← Back to Tutrl

Privacy Policy

Last updated: July 2026

Tutrl (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our lesson tracking application.

This policy complies with the Australian Privacy Principles (“APPs”) under the Privacy Act 1988 (Cth). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect information that you provide directly to us through your use of the Service:

  • Account information: Name and email address.
  • Student data: Student names, subjects, year levels, rates, parent or guardian names, parent emails, CC emails, and lesson notes.
  • Payment information: BSB, account numbers, account names, and ABN for invoice generation. All payment transactions are processed by a third-party payment provider and are not stored on our servers.
  • Lesson content: Topics covered, homework assigned, session notes, and AI-generated parent recaps.

We do not knowingly collect personal information directly from children. If you are a tutor and you add a student under the age of 18, you represent and warrant that you have obtained the necessary consent from the student’s parent or legal guardian to provide their information to the Service.

2. How We Use Your Information

  • To provide and maintain our lesson tracking service
  • To generate invoices, receipts, and process payments through our third-party payment provider
  • To send automated lesson reminder emails to students
  • To generate AI-powered parent recaps (see Section 5 for limitations)
  • To communicate with you about your account, billing, and service updates
  • To improve the Service, fix bugs, and analyse usage patterns using anonymised or aggregated data

3. Third-Party Services

We engage trusted third-party service providers to operate and maintain the Service. These include providers for:

  • Cloud infrastructure and hosting
  • Email delivery and communications
  • Payment processing
  • AI text generation services
  • Authentication and account management

These providers are contractually bound to protect your data and may use it only for the purposes we specify. We do not authorise them to use your personal information for their own purposes.

4. Cookies and Tracking

The Service uses session cookies for authentication purposes only. These cookies are essential for the operation of the Service and are set by our authentication provider. No tracking, analytics, or advertising cookies are used.

You can control cookies through your browser settings. Disabling session cookies may affect the functionality of the Service.

5. AI-Generated Content

The Service may generate parent recap emails using artificial intelligence. These recaps are produced automatically based on the lesson data entered by the tutor.

Important: AI-generated content may contain errors or inaccuracies. Tutors are responsible for reviewing, editing, and approving any AI-generated content before sending it to parents or guardians. We make no representations or warranties regarding the accuracy or completeness of AI-generated content.

6. Data Storage and Security

Your data is stored securely on encrypted servers. We implement reasonable security measures, including encryption in transit and at rest. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, your data is permanently deleted within 30 days, subject to any legal obligations to retain certain records (such as for taxation purposes).

AI-generated recaps may be retained in anonymised form for service improvement.

8. Your Rights

Under the Privacy Act 1988 (Cth), you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or outdated information
  • Request deletion of your information, subject to legal retention requirements
  • Withdraw consent at any time, where consent was the basis for processing

To exercise these rights, contact us using the details in Section 10. We will respond to your request within a reasonable period.

9. Complaints

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint by contacting us. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

10. Contact

If you have questions about this Privacy Policy, or wish to exercise your rights, please contact us through the app or check the website for current contact information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.