Effective July 30, 2026
Privacy Policy
This Privacy Policy explains how TutorlyAI (“we,” “us,” or “our”) collects, uses, shares, and protects information when you use our website and study assistant Service.
1. Scope
This Policy applies to personal information processed in connection with TutorlyAI, including account creation, document uploads, AI-powered study features, billing, and related communications. By using the Service, you acknowledge the practices described here. Our Terms of Service govern use of the Service separately.
2. Information we collect
Account information
When you create an account, we collect information such as your name, email address, and password (stored in hashed form by our authentication provider). You may also set preferences such as a preferred AI model.
Documents and study content
When you upload papers or other files, we store those files and derived data needed to provide the Service—such as extracted text, section breakdowns, definitions, quizzes, flashcards, concept maps, chat messages, and related study materials.
Usage and technical data
We collect information about how you use the Service, including feature usage, credit consumption, device/browser type, IP address, approximate location derived from IP, timestamps, and diagnostic logs needed for security and reliability.
Billing information
If you subscribe or purchase credits, our payment processor (currently Stripe) collects payment details. We receive related billing metadata such as customer and subscription identifiers, plan information, invoice references, and credit balances—not your full card number.
Communications
If you contact us or receive transactional emails (for example, email verification or password reset), we process the content of those communications and related metadata.
3. How we use information
We use information to:
- Provide, operate, and maintain the Service
- Process your documents with AI systems to generate study materials and tutor responses
- Authenticate users and secure accounts
- Measure and enforce usage limits and credit balances
- Process payments, subscriptions, and invoices
- Send transactional messages about your account and Service changes
- Monitor abuse, prevent fraud, and improve reliability
- Analyze aggregated usage to improve product quality and performance
- Comply with legal obligations
4. AI processing
To generate study aids and chat replies, we send relevant portions of Your Content (and related prompts) to third-party AI model providers. Those providers process the data to return model outputs. We configure and use these providers to deliver the features you request.
You should avoid uploading documents that contain sensitive personal data you are not permitted to share, or that you do not want processed by AI systems. Outputs may reflect or transform content from your uploads; treat them as confidential to the same degree as the source material requires.
5. How we share information
We share information only as needed to run the Service:
- Service providers — hosting, database/auth (e.g. Supabase), storage, email delivery, payment processing (e.g. Stripe), and AI model providers that process data on our behalf or as needed to fulfill your requests
- Legal and safety — when required by law, legal process, or to protect rights, safety, and integrity of users or the Service
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality
- With your direction — when you ask us to share information or use a feature that necessarily discloses it
We do not sell your personal information.
6. Cookies and similar technologies
We use cookies and similar technologies that are necessary for authentication, session management, and security. These help keep you signed in and protect your account. We do not use advertising trackers as a core part of the product experience described here; if that changes, we will update this Policy.
7. Data retention
We retain account information and Your Content for as long as your account is active and as needed to provide the Service. If you delete your account, we delete or anonymize associated personal data and documents within a reasonable period, except where we must retain limited information for legal, security, billing dispute, or fraud- prevention purposes (for example, transaction records).
Backups and logs may persist for a limited time after deletion before being overwritten in the ordinary course of operations.
8. Security
We use administrative, technical, and organizational measures designed to protect personal information, including encrypted transport (HTTPS), access controls, and authentication via our infrastructure providers. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
9. International transfers
We may process and store information in countries other than where you live, including where our providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.
10. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can:
- Update your profile name in account settings
- Delete your account and associated content from account settings
- Cancel subscriptions through billing settings where available
- Contact us through the Service to request additional assistance with privacy rights
We may need to verify your identity before fulfilling certain requests. Some rights may be limited by law or by our need to keep essential records.
11. Children’s privacy
The Service is not directed to children under 16 (or the higher minimum age of digital consent in your region). We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information, contact us so we can delete it.
12. Third-party links and services
The Service may link to third-party sites or rely on third-party processors. Their privacy practices are governed by their own policies. We encourage you to review those policies when you leave TutorlyAI or interact with embedded payment flows.
13. Changes to this Policy
We may update this Privacy Policy from time to time. We will revise the effective date at the top of this page and, for material changes, may provide additional notice in the Service or by email. Continued use after an update means you acknowledge the revised Policy.
14. Contact
For privacy questions or requests, email tutorlyai.app@gmail.com or use the support form. You can also reach us through your TutorlyAI account settings when signed in.