Global Privacy Notice

We use family and learning data to provide and protect the tutoring service. We do not sell children's personal information or use it for targeted advertising.

1. Who the service is for

A parent or legal guardian creates and controls the family account. Children use profiles inside that account and cannot create an independent account. A guardian must give the required consent before a child can send tutoring messages, images, or audio.

2. Information we process

• Family account: parent email address, a securely hashed password, email-verification records, preferences, and support history.
• Child profile: nickname, grade or age band, country or region code, curriculum choices, and learning preferences supplied by the guardian.
• Learning activity: tutoring messages and transcripts, problem photos and selected crops, boards, grading records, reading or course progress, and evidence used to personalize later tutoring.
• Audio and camera: media needed for a requested live voice, speech, photo, or homework feature. Browser permission is required before capture.
• Payments: plan, order, customer, subscription, currency, tax, and fulfillment records. Stripe processes card and payment credentials; we do not store complete card numbers.
• Security and operations: IP-derived country recommendation, timestamps, device or browser basics, service logs, rate-limit events, and error diagnostics. IP location is a recommendation and fraud signal, not a restriction on who may use the GLOBAL service.

3. Why we process it

We process this information to create and secure accounts, verify the guardian's email, provide requested tutoring and voice features, remember learning progress, show the guardian reports, fulfill purchases, calculate or support taxes, prevent abuse, investigate faults, and improve service quality using minimized or de-identified evidence where practical.

4. Service providers and international processing

The GLOBAL application and its separate data plane are hosted on Tencent Cloud in Silicon Valley. Depending on the feature and the active routing profile, necessary content may also be processed by model, speech, real-time communications, email, or payment providers, including Volcengine, Moonshot AI (Kimi), MiniMax, OpenRouter providers when enabled, Resend, and Stripe.

Temporary model-routing notice: the first GLOBAL release uses the model routing already validated for the Mainland China service. A tutoring request may therefore be sent to an endpoint in Mainland China. The routing profile will be replaced or mixed only after overseas alternatives pass quality and safety testing.

These providers and servers may be located outside your country. We send only the information reasonably needed for the requested operation and apply contractual, access-control, transport-security, and data-minimization safeguards appropriate to the service.

5. Children's privacy and guardian controls

The guardian can review or update child profiles and may request access, correction, export, deletion, or withdrawal of consent through in-product support. Withdrawing consent disables child-data features that require it. We do not knowingly permit a child to register independently. If you believe a child account or data was created without guardian authorization, contact us promptly through the product.

For a child-focused explanation of the account model, collected learning data, provider processing, retention, and guardian controls, also read the Global Children's Privacy Notice.

6. Retention and security

We retain account, learning, consent, transaction, and security records for as long as needed to provide the service, meet legal or accounting duties, resolve disputes, and protect users. When information is no longer needed, we delete or de-identify it according to operational and backup cycles. We use HTTPS, isolated regional data stores, hashed passwords, least-privilege administration, signed payment webhooks, access controls, and security logging. No system can guarantee absolute security.

7. Choices and regional rights

You may turn off camera or microphone permission, choose a different curriculum, switch the interface or Tutor language, and manage subscription billing in Stripe's customer portal. Depending on where you live, privacy law may provide additional rights or an appeal process. We will honor applicable mandatory rights after verifying the requesting guardian.

8. Changes and contact

We may update this notice as providers, regions, or features change. Material changes will be presented in the service and, where required, renewed consent will be requested. For privacy requests or questions, use the support channel inside the family account or the contact method shown on the service's purchase page.