Back to home

Privacy Policy

Last updated: 9 November 2026

Effective date: 2 November 2026

Who we are

Tutor Time (tutortime.study) is operated by Tutor Time LLC, a Delaware limited liability company, USA. Tutor Time LLC is the controller of the personal data described here. Contact for everything: support@tutortime.study.

Mailing and legal-notice address: Tutor Time LLC, c/o Universal Registered Agents, Inc., 300 Creek View Road, Suite 209, Newark, DE 19711, USA.

This Privacy Policy is governed by the laws of the State of Delaware, USA, without regard to conflict-of-law rules.

Summary

  • You can browse without an account. Listing counts, company page counts, and the map on a company page run without a cookie choice. Analytics run only if you allow them.
  • Tutor listings are public. Contact details are shown after a visitor confirms they are of legal age and sends a message.
  • We don't sell personal data and we don't show ads.
  • You can download your data and delete your account in account settings. You can also ask us to delete other records by email.

Information we collect

When you sign in with Google

Your name, email address, profile picture (if Google provides one), and your Tutor Time signup date. Supabase Auth keeps you signed in with cookies.

When a tutor signs in and opens the dashboard, edits a solo listing, or uses a button on a listing email, we record that time. We use it to show the Active badge and to decide when to send a "still tutoring?" check-in.

Tutor listings

What you add to your listing: name, photo, subjects, curricula, teaching languages, years teaching, levels, location (country, region, and place, which we map to the place's approximate coordinates), an optional area or landmark, lesson formats, rate and currency, availability and time zone, packages, description, credentials you type, and contact details (email, phone, WhatsApp, LINE, booking link). The contact email can be different from your Google email. We confirm it with a link before it is shown as verified.

The area or landmark is public and can be searched. If that text contains an email, phone number, link, or chat handle, we leave it off the public listing. The words can still match a search.

Credentials are text you type: the kind (such as a safety check, teaching license, degree, or certificate), the title, the issuer, and an optional year. They are self-reported. We do not collect identity documents or certificate files.

Your listing is public and can appear in search engines and on share cards. Your contact details are shown only to visitors who confirm they are of legal age and send a message. Photos are stored in public storage, so anyone with a photo's link can see it.

If you add a Calendly, Cal.com, or Google appointment link, a visitor who chooses to open the scheduler loads that service in the page. Other booking links open in a new tab and are not embedded.

Company accounts

Organisation name, description, logo, website, contact details (email, phone, WhatsApp, LINE), map address, location, the people who manage the account and their roles, group classes, and the company's tutors.

A company page always shows the address as a Google Maps embed, including when the address is an Apple Maps link. The map loads with the page. Google may receive the visitor's IP address and set its own cookies under its own privacy policy. Apple receives the visit only if the visitor opens the Apple Maps link. There is no separate consent step for the map.

Company billing

Plan, billing day, invoices, payments, discount codes, and payment status. The people we write to about a bill are the company contact email and the account members.

Invoicing is manual. We keep the invoice and the payment record, including the amount, currency, due date, a note such as the date a bank transfer arrived, and which account marked it paid. We do not collect card numbers.

We are adding Stripe as the payment processor for online company card payments. Once it is live, Stripe will collect card and billing details under its own privacy policy and tell us whether a payment succeeded or failed. We will not see or store full card numbers. Until then, we invoice the company directly.

Company page counts

On company pages we count page views, tutor profile opens, contact taps, booking taps, and class views. The stored count is the kind of event, the company, and the tutor or class. It does not store a name, email, or IP address. This browser tab remembers a count for 30 minutes (tt-company-analytics) so the same visit is not counted twice. These counts run whatever your cookie choice. The company sees totals for the last 7 and 30 days. We keep the underlying rows until the company account is removed or you ask us to delete them.

Students and messages to tutors

To send a tutor or class a message, you confirm you are of legal age and give your email, or you sign in. We store the message, your email, which tutor or class it was for, and when it was sent.

A tutor's, company's or class email includes your message and your email address, with a button that opens a message to you. The reply-to address on that email is a Tutor Time address, not your address. We keep your email on that link for 90 days so the reply and our automatic answer still work. After 90 days we clear the email and delete the link.

A student account also stores your saved tutors and when you confirmed your age. This browser can remember an email you have confirmed for messages (tt_verified_enquiry_email, 1 year) and which tutors you have already unlocked (tt_unlocked_tutors, 1 year). While you are confirming a message, this tab stores that message's id (tt_enquiry_wait).

Looking-for requests

The email and first name or nickname you enter, and the request (subjects, level, format, location, budget, goal, frequency, and an optional note). We email you to confirm before the request goes up. After you confirm, the request is on the public board for 30 days.

Your name and email are not on that board. The page says contact details are hidden there. A note that contains an email, phone number, link, or chat handle is left off the public card. A solo tutor with a live listing that is visible in search can see your name and email when the request matches their listing, and can email you from their dashboard. A company account cannot. A listing hidden by moderation, or hidden from search, cannot either.

