Privacy Policy — Snap Tutor

Snap Tutor ("we", "us", "our") is a homework-help application operated by Snap Tutor. This Privacy Policy explains what information we collect from parents and children, how we use it, who we share it with, and the choices you have. By using our website, iOS app, or Android app (together, the "Service"), you agree to this policy. If you do not agree, please do not use the Service.

We designed Snap Tutor to comply with the U.S. Children's Online Privacy Protection Act (COPPA), the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), Apple's App Store Review Guidelines (including Kids Category rules and App Tracking Transparency), and the Google Play Families policy and Play Data Safety requirements.

1. Who the account belongs to

Snap Tutor accounts are created by a parent or legal guardian (age 18+). Children do not sign up themselves. A parent may create up to four child profiles on the 6-month and 1-year plans, and unlimited profiles on the Lifetime plan. Child profiles are managed entirely by the parent from their account.

2. Information we collect

From the parent (account holder): name, email address, hashed password, country/curriculum preference, subscription plan, billing status, and (if you sign in with Google) your Google display name, email, and profile picture. Payment card details are collected and stored by our payment processor Paddle — we never see or store your full card number.

From child profiles: nickname or first name, grade/year level, curriculum, avatar selection, preferred language. We do not require a real name, address, phone number, birthdate, or photo of the child.

Homework content: photos of homework questions, typed questions, handwriting scans, voice recordings from the "Push to talk" tutor, chat transcripts with the AI tutor, drills, exam plans, and mistakes. These are stored so the child can revisit past sessions and so we can generate the weekly parent report.

Device and usage data: device type, operating system version, app version, IP address (used transiently for security and abuse prevention), crash logs, and anonymous usage events such as "question solved" or "drill started". We do not use third-party advertising SDKs and we do not build advertising profiles.

3. How we use information

Provide the tutoring experience — OCR, step-by-step explanations, drills, exam plans, review.
Generate the weekly parent report emailed to the account holder.
Personalise topics to the child's grade and curriculum.
Process subscription payments and refunds via Paddle.
Send transactional emails (sign-up confirmation, password reset, receipts, weekly reports).
Detect abuse, prevent fraud, and keep the service safe.
Comply with legal obligations.

We do not sell personal information, we do not show third-party ads, and we do not use children's data to train public AI models.

4. Legal bases (GDPR)

We rely on: (a) performance of the contract when you subscribe; (b) parental consent for processing children's data; (c) our legitimate interest in keeping the service secure; and (d) compliance with law.

5. Service providers we share data with

Paddle.com Market Ltd — payment processing and merchant of record. See paddle.com/legal/privacy.
Supabase / Lovable Cloud — hosting, database, authentication, storage.
AI providers (via Lovable AI Gateway) — process homework questions to generate explanations. Requests are not used to train third-party models.
Email delivery — sending auth, receipt, and weekly-report emails from notify.snapntutor.com.
Google — only if you choose "Sign in with Google" for authentication.
Apple / Google Play — if you install the mobile app, standard platform diagnostics apply.

Each provider is bound by a Data Processing Agreement and may only use data to deliver the Service.

6. Children's privacy (COPPA & Kids Category)

Snap Tutor is intended for children with a parent's supervision. Only the parent creates the account and provides verifiable consent by entering payment information for a paid plan or by confirming account creation for the trial. A parent may at any time:

Review the information stored about a child.
Delete an individual child profile, which removes all of that child's homework, drills and messages.
Delete the entire account, which erases all associated profiles within 30 days.

To exercise any of these rights, email support@snapntutor.com.

7. Mobile app permissions

Camera — to photograph homework. Photos are uploaded only when the child taps "Snap".
Photo library — to pick an existing image. Access is limited to the file selected.
Microphone — only during "Push to talk" tutor sessions. Recordings are transcribed then discarded.
Notifications — optional homework reminders and lesson nudges.

We do not use Apple's IDFA for tracking and we do not access contacts, location, health, or biometric data.

8. Data retention

Active accounts retain data as long as the account is open. Deleted profiles are removed from live systems within 30 days and from backups within 90 days. Billing records are retained for 7 years as required by tax law.

9. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Row-level security policies restrict data to the account holder. Passwords are hashed. We monitor for abuse and vulnerabilities.

10. International transfers

Our servers are located in the United States and the European Union. Where data leaves your region we rely on Standard Contractual Clauses.

11. Your rights

Depending on where you live you may have the right to access, correct, delete, export, restrict, or object to processing of your personal data, and to lodge a complaint with a supervisory authority. Contact support@snapntutor.com and we will respond within 30 days.

12. Changes to this policy

We will notify parents by email at least 14 days before any material change takes effect.

13. Contact us

Snap Tutor · Email: support@snapntutor.com
For EU/UK data-protection queries, mark your message "GDPR Request".