Summary — Privacy in Plain English
We believe in simple, transparent matchmaking without intrusive data mining. Here is our pledge:
1. Information We Collect
Depending on whether you register as a Student / Guardian or as a Tutor, we collect different types of information required to facilitate home and private tuition services in Bangladesh:
A. Account & Contact Details (All Users)
- Full Name: To identify you to other matched users on the platform.
- Mobile Phone Number: Used as your primary account identifier, for OTP verification, and for direct voice contact between guardians and shortlisted tutors.
- Email Address (Optional or Google Sign-In): For account recovery, transactional updates, and receipts.
- Password / Security Credentials: Cryptographically salted and hashed; we never store plain-text passwords.
- Profile Photo (Optional): Uploaded by the user to build trust and authenticity on tutor profiles.
B. Tuition Post Data (Students & Guardians)
- Academic Requirements: Subject(s) requested, student class/grade (e.g. Class 9, HSC, O Levels), curriculum medium (Bangla Medium, English Version, English Medium).
- Tuition Logistics: Expected monthly salary or hourly rate, preferred days per week and schedule, gender preference for the tutor.
- Tuition Location: Selected neighborhood/area and sub-area in Chittagong (e.g., Panchlaish, Nasirabad, Halishahar, Agrabad) and specific address notes. (Exact street address is only shared with the confirmed hired tutor).
- Ratings & Reviews: Star ratings and written reviews provided for tutors following demo classes or confirmed hiring.
C. Profile & Verification Data (Tutors)
- Qualifications & Education: Educational history, institutions attended (e.g. CUET, Chittagong University, colleges), degrees obtained, passing years, and teaching background.
- Tutoring Preferences: Subjects taught, preferred student grades, areas covered in Chittagong, teaching style, and hourly/monthly rates.
- Verification Credentials: Scanned copies or photographs of Student ID card, SSC/HSC certificate, National Identity Card (NID), or university degree certificates. These documents are collected strictly to verify your academic claims and protect students.
- Assessment Results: Scores on optional subject competence or MCQ screening tests conducted on the platform.
D. Financial & Wallet Ledger Information
Tutors utilize an in-app wallet balance and credit system (such as activation fees of ৳500 and tuition application credits). We track transaction IDs, timestamps, credit balances, and payment gateway references.
2. Android Device Permissions & Why We Request Them
The Tutorly Android app requests only the minimum set of permissions necessary to deliver essential services:
| Permission | Purpose | Mandatory? |
|---|---|---|
| POST_NOTIFICATIONS | Sends real-time push notifications when a new matching tuition is posted, when a guardian shortlists your profile, or when a hire is confirmed. | Optional (Can be toggled in OS settings) |
| READ_MEDIA_IMAGES / Storage | Allows tutors and guardians to select and upload a profile photo, and allows tutors to upload verification documents (e.g. Student ID, certificates). | Required only when uploading images |
| CAMERA (Optional) | Allows capturing a fresh photo of your student ID or profile picture directly with your camera rather than selecting from the gallery. | Optional |
| INTERNET & Network State | Required for the app to sync listings, profiles, messages, and notifications with cloud servers securely. | Required |
| RECEIVE_BOOT_COMPLETED | Ensures notification channels are properly registered after your phone restarts so you don’t miss time-sensitive tuition alerts. | Standard Android requirement |
3. How We Use Your Information
We process personal information under lawful grounds (contractual performance, user consent, and legitimate interest) for the following purposes:
1. Matchmaking & Discovery
Connecting students with suitable, verified home tutors based on area, subject, grade, budget, and scheduling preferences.
2. Trust & Safety Verification
Reviewing tutor academic credentials, institutional affiliations, and certificates to protect families and safeguard against fraudulent profiles.
3. Facilitating Communication
Enabling phone contact exchange between guardians and tutors once an application has been shortlisted or confirmed for demo classes.
4. Wallet & Transaction Management
Maintaining transparent records of tutor activation, application credit deductions, demo holds, and top-up payments.
5. Real-Time Push Notifications
Delivering instant alerts when new tuitions in your area are posted, applications are reviewed, or trial classes are scheduled.
6. Customer Support & Fraud Prevention
Assisting users via WhatsApp/email and preventing off-platform scams, fee evasion, harassment, or misuse of user contact numbers.
5. Data Security, Storage & Retention
We implement robust administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, alteration, disclosure, or destruction:
- Encryption in Transit: All communications between the mobile application, backend API, and third-party services use industry-standard HTTPS / TLS 1.3 encryption.
- Granular Database Rules: Access to Firestore is secured by strict server-side security rules ensuring users can only read and write data they are authorized to access.
- Private Presigned URLs: Sensitive tutor verification documents (NID, university certificates) are stored in private cloud storage and can only be accessed by authorized verification staff via short-lived, cryptographically signed URLs.
- Data Retention: We retain account data as long as your account is active. If you delete your account, your profile, listings, and verification documents are purged within 30 days, except for transaction ledgers retained solely to comply with legal, tax, and accounting obligations in Bangladesh.
6. Google Play Data Safety Declarations
For full compliance with Google Play Store User Data policies, the following table summarizes how Tutorly handles data categories:
| Data Category | Collected? | Shared? | Encrypted in Transit? |
|---|---|---|---|
| Personal Info (Name, Phone, Email) | Yes (Account setup & matchmaking) | Only with shortlisted tutor/guardian | Yes (HTTPS/TLS) |
| Financial Info (Transaction history) | Yes (Credits & activation) | With payment processors only | Yes (HTTPS/TLS) |
| Photos & Documents (IDs, Certs) | Yes (Profile & credential vetting) | No (Private verification only) | Yes (HTTPS/TLS) |
| Approximate Area (Neighborhood) | Yes (Tuition matching) | Public on tuition board | Yes (HTTPS/TLS) |
| Device & Other IDs (FCM tokens) | Yes (Push alerts) | With Google Firebase only | Yes (HTTPS/TLS) |
7. Account & Data Deletion
You have the absolute right to request the deletion of your Tutorly account and all associated personal data at any time.
How to delete your account:
- Directly in the Android App: Open Tutorly → Go to Profile / Settings → Select Account Settings → Tap “Delete Account” and confirm.
- Via Email Request: Send an email from your registered email address or mentioning your registered phone number to [email protected] with the subject line:
“Account Deletion Request”.
What happens when you request deletion:
- Your profile, name, phone number, and email are removed from public searches and matchmaking.
- All active tuition postings, applications, and saved preferences are cancelled.
- All uploaded verification documents and certificates are deleted from our secure cloud storage.
- Account deletion takes effect immediately in the app and cloud purges complete within 30 days.
8. Children’s Privacy
Tutorly is designed as a tool for adult guardians (parents/family members) looking to hire teachers, and adult tutors (typically university students and certified educators) seeking tuition opportunities.
We do not knowingly collect personal contact information directly from children under the age of 13. Any tuition listing for minor students must be posted and administered by a parent or legal guardian. If we become aware that an account was created by a child under 13 without verifiable parental consent, we will promptly delete that account.
9. Contact Information & Data Inquiries
If you have any questions, feedback, or concerns regarding this Privacy Policy or your personal information, please feel free to reach out to our team:
Email Support
Direct questions or requests
[email protected]WhatsApp Helpline
Quick help & support
+880 1721-292188Office Address
Mirpur DOHS, Dhaka
House-407, Road-6, Avenue-3, Mirpur DOHS, Dhaka