Privacy notice

This is a draft for review. It is published so you can see how we intend to operate, and it will be finalised before any paid plans launch. Sections marked as placeholders are still being prepared.

1. Who we are

[Placeholder: data controller identity and contact details, including a contact for privacy questions.]

2. Children first

TutorLumi is designed for use by children, so we hold ourselves to the standards of the ICO's Age Appropriate Design Code. In practice that means: we collect the minimum we need, we do not profile children for advertising, there are no ads and no third-party trackers, and parents can see everything their child does on the service.

3. What we collect

From parents: name, email address, password and multi-factor authentication details, or your social sign-in identity if you use that instead.
From children: a display name, school year group, and the work they do on the service, including homework photos, conversations with the tutor, quiz results and progress records. No child email addresses or phone numbers.
[Placeholder: full data inventory, retention periods and lawful bases.]

4. Where your data lives

Your family's data is stored in the United Kingdom. Some processing is carried out by carefully chosen service providers. [Placeholder: list of processors, what each receives, and international transfer safeguards for AI processing.]

5. Your rights

You can export everything we hold about your family, or delete your whole account, directly from your settings at any time. You also have the usual rights under UK data protection law. [Placeholder: full rights wording and how to complain to the ICO.]