a lesson. The full detail is in our children’s privacy notice, which is written for parents.
If something goes wrong
If personal information is exposed, we will tell the people affected without delay and report it to the Data Protection Board of India within 72 hours of becoming aware of it, as the DPDP Rules require.
Changes to this policy
Every version of this policy carries a version number, and we record which version each person agreed to. If we change it in a way that affects what you agreed to, we will ask you again rather than assume.
How long we keep it
Only as long as we need it, and then we delete it. This table is generated from the same schedule our cleanup job follows, so what you read here is what actually happens.
Loading the schedule…
How to reach us
If you are not happy with how we answer, you can complain to the Data Protection Board of India.