If you opt in, we email you when a matching tutor lists. After 30 days the request leaves the board. We keep the record, including a request you take down, until you ask us to delete it.

Lesson summaries

Tutors can create a lesson summary for a student or parent: the student's first name or nickname, the date, subject, topics, homework, an optional next lesson date, a short note, and the tutor's name. The tutor decides what to write and who gets the link. We reject a phone number in the summary. Anyone with the link can read it. The page is not listed for search engines.

Listing stats

To show an individual tutor how many people opened their listing or tapped a contact button, we count each visitor once per Taipei day. Company tutors are not included. We do this with a one-way code made from a secret, your IP address, the listing, and the Taipei date. The code cannot be turned back into your IP address by trying every address. We delete that code after 2 days and keep only daily totals.

Listing stats do not use a cookie. This browser tab remembers a count for 30 minutes (tt-listing-stats) so the same visit is not counted twice. They run whatever your cookie choice, because tutors rely on them to see how their listing is doing. We do not count the tutor's own visits, visits from Tutor Time staff, or known crawlers.

Analytics (only if you allow it)

If you allow analytics, Vercel Web Analytics records page views. It also records events such as opening a tutor card (with the listing's location), tapping a contact button (the channel and whether it was a tap or a copy), opening a professional-development or workshop card (the audience and the title), a partner-page visit, or downloading a share card. It does not set its own cookie.

Professional development email

Tutors can opt in to professional development emails. We store that choice, when it was made, and the email address we send to. You can turn these off in your account settings. Product-update emails are also optional.

Emails and replies

We send emails through Resend. Some are needed to run the service (confirmations, listing reminders, "still tutoring?" check-ins, notices about your listing or a moderation decision). Others are optional (professional development, product updates, and a looking-for match email if you asked for one).

If you reply to some of our emails, Resend receives the reply and we may send an automatic answer. A permanent bounce of a "still tutoring?" check-in or its reminder can hide that solo listing from search. The profile link still works. A spam complaint adds a do-not-email entry for that email address, and we stop sending listing emails to it. The listing is also paused for new students. We keep the do-not-email list by email.

Listing review and safety

We review listings, looking-for posts, and classes to keep the directory safe and genuine. An automated reviewer reads them through Tutor Time, including the owner's Google email and the Tutor Time signup date, together with the listing text and contact details. It records a flag and a suggested action. It does not ban anyone.

Only a safety flag hides a listing, post, or class straight away, while a person reviews it. A minor flag leaves it public until a person upholds it. If the same problem was already upheld, a later flag can hide the listing again without a new email. A person decides the outcome. Decisions to ban an account are made by a person, not automatically: a ban hides that account's listings, blocks a new listing from the banned email, and sends a notice. We keep the ban list by email. We also keep audit records, the time a listing was hidden, review notes, flags, quality and completeness scores, and the decision.

Listing, class, and company URLs are checked against public blocklists (HaGeZi for adult content, and University of Toulouse UT1 for gambling, drugs, and phishing). A shortened link is fetched so we can check the address it points to. A blocked link is flagged for the same review. The blocklists are public lists. We do not send your personal data to the list publishers.

Technical data

Our host, Vercel, keeps short-term server logs, including IP address, browser, and device type, for security and to fix problems.

How we use your information

  • To run Tutor Time: accounts, listings, search, messages, lesson summaries, looking-for requests, and company billing
  • To keep listings current and the directory safe: the Active badge, check-ins, review, hiding, and bans
  • To show tutors and companies their own listing and page counts
  • To improve the site, using analytics you allowed
  • To send optional emails you opted into
  • To meet legal, tax, and accounting duties

Legal bases

Where data protection law asks us to name a legal basis, we use your data:

  • To provide the service you asked for: accounts, listings, messages, lesson summaries, looking-for requests, and company billing
  • For our legitimate interests in running a safe and accurate directory: listing review, blocked-link checks, listing stats, company page counts, the Active badge, security logs, do-not-email and ban lists, and the map on a company page
  • With your consent: analytics, the language cookie, and optional emails
  • To meet legal duties, where a duty applies to a billing record

You can withdraw consent for analytics, the language cookie, and optional emails without closing your account. Withdrawing consent does not affect processing that already happened.

Who we share it with

We don't sell personal data. We share it only with:

  • Visitors to the site: your public listing, a looking-for request without the name and email, and a lesson summary when someone has the link
  • The tutor, company or class you message: your message and your email address
  • A solo tutor with a live listing that is visible in search: your name and email on a looking-for request that matches their listing
  • Service providers that run the site for us: Supabase (database, sign-in, and storage), Resend (email), Google (sign-in), Vercel (hosting, logs, and analytics you allowed), Google Maps (the embedded map on a company page; Apple receives the visit only if the visitor opens the Apple Maps link), and Stripe (company card payments, once added)
  • Calendly, Cal.com, or Google, if you open an embedded scheduler on a listing
  • Authorities, if the law requires it

International transfers

Our data is currently hosted in Australia. We may store or process data in other countries where we or our service providers operate, including the United States, with appropriate safeguards. We rely on their data processing terms, including standard contractual clauses where required, for these transfers.

