Privacy Policy — VOETutor

1. Information you give us

When you sign up and use VOETutor, you provide:

Data	Why we hold it
Account details — first name, last name, display name, email address, password, and an optional profile photo (avatar) you choose to upload.	To create and secure your account, sign you in, and identify you by name and picture across the platform. Passwords are stored only as salted hashes by our authentication provider; we never see your plaintext password.
Your role — whether you sign up as a student or educator.	To determine what you can see and do on the platform.
Educator application details (educators only) — gender, WhatsApp number, education and institution, degree, major, graduation year, teaching experience, teaching subjects, and a self-introduction.	So an administrator can review and approve your educator account. Your self-introduction and professional background may be displayed publicly on your educator profile; your WhatsApp number and gender are used for review and are not published.
Educator public profile and media (educators only) — a profile/masthead photo, gallery images, a headline and role label, subject tags, an hourly rate, exam results, and the structured content of your public profile.	To build and display your public educator profile so prospective students can find and evaluate you. This information is published to promote your classes.
Content you create — forum posts, replies, and upvotes; class announcements, videos, and PDF notes you upload (educators), together with their titles and descriptions; and reports you file against a class.	To operate the discussion, curriculum, moderation, and content features you use.
Testimonials you add (educators only) — student testimonials that may include the reviewer's name, school, and photo.	To display reviews on your public profile. If you add these, you confirm you have the person's permission to publish their details; you can remove them at any time.
Invite recipients (educators only) — a prospective student's email address you optionally attach to a single-use invite link.	To bind an invite to a specific person and help you share it. The platform does not send the invite for you.

2. Information we collect automatically

Data	Why we hold it
Learning activity — the classes you enrol in, your video playback progress (resume position, total watch time, and whether you completed each lesson), and which class announcements you have read.	To resume videos where you left off, show your progress and unread updates, and give educators aggregate insight into how their lessons are watched.
Lesson analytics — aggregate minutes watched and completion counts per video, derived from the playback progress above.	To show educators how their lessons are performing. These figures come from our own playback tracking, not from our video provider's separate delivery analytics.
Technical and log data — IP address, browser and device information, and access timestamps, recorded by our hosting provider.	To keep the service secure, diagnose problems, and prevent abuse.
Cookies and local storage — an authentication session cookie and your theme preference.	See the Cookies section below.

3. Cookies and local storage

We use a small number of strictly functional cookies and browser-storage items. We do not use advertising or cross-site tracking cookies.

Authentication cookies — set by our authentication provider to keep you signed in. Without them you cannot log in.
Theme preference — stored in your browser to remember light/dark mode.

4. How we use your data

Provide, maintain, and secure the platform and your account.
Authenticate you and keep you signed in.
Review and approve educator applications.
Track and resume your learning progress, and surface analytics to educators.
Operate the marketplace, forums, announcements, and moderation tools.
Communicate with you about your account, including email verification and password resets.
Detect, prevent, and respond to fraud, abuse, and security issues.

5. Who we share your data with

We do not sell your personal data. We share it only with the service providers that run the platform on our behalf, each acting as a data processor under contract:

Supabase — hosts our database and handles authentication (your account, profile, learning activity, and content), and logs technical data such as IP addresses and sign-in times as part of authentication.
Cloudflare Stream — stores, encodes, and delivers uploaded videos.
Cloudflare R2 — stores the PDF notes that educators upload.
Resend — delivers account emails such as sign-up verification and password-reset messages.
Vercel — hosts and serves the application, and processes technical and log data.

We may also disclose data if required by law, or to protect the rights, safety, and security of VOETutor and its users.

Payments: online paid checkout is not yet available. Where a class is paid for today, payment is arranged directly between you and the educator outside the platform (for example, by bank transfer), and access is granted through a single-use invite link — VOETutor does not process, receive, or store those payments or any payment-card details. When online checkout launches, a third-party payment provider will handle payment details and this policy will be updated before that feature goes live.

6. Information visible to others

Some information is public by design. Approved educators have a public profile — visible to anyone, including visitors who are not signed in, through our educator directory and homepage — that may display their name, photo, professional background, subjects, hourly rate, exam results, and any testimonials they add (which can include a reviewer's name, school, and photo).

Within a class, your display name and profile photo appear next to your forum posts, replies, and Q&A to the other members of that class. Photos you upload as an avatar, and images you embed in posts, are stored at public web addresses, so anyone with the direct link may be able to view them. Please keep this in mind when deciding what to share.

7. Data retention

We keep your personal data for as long as your account is active. When your account is deleted (at your request), we delete your profile and associated content; some records may be retained where we are legally required to, or where needed to resolve disputes and enforce our agreements. Server and security logs are retained for a limited period by our hosting provider.

8. How we protect your data

Access to your data is restricted at the database level by row-level security, so users can only read and write the records they are authorised to. Passwords are stored as salted hashes, traffic is encrypted in transit, and uploaded videos and note files are served only through short-lived, access-checked links. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can update much of your profile directly in the app. For any other request, contact us using the details below and we will respond within a reasonable time.

10. Children and younger students

VOETutor serves IB students, some of whom are under 18. We collect only the data needed to provide the service. If you are below the age of digital consent in your country, please use VOETutor with the involvement of a parent or guardian. If you believe a child has provided us data without appropriate consent, contact us and we will remove it.

11. International data transfers

Our service providers may process and store data in countries other than your own. Where data is transferred internationally, we rely on those providers' safeguards to keep it protected to the standard described in this policy.

12. Changes to this policy

We may update this policy as the platform evolves — for example, when paid checkout launches. We will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.

13. Contact us

Questions about this policy or your data? Email support@wsmath.com.