Privacy Policy

Effective date: 28 July 2026 · Last updated: 26 September 2026

This Privacy Policy explains how TuitionPilot (“we”, “us”, “our”), operated by Naiyem Aktar Mazumder (sole proprietor), collects, uses, and protects your information when you use our website and app at tuitionpilot.in (the “Service”). By using the Service, you agree to this policy.

1. Information we collect

• Account information you provide: your name, email address, phone number, centre/tuition name, and UPI ID.
• Content you add to run your tuition: your students’ names, parents’ names, parents’ WhatsApp numbers, attendance records, and fee records.
• Payment information: when you subscribe, payments are processed by our payment gateway (Razorpay). We do not store your card, UPI PIN, or bank details on our servers.
• Technical data: basic device and browser information needed to operate and secure the Service. Your IP address is used at the moment of a request to apply rate limits and block abuse; we do not store it in our database. Our server logs deliberately exclude request contents and authentication tokens.
• Sign-in identifiers: if you sign in with Google or with Apple, we receive the account identifier and email address that provider returns to us so we can create and recognise your account. We never receive your Google or Apple password.
• Photographs and documents you upload: photos of a paper register when you import a class, photos of a student’s answer sheet when you use Paper Checking, and your own UPI QR code image. See section 4A.
• AI prompts and results: the details you type into the AI Assistant or Paper Checking (such as subject, class, topic, or a student’s name for a progress note), together with the text the AI returns.
• Subscription status: your current plan and its expiry date. For subscriptions bought on iPhone or iPad, our servers also receive and store the transaction identifier Apple sends us, so that one subscription stays attached to one account. We do not receive your card details from Apple.
• Notification token (app only): if you allow notifications, the device token issued by Google’s Firebase Cloud Messaging, so we can send you reminders about your own account.
• Advertising identifier (mobile apps): the Meta SDK may receive your device’s advertising identifier so we can measure how many people install or subscribe after seeing one of our ads. What it sends is limited to app events — opening the app, viewing the Plans screen, and completing a subscription. It is never sent any student, parent, attendance or fee record. How you control it differs by platform, and section 4E sets that out.

2. How we use your information

• To provide and operate the Service (accounts, attendance, fees, reports).
• To send WhatsApp messages (fee reminders, absent alerts, receipts) to parents on your behalf.
• To process your subscription payments.
• To generate the question papers, worksheets, homework, progress notes and paper-checking drafts you ask for, by sending your request to our AI provider (see section 3).
• To read a photo you upload of a paper register or an answer sheet, when you ask us to.
• To send you notifications about your own account, if you have allowed them.
• To provide customer support and respond to your requests.
• To maintain security, prevent fraud, and comply with legal obligations.

3. How we share information

We do not sell your personal data. We share data only with service providers who help us run the Service:

• Supabase — secure database and authentication hosting.
• WhatsApp messaging provider (WAPI / Meta) — to deliver your reminders and alerts to parents.
• OpenAI — our AI provider. When you use the AI Assistant or Paper Checking, the details of that request and any photographs you attached are sent to OpenAI to produce the result. Nothing is sent to OpenAI unless you use one of those features.
• Razorpay — processes subscription payments made on our website and in the Android app. Subscriptions bought on iPhone or iPad go through Apple instead, not Razorpay — see section 4D. Neither of these has anything to do with the tuition fees parents pay teachers, which we never handle (section 4B).
• Apple — subscriptions bought inside the iPhone or iPad app are sold and charged by Apple under Apple’s own terms and privacy policy. Apple tells our servers which subscription is active and for how long. We never see your card or Apple ID password.
• Google — if you choose “Continue with Google”, Google confirms your identity to us. Google Firebase Cloud Messaging delivers notifications to your device.
• MSG91 — to deliver SMS messages to parents when you choose SMS instead of WhatsApp.
• Google Analytics — on our website only, to understand which pages people visit. It is not active inside the installed app.
• Brevo — to send login/verification emails.
• Meta (Facebook) Pixel — installed on our website to measure how well our ads perform and to show relevant TuitionPilot ads to people who have visited our site. This shares limited technical data (such as pages visited and device/browser information) with Meta. See section 9 below.
• Meta SDK (mobile apps) — included in our Google Play and App Store apps to measure how many people install, open or subscribe to TuitionPilot after seeing one of our ads. It shares your device’s advertising identifier and those app events with Meta for advertising measurement. It does not send Meta any student, parent, fee or attendance data. On iPhone and iPad this is off unless you allow it (see section 4E); on Android you can limit it at any time in Android Settings → Privacy → Ads, where you can delete or opt out of your advertising ID.

We may also disclose information if required by law.

4. Your responsibility for parent & student data

You are responsible for the student and parent information you enter, and you confirm you have the right and necessary consent to add parents’ contact numbers and to send them messages through the Service.

4A. Photographs, documents and AI processing

This section describes exactly what happens to a photograph you upload, because it is the question teachers ask most.

