Privacy Policy

This document explains what data TutorConfidante collects, why, and what your rights are.

Last updated: 19 June 2026

Who we are

TutorConfidante is a service operated by Simon Feltham, a sole trader based in Malvern, United Kingdom.

We’re the data controller for the information you give us when you sign up and use the service.

For any privacy or data questions, contact us at contact@tutorconfidante.co.uk.

What we collect

When you sign up as a tutor:

• Your email address (used as your account identifier)
• A password (stored securely as a hash, never visible to us in readable form)
• Anything else you choose to add to your account

When you use the service, you store:

• Information about your students (names, parent contact details if you add them, next lesson dates)
• Lesson records (date, duration, amount charged, your notes, parent updates)

When you subscribe, our payment processor (Stripe) collects:

• Your name and billing email
• Card details (we never see your card details — Stripe handles this directly)
• Payment history

We do not collect analytics about your behaviour in the app, do not use third-party tracking cookies, and do not share your data with advertisers.

Why we collect it

• Your email and password: to give you an account and let you log in.
• Your students’ and lessons’ details: so you can use the service to track your work.
• Payment information: so we can process your subscription.

We process your data on the legal basis that it’s necessary to provide the service you’ve signed up for (UK GDPR Article 6(1)(b) — performance of a contract).

Data about students and parents

When you record information about your students and their parents, you are the data controller for that information — not us. We process it on your behalf as a data processor.

This means:

• You’re responsible for any consent you need from parents (under your professional ethics or any agreement you have with them) before entering their child’s details.
• The name field for students is up to you, but we strongly recommend using first names only (or initials) — the service is designed to work fine that way. There’s no benefit to storing more than you need.
• We store this data securely and only use it to provide the service to you.

Where your data is stored

Most of your data is stored in the United Kingdom:

• Supabase (database and authentication): UK region (London). See Supabase’s Privacy Policy for their security and data handling practices.
• Vercel (web hosting): global infrastructure, with data primarily served from the EU/UK. See Vercel’s Privacy Policy.

Some processing happens outside the UK:

• Anthropic (AI parent update generation): when you click “Generate parent update,” your lesson notes are sent to Anthropic’s API for processing. Anthropic is based in the United States. Under Anthropic’s Commercial Terms, your data is not used to train their models, and is retained only briefly as needed to provide the service and detect abuse. See Anthropic’s Privacy Policy.
• Stripe (payment processing): Stripe is headquartered in Ireland with global infrastructure. Your payment details are processed under Stripe’s privacy and security framework. See Stripe’s Privacy Policy.

All of these providers operate under UK GDPR-compatible safeguards (UK adequacy regulations or Standard Contractual Clauses).

How long we keep your data

We keep your data for as long as your account is active.

If you delete your account, we delete all the data we hold about you — your account, your students’ details, your lessons, and your parent updates. Payment history is retained by Stripe according to their own retention policies (typically for legal and tax reasons).

You can delete your account at any time by emailing contact@tutorconfidante.co.uk from your account email address. We aim to action deletion requests within 14 days.

If you cancel your subscription but don’t delete your account, your data stays available so you can resubscribe later without losing your work.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate data.
• Delete your data (the “right to be forgotten”).
• Export your data in a portable format.
• Object to certain processing.
• Complain to the Information Commissioner’s Office (ICO) if you believe we’ve mishandled your data.

To exercise any of these rights, email contact@tutorconfidante.co.uk. We aim to respond within 30 days.

Security

We use industry-standard security measures:

• All connections to the service use HTTPS encryption.
• Passwords are hashed using bcrypt before storage.
• Database access is restricted to authorised systems only.

No system is perfectly secure, but we work to keep your data safe.

Children’s data

TutorConfidante is intended for use by tutors (adults). It is not designed to be used directly by children. If you’re recording information about students under 18, please use the minimum information needed to support your teaching (first names are fine).

Changes to this policy

If we make significant changes to how we handle your data, we’ll email you at the address on your account before the changes take effect. Minor changes (like clarifications or wording updates) will be reflected here without notification.

Contact

For any privacy questions, email contact@tutorconfidante.co.uk.