Privacy Policy
Last updated: August 2026 (draft)
What we collect
For parents: email, city, approximate or precise location (if you choose to pin it), and budget preference. For tutors: email, name, bio, years of experience, city, location, subjects and pricing, and — for verification — a CNIC image, an optional police character certificate, and a reference contact's name and phone number.
Children's information
We collect the minimum necessary about your child — grade level and, if you add it, a nickname — never full legal name, school, or other identifying details unless you choose to share them directly with a tutor after a booking is confirmed. This information is never publicly visible and is only shared with a tutor once you've requested a booking with them.
Verification documents
Tutor identity documents are stored in a private, access- controlled location and are never publicly accessible. Only authorized reviewers can view them, and every access is logged. See our Security practices for more detail.
Who we share data with
We use Supabase for data storage and authentication, Google (Gemini) to power the AI tutor-matching assistant, Safepay to process payments, and Mapbox for maps and location features. Each processes only what's needed to provide their specific service.
Your choices
You can request a copy of your data or ask us to delete your account at any time by contacting us. Rejected tutor applicants' verification documents are deleted after a defined retention window rather than kept indefinitely.
Contact
Questions about this policy: privacy@tutorlink.pk