Privacy policy.

This is a small tutoring-scheduling app operated by Arad Raeisi (aradrsk) for a single independent English tutor in Toronto, Ontario. This page explains what personal information we collect, how we use it, and how to reach us if you have questions.

What we collect

• Account info: your name, age (we tutor K-12 so age is between 5 and 18), email address, and a password hash. If you sign in with Google we also receive your Google profile name and photo.
• Booking info: the sessions you book — date, time, duration, and status (confirmed or cancelled).
• Technical info: normal server logs (IP address, browser type, timestamps) collected by our hosting provider for security and reliability.

What we don't collect

• No payment information — sessions are currently free.
• No analytics pixels, no ad trackers, no third-party embeds.
• No precise location data beyond what's inferred from your IP.

How we use it

• To let you sign in, book sessions, and cancel them.
• To send you transactional emails about bookings (confirmation, cancellation).
• To prevent abuse (rate-limiting, blocking suspicious activity).

We do not sell your data, ever.

Who sees it

• The teacher sees the name, age, email, and booking history of anyone who books with her.
• Our infrastructure providers process your data on our behalf: Firebase (authentication), Neon (Postgres database), Vercel (hosting), Resend (email), Cloudflare (DNS). Each has its own privacy policy.

How long we keep it

Account and booking records are kept as long as your account is open. You can ask us to delete your account at any time by emailing aradrsk@gmail.com and we will remove your account and bookings within 30 days.

Children under 13

Because the service is designed for K-12 students (ages 5-18), we ask a parent or guardian to create and manage the account for any child under 13. If you are under 13 and have created an account without parental consent, email us and we will remove the account.

Security

Passwords are hashed by Firebase; they never reach our database in plain text. All traffic is over HTTPS. Database connections use TLS. No system is perfect — if something changes we'll update this page.

Changes

If we materially change what we collect or how we use it, we will update this page and change the "Last updated" date at the top. Continuing to use the service after a change means you accept the update.

Contact

Questions, data requests, or complaints: aradrsk@gmail.com.

This policy is written in plain language for a small prototype. It is not legal advice; if you are using this project as a template for a commercial service, get real legal review.