When you use an AI feature, what you typed and any photograph you attached travel through our server to OpenAI, which produces the result. A photograph of an answer sheet or a paper register can contain a student’s name and their handwriting, so please upload only what you need to and only where you have the authority to do so. Everything that comes back is a draft for you to read and correct.

We do not keep what you typed. Our records of AI use are a count per day per teacher — not the prompts, not the results, and not the photographs.

• Answer sheets (Paper Checking) and paper registers. The photograph is sent to OpenAI, the result is returned to you, and we do not store the photograph on our servers — it is not saved to your account, and we keep no copy of it after the request finishes. What OpenAI retains is governed by OpenAI’s own policies, not ours.
• Your UPI QR code. This one is stored, because it has to be: it is shown to parents on your fee reminders. It is deleted when you delete your account.
• AI results. The text an AI feature produces is shown to you. Progress notes and generated papers are not saved to a student’s record unless you save them yourself.
• Marks are suggestions. Paper Checking returns a draft for you to check and change. It is not a final mark, and we do not present it as one.
• Your responsibility. You must have the authority to upload a student’s work or a register containing other people’s details, and to have it processed as described here.

4B. Tuition fees paid by parents

Parents pay their tuition fees directly to you, using your own UPI ID or payment link. Those payments never pass through TuitionPilot. We do not receive, hold, process or take a commission from them, and we do not collect parents’ card, bank or UPI credentials. We only record whether you have marked a fee as paid.

4C. Where your information is processed

Some of the providers listed in section 3 operate outside India, so information described in this policy may be processed outside India by those providers. We use them to run the Service and under their own terms.

4D. Subscriptions bought on iPhone or iPad

Subscriptions bought inside the iPhone or iPad app are sold and charged by Apple through StoreKit, under Apple’s own terms and privacy policy. We never receive your card number, your Apple Account payment details or your bank details — Apple does not give them to us.

What our servers do receive and keep, so we know which subscription belongs to which account and whether it is still active:

• the product identifier of the plan you bought;
• Apple’s signed transaction information, which we verify;
• the original transaction identifier and the latest transaction identifier;
• whether the purchase was made in Apple’s production or sandbox environment;
• the subscription status and its expiry date — including whether it renewed, expired, was cancelled, refunded or revoked.

We keep this for as long as the subscription is linked to your account, so that one subscription cannot be claimed by two different accounts.

4E. Advertising measurement — and how to switch it off

This is not the same on every version of TuitionPilot, so it is set out separately rather than as one statement. None of it involves your students’ records: what Meta receives is limited to three app events — opening the app, viewing the Plans screen, and completing a subscription — and never a student, parent, attendance or fee record.

• iPhone and iPad app, from version 1.1: ad measurement is off unless you allow it. iOS asks you once, and you can change your mind at any time in Settings → Privacy & Security → Tracking, or inside TuitionPilot under Settings → Optional ad measurement. If you decline, the Meta SDK receives no advertising identifier from your device. Declining changes nothing about what the app can do — every feature works exactly the same either way, and we will never ask you again to reconsider.
• Android app (Google Play): the Meta SDK shares your device’s advertising ID and those same app events. You can limit or reset this at any time in Android Settings → Privacy → Ads, where you can delete your advertising ID or opt out of personalisation.
• Website: uses the Meta Pixel and Google Analytics, as described in sections 3 and 9. Your browser’s own cookie and tracking controls apply.

We do not deliberately send Meta any student, parent, attendance or fee information from any version of TuitionPilot.

5. Data retention

We keep your data for as long as your account is active.

You can delete your account permanently from inside the app. In the iPhone and iPad app the path is More → Settings → Delete account permanently. You can also email us at support@tuitionpilot.in from your registered address and we will do it for you. Deletion removes your teacher profile, your students and parents, attendance, fee records, your uploaded QR code and your AI usage history.

One exception: we keep a record of completed subscription payments, with your account no longer attached to it, where Indian accounting and tax law requires us to. Nothing else is kept. See our account deletion page for the full detail.

Deleting your TuitionPilot account does not cancel an Apple subscription. Subscriptions bought on iPhone or iPad must be cancelled in your Apple account settings.

6. Security

Data is transmitted over encrypted connections (HTTPS). Access controls (row-level security) ensure each teacher can only access their own data. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

7. Your rights

You may request to access, correct, or delete your personal information by emailing us at support@tuitionpilot.in.

8. Children’s privacy

TuitionPilot is intended for use by adult tuition teachers and coaching centres, not by students. We do not knowingly collect personal information directly from a child, and children are not our users.

Student information — names, attendance, fees, marks and notes — is entered and controlled by the teacher. The teacher decides what to enter, and is responsible for having the authority or consent necessary to enter it and to have it processed as described in this policy, including having it sent to our AI provider when they use an AI feature.

9. Cookies & local storage

We use minimal local storage required to keep you logged in and to enable the installable app (PWA). We also use the Meta (Facebook) Pixel, which may set cookies in your browser, to measure ad performance and show relevant TuitionPilot ads on Facebook and Instagram. You can control how Meta uses this information via your ad preferences at facebook.com/adpreferences, or by using your browser's cookie/tracking controls.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows the latest revision.