Privacy Policy

The free part of EnglishTuts collects the minimum data needed to make it work: your email if you sign up, your practice answers so we can show you progress, and basic anonymous usage stats so we know which lessons need fixing. If you choose to subscribe to a paid tier, buy lesson credits, or take live video lessons with one of our teachers, we collect a bit more data needed to deliver those services — payment metadata, AI feedback transcripts, recorded video lessons. We never sell anything to anyone, and we don't run ads.

• Account info (only if you sign up): email address, optional display name and avatar. Stored in Supabase.
• Practice data: which questions you've answered, your scores, your streaks. Used only to show your progress back to you.
• Reminder preferences: if you opt in to daily reminder emails, we store the time-of-day and timezone you chose.
• Anonymous usage analytics: page views, device type, country (no personal IP retention) via Google Analytics 4. Helps us see which lessons people actually use.
• Suggestions you send: the message text and the page URL you submitted from. Email is optional.

None of the items below apply unless you actively choose to use a paid feature. The free site collects nothing in this section.

• Payment metadata (subscriptions & packages): if you subscribe or buy a lesson package, our payment processor Razorpay handles the card transaction. We never see or store your card number, CVV, or expiry. Razorpay returns to us a payment ID, an order/subscription ID, the amount, the currency, the status, and your billing email. We store these for invoice generation, refund processing, and accounting compliance.
• GST invoice fields: for Indian regulatory compliance, your invoice may include your name, billing email, and (if you provide it) GSTIN. Invoices are stored in our private storage bucket and accessible only by you and our admin.
• AI practice answers and feedback: when you use sentence-making, dialogue roleplay, reading answers, or test-prep practice, we send your answer to a third-party AI model (Anthropic Claude) for evaluation, and we store the prompt, your answer, and the AI's scored feedback in your account so you can review progress. AI speaking is handled separately — see the next point. We do not feed your answers to anyone else, and the AI providers do not use your data to train their models (per their published API data-handling terms).
• Voice / microphone (AI speaking only): only on the dedicated AI speaking page, and only after you grant browser microphone permission. Your audio never reaches our servers: the speech recognition and the spoken reply both run in your own browser, using the speech features built into it. (Note that in some browsers — Chrome in particular — that built-in speech recognition works by sending the audio to the browser maker's own service, which is between you and your browser, outside our control.) What we receive is the text of what you said. We pass that text to our AI provider to generate the tutor's reply, and we do not store the conversation afterwards.
• Live-lesson video and audio: 1-on-1 video lessons are conducted in our embedded Daily.co room. By default, every lesson is recorded by the platform for safety, quality review, and dispute resolution. Both the student and the teacher are notified of recording at lesson start. Recordings are stored in our private storage and accessible only by our admin team and (on request) the student of that lesson; teachers never receive lesson recordings. Default retention: 90 days, after which recordings are automatically deleted unless flagged for an open dispute.
• Teacher information (teacher accounts only): if you onboard as a teacher, we additionally collect your KYC documents (government ID, PAN, address proof), banking details for payouts, qualification certificates, profile photo, and bio. This data is stored encrypted and accessible only to admin for onboarding, payout processing, tax reporting, and audit. We do not share teacher identity documents with students; only your display name and avatar are public.
• Lesson reviews and complaints: reviews you leave for a teacher (rating + comment) are visible on that teacher's public profile under your display name (or anonymously if you choose). Complaints submitted to support are private.

• Your card number, CVV, or expiry — handled entirely by Razorpay.
• Voice or microphone data on any free page (including grammar lessons, MCQ quizzes, fill-in-the-gap, daily quiz, and card games).
• Lesson recordings on free practice (recordings exist only for paid 1-on-1 lessons).
• Contact lists, location, or anything from your device beyond what your browser sends to every website.
• Your data for sale to anyone, ever — see below.

• To show you your own progress (questions answered, streak, accuracy, AI feedback history, lesson history).
• To send you the reminder email you opted in to (you can turn this off anytime in your profile).
• To process your payments and renewals via Razorpay, generate GST invoices, and process refunds where applicable.
• To send you transactional emails relevant to your account (payment receipts, renewal reminders, package-near-expiry warnings, lesson booking confirmations, cancellation notices). These are not marketing.
• To deliver and evaluate AI-checked practice (sending your written answer, or the text of what you said in AI speaking, to the AI provider named below solely to score it or reply to it, and return that to you).
• To deliver live 1-on-1 video lessons via Daily.co, including recording for safety and quality review.
• To investigate complaints, safeguarding concerns, fraud, or breaches of our Terms or the Teacher Partner Agreement.
• To improve the site — anonymous, aggregated stats only.

We use a small number of trusted third-party services to operate the platform. Each one is contractually bound to use your data only to deliver the service to us — never to train their models on our users' content, never to sell, never to use for their own marketing.

• Supabase — database, auth, file storage.
• Resend — transactional email (reminders, payment receipts, lesson notifications).
• Razorpay — payment processing for subscriptions, packages, and single lessons. PCI-DSS compliant.
• Anthropic (Claude) — AI evaluator for written practice feedback: sentence-making, dialogue roleplay, reading answers and test-prep.
• Groq, xAI (Grok) or OpenAI — whichever is configured at the time generates the tutor’s replies in AI speaking practice. These receive the text of your side of the conversation, never audio.
• Daily.co — embedded video room for live lessons; recording storage for the duration of the lesson stream.
• Google Analytics 4 — anonymous usage analytics; honors Do-Not-Track.

We'll keep this list current. If you need a copy of any sub-processor's data-handling terms, email us.

• Account & profile: for as long as your account exists; deleted within 30 days of account closure unless we're required to retain longer for tax / legal reasons.
• Practice & AI feedback history: while your account exists. You can request earlier deletion via support.
• AI speaking conversations: not stored. The conversation lives only in your browser tab and is gone when you close or reset it. No audio is recorded at any point.
• Lesson recordings: 90 days by default, then auto-deleted unless flagged for an open dispute or safeguarding investigation.
• Payment records and invoices: retained for the period required by tax law in our jurisdiction (currently 8 years for Indian GST records). These cannot be deleted on request because of statutory retention.
• Email logs: 90 days, then deleted.

All data is stored on encrypted, EU/US-region cloud infrastructure with industry-standard PostgreSQL (encrypted at rest), HTTPS in transit, and row-level access policies that prevent any user from seeing another user's data. The companies we rely on are listed under "Sub-processors we use" above. If you need more detail than that — region breakdowns, data-processing agreements, or a sub-processor's own terms for a compliance review — email us and we'll share it privately.

• Access: view your data anytime via your dashboard and profile pages.
• Delete: email us (see contact page) to delete your account + all associated data.
• Opt-out of reminders: log in → Profile → flip the "Daily reminder emails" toggle off. Takes effect instantly.
• Block analytics: enable "Do Not Track" in your browser settings — we honor the signal globally. How:
  • Chrome / Edge: Settings → Privacy and security → Cookies and other site data → toggle on "Send a Do Not Track request"
  • Firefox: Settings → Privacy & Security → under "Send websites a Do Not Track signal" choose "Always"
  • Safari: Settings → Privacy → Website tracking → tick "Prevent cross-site tracking"
  • Brave: on by default — nothing to do

We use a small number of essential cookies for keeping you signed in and for anonymous, aggregated analytics. No advertising cookies. No cross-site tracking. No third-party data sales.

If we make material changes we'll update this page and bump the date at the top. Continued use of the site means you accept the updated policy.

Questions or data requests: contact page.