സ്വകാര്യതാ നയം

• This Privacy Policy defines the principles of processing and protection of personal data of TutLive platform users.

• The controller of your personal data is MEETZ SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (MEETZ LIMITED LIABILITY COMPANY) headquartered in Poznań (ul. Juliusza Słowackiego 55/1, 60-521 Poznań, Poland), registered in the National Court Register under number 0001051530, share capital: 8.7 thousand PLN, VAT ID: 7812055176, REGON: 526056312.

• Contact with the Controller is possible at email address: support@tutlive.com

• Identity data: name, surname, email address, age (for personalization of educational content)

• NOTE: We do NOT collect sensitive data (health, beliefs, biometric data)

• Educational data: learning level, subjects, AI session history, learning progress, educational preferences

• Technical data: IP address, browser information, cookies, device data

• Payment data: transaction information (processed by payment provider Stripe)

• AI interaction data: questions asked to AI tutor, responses, quality ratings (for algorithm improvement)

• Performance of contract - provision of AI tutoring services and personalization of educational content (art. 6 sec. 1 lit. b GDPR)

• Legitimate interest - analysis of AI service quality, platform security, algorithm development (art. 6 sec. 1 lit. f GDPR)

• Consent - marketing, Google Analytics 4 (currently disabled), non-essential cookies (art. 6 sec. 1 lit. a GDPR)

• Legal obligation - accounting, consumer protection, children's online safety (art. 6 sec. 1 lit. c GDPR)

• Provision of AI tutoring services - content personalization, difficulty level adjustment, progress tracking

• User account management, payment and subscription handling

• Communication with users, technical and educational support

• Development and improvement of AI algorithms - analysis of teaching method effectiveness in anonymous and aggregated manner (basis: legitimate interest)

• Marketing (with consent) - newsletter, educational offers, information about new features

• Google Analytics 4 (with consent) - traffic analysis, functionality optimization - CURRENTLY DISABLED

• Ensuring platform security, abuse detection, minor protection

• Account data: until account deletion or 2 years from last activity

• Educational data and AI interactions: 2 years from last session (necessary for algorithm improvement and security)

• Payment data: according to tax regulations (5 years from transaction)

• Marketing data: until consent withdrawal or 2 years from last contact

• System and security logs: 12 months (protection against abuse)

• Children data 4-12 years: full parental control, automatically deleted after 2 years of inactivity or upon request

• Youth data 13-15 years: mandatory parental supervision, maximum until 16th birthday

• Youth data 16-17 years: control by minor, parents have right to access and deletion

• Parental supervision: parents/guardians have full access and right to delete children's data until 16th birthday

