Security and privacy
How we handle payments and student data
This page explains in plain words what happens to parents' money and to student data. The full legal detail is in the privacy policy.
Payments
Parents' money goes straight to the center or teacher
- A parent pays by InstaPay transfer to the center's or teacher's own account, or in cash to the center or teacher.
- The money does not pass through TutoringHQ. We do not receive it and we do not move it.
- There is no card payment today.
- When a parent uploads a picture of the receipt, the center owner or teacher decides that the payment arrived.
What is stored
What we store
- Students, groups, attendance and invoices, and the receipt pictures uploaded to an invoice.
- A receipt can show the payer's name and account details.
- We do not record card numbers, dates of birth or health information.
- Your PIN is stored only in hashed (scrambled) form, never in readable form.
- All connections to our services are encrypted.
- The full list and how long we keep each item is in the privacy policy
Who sees what
Who sees student data
- The center owner and the team members they add, each with the permissions the owner sets. A private teacher sees only their own students.
- Each account's data is kept separate from every other account's.
- A parent sees only their own child's data, through a read-only link: attendance, balance and open invoices. A parent has no account and no PIN.
- A receipt upload link ends after 48 hours, and the parent link ends after 30 days.
Consent
A parent's consent
- Until a parent agrees, the only text they get is the request to agree.
- After they agree, they get the center's or teacher's texts. They can withdraw consent at any time, through the center or teacher or the privacy request form.
- We do not send marketing messages to parents or to students.
- Tarek does not message students, and he does nothing until the center owner or teacher taps Allow.
Your data
Export and deletion
- On a paid plan, the center owner or teacher can download payments as a CSV file (not during the free trial).
- To see, correct or delete your data, restrict its use, object to it or withdraw consent, use the privacy request page. We answer within 30 days.
- Some data may stay after a deletion where the law requires it, such as invoices kept for tax.
A question about security?
Message us on WhatsApp or send an email and we will reply.