What we store, how replies are moderated, and who sees what
tutor.ai is used by minors, so this page is written to be read by a student and by a parent without either of them needing a legal glossary.
It states what we do. It does not claim a certification we have not been audited against, because we hold none.
What we store, and what we deliberately do not
A voice clip exists for one purpose: turning your speech into text. It is sent to the transcription service, the text comes back, and the audio is discarded. We never write audio to storage, and there is no setting that turns that on.
The transcript is kept, because it is the lesson record — it is what lets a session be resumed, summarised and turned into mastery. Whiteboard snapshots and uploaded files are stored the same way, against your own account.
- Stored: transcripts, whiteboard snapshots, uploaded files, mastery history, session summaries.
- Not stored: audio recordings, keystroke timings, advertising identifiers.
- In our logs: ids, timings, error codes and rule names. Never the text of what you wrote, and never the content of a file.
- Counted, not tracked: anonymous daily totals of which site buttons are pressed and whether a free session gets a first move. No cookie, no id and no IP address is kept with them, and a browser sending Do Not Track or Global Privacy Control is not counted at all.
- No delete action yet: a session keeps its messages, its board snapshot and its uploads, because nothing in this build can remove them.
How a reply is moderated
Two layers sit between the model and you. The first is the session policy: the tutor refuses unsafe or sexual content and continues with the lesson, redirects off-topic chat back to the work once, gives no medical, legal or personal advice, and will not help with a graded test that is in progress.
The second is deterministic and runs on every single reply. Before a reply reaches you it is normalised and matched against a small set of rules that catch finished solutions — phrases like “the answer is” or “the solution is”, and worked sequences that end in a bare numerical result. The check is intentionally conservative and rule-based, so its behaviour can be predicted and re-tested offline.
- A flagged reply is still shown — we do not quietly rewrite your history — but it is marked.
- A linked parent sees a count of flagged replies on their dashboard.
- Safety flags and answer-leak flags are counted separately, so a refusal and a leaked answer are never confused.
- When something is flagged we keep the rule name and the session id. We do not keep an extra copy of the text.
The tutor is an AI, and it says so
The first thing the tutor is told to be is explicit that it is an AI and never a person. That is not a footer disclaimer: it is part of the policy that shapes every reply, and you will see it said plainly in a session rather than only when you ask.
It will not invent details about your class, your teacher or your textbook. If it needs to know something about your course, it asks.
What a parent or guardian can see
A student generates a six-character link code on their own Progress page and hands it to a parent. The parent redeems it. No child’s email address is ever needed, and no parent can reach an account that has not linked them.
Once linked, a guardian gets a read-only view: mastery per subject, recent session summaries, and the flags panel described above. Guardians cannot write, edit or start anything, and they cannot see a student who has not linked them.
- Read-only, and enforced in the database as well as in the app.
- Linking is by code, never by guessing an email address.
- There is no revoke action yet: a new code replaces an unused one, but once a guardian has redeemed a code this build gives the student no way to close that access.
In an emergency, this is not the tool
tutor.ai is not a crisis service. It is a study aid, it is not monitored by a human in real time, and nobody is watching a session as it happens.
If you are in danger, or you are thinking about harming yourself, please stop the session and talk to a trusted adult right now — a parent or carer, a teacher, a school counsellor, or your family doctor. If you cannot reach anyone and you are in immediate danger, contact your local emergency number.
The tutor is told to do one thing when a student raises self-harm, abuse or an emergency: stop the work, say warmly that this matters more than the homework, and point to a trusted adult. It is deliberately not asked to counsel anyone.
No certifications, no invented framework names
We are not certified against any privacy or safety standard, and we have not been audited by anyone. We are describing the behaviour of this software, which is something you can check, rather than a badge you would have to take on trust.
Start a session knowing what is kept
Transcripts are stored, audio is not, and this page says which records exist — including the ones we cannot yet delete.