Taiwan Personal Data Protection Act

This section states the notice items in Article 8 of the Personal Data Protection Act.

  • Who collects the data: Tutor Time LLC, a Delaware limited liability company, USA. Contact: support@tutortime.study. Mailing and legal-notice address: Tutor Time LLC, c/o Universal Registered Agents, Inc., 300 Creek View Road, Suite 209, Newark, DE 19711, USA.
  • Why: to run the directory, accounts, listings, messages, lesson summaries, looking-for requests, and company billing, and to keep the directory safe.
  • What: the categories in "Information we collect" above.
  • How long, where, and who receives it: the retention, transfer, and sharing sections above. We use the data by storing it, showing public listings, sending email, and reviewing listings.
  • Your rights under Article 3, and how to use them: you may ask to see, copy, correct, stop us collecting or using, or delete your data. Email support@tutortime.study from the email address on the account, or use account settings where a control is there.
  • If you do not provide data: you can browse without an account. We cannot create a listing, send a message, post a looking-for request, or open a company account without the data that feature needs.

How long we keep it

For now, we keep personal data until you delete it or ask us to delete it. A few things are removed sooner:

  • Listing-stat visitor codes are deleted after 2 days. Daily totals are kept.
  • The student email stored on a listing-email link is cleared after 90 days, and the link is then deleted.
  • Profile photos are deleted when you delete your account.
  • Age confirmation for a visitor who is not signed in lasts only while the browser tab is open.

Deleting your account removes the sign-in, the profile photos, and a tutor listing owned by that account. Lesson summaries that tutor created, and messages sent to that listing, are removed with the listing. A student's messages stay, with the email address, after the student account is deleted. Looking-for requests are kept after they leave the board. Deletion feedback (the email address and any reason you gave) is kept. Company billing records are kept. Reply relays are kept with the message.

You can ask us to delete messages, closed looking-for posts, lesson summaries, deletion feedback, and billing records by emailing support@tutortime.study from the email address listed for the account. We keep a ban list and a do-not-email list by email so we can enforce them. You can ask about those too. We may keep a ban entry where we still need it to stop that email creating a new listing.

Cookies and similar storage

Tutor Time asks before using optional cookies. You can accept all, refuse optional cookies, or choose, and change this anytime from Cookie settings in the footer.

Necessary (always on):

  • Sign-in cookies from Supabase
  • tt_signed_in_before: this browser has signed in before (1 year)
  • tt_verified_enquiry_email: emails you confirmed for tutor messages (1 year)
  • tt_unlocked_tutors: tutors whose contact details you unlocked (1 year)
  • tt_cookie_consent: your cookie choice (1 year)

Preferences (optional):

  • NEXT_LOCALE: your language

Analytics (optional):

  • Vercel Web Analytics, which does not set a cookie

This tab only:

  • tt_age_majority_session: you confirmed you are of legal age. We also clear any old tt_age_majority_consent cookie.
  • tt-listing-stats and tt-company-analytics: 30 minutes, so a visit is not counted twice
  • tt_enquiry_wait: a message you are still confirming
  • tutortime.looking-for-idle.dismissed: you closed the looking-for prompt

In this browser (localStorage):

  • An unfinished listing, including the contact details and the photo, until the listing is submitted

Listing stats, company page counts, and the company map run whatever your cookie choice.

Children

Tutor Time is not meant for children under 13, and you must be 13 or older to browse.

You must be 18 or older to create a tutor listing or a company account.

Anyone under 18 should get a parent or guardian's consent before contacting any tutor. To see a tutor's contact details or send a tutor a message, you must also confirm that you are of legal age (the age of majority) in your country or region. If you are not, ask a parent or guardian to contact the tutor for you.

If you think a child under 13 has given us personal data, email support@tutortime.study and we will delete it.

Your rights

Depending on where you live, you can ask to access, correct, download, or delete your data, object to or restrict some uses, and withdraw consent. You can download your data and delete your account in your account settings. To ask us to delete specific content, or for any other request, email support@tutortime.study from the email address listed for your account, so we can confirm it's you.

In Taiwan, you have the rights in Article 3 of the Personal Data Protection Act: to ask to see, copy, correct, stop collecting or using, or delete your data.

The right to complain

If you are in the UK or the EU, you can complain to your data protection authority, such as the ICO in the UK. In Taiwan, you can complain to the relevant government authority under the Personal Data Protection Act. You can also email support@tutortime.study first and we will respond.

Security

We use access controls, encrypted connections, and restricted database permissions. No system is completely secure.

Changes

If we make a significant change, we will give signed-in tutors and company contacts at least 30 days' notice by email, or post a notice on the site, before the change applies, unless it is needed sooner for a legal or safety reason. The date at the top is the latest version. Continuing to use the service after that period means you accept the updated policy.

Language

This Privacy Policy is written in English. If a translation differs, the English version prevails. A Traditional Chinese translation is provided for convenience.

Contact

For privacy questions, contact us at support@tutortime.study or via our Contact page.