Privacy Policy

EduWeb is an online English learning platform that connects students with independent tutors. This policy explains what personal data we collect, why we collect it and the choices you have.

For privacy requests, contact privacy@eduweb.example. We respond to verified requests within 30 days.

Account data: name, email address, password hash, profile photo, interface language and time zone. If you sign in with Google, we receive your name, email and profile picture from Google.

Learning data: your English level, goals, lesson bookings, attendance, exercise attempts, vocabulary progress and AI tutor conversations.

Payment data: subscription status, invoice history and the last four digits of your card. Full card details are processed by Stripe and never stored on our servers.

Technical data: IP address, browser type, device information and security logs used to protect the service.

To provide the service: scheduling lessons, connecting you with tutors, delivering the classroom, tracking progress and processing payments.

To keep you safe: verifying tutor identities, detecting fraud, enforcing our terms and responding to safety reports.

To improve the product: aggregated, de-identified analytics about how features are used.

To communicate: transactional emails (verification, booking confirmations, receipts) and, where permitted, product updates you can unsubscribe from.

Where GDPR applies, we rely on: performance of a contract (delivering lessons and subscriptions), legitimate interests (security, fraud prevention, product improvement), consent (marketing emails, optional recordings) and legal obligation (tax and accounting records).

Tutors can see your name, photo, time zone, English level, learning goals and the notes you add to a booking. They cannot see your email, phone number or payment history.

We use processors for hosting, email delivery, payments (Stripe) and AI inference. Processors act on our instructions under data processing agreements. The AI provider receives only the text you submit to the AI tutor, not your account identity.

We may disclose data where required by law or to protect the rights and safety of users.

Account and learning data is kept while your account is active. If you delete your account, we remove or anonymise personal data within 30 days, except records we must keep for tax, accounting or dispute resolution (typically up to 7 years).

AI conversations are retained for 12 months by default so you can revisit them, unless you delete them earlier.

Lesson recordings, when enabled with consent, are retained for 90 days unless you delete them sooner.

Depending on your location you may have the right to access, correct, export, restrict or delete your data, object to processing and withdraw consent. Most of these controls are available in your account settings.

You may also lodge a complaint with your local data protection authority.

We use strictly necessary cookies for authentication and security. We do not use advertising cookies. Analytics, where enabled, are configured to avoid identifying individual users.

Passwords are hashed with Argon2id. Sessions use HTTP-only, secure cookies. Data in transit is encrypted with TLS. Access to production systems is limited, logged and reviewed. No system is perfectly secure, so please use a unique password and report suspected issues to security@eduweb.example.

The platform is intended for users aged 16 and over. Younger learners may only use EduWeb with verifiable parental consent. Contact us if you believe a child has created an account without consent.

We will notify you by email about material changes to this policy at least 14 days before they take effect. The effective date below always reflects the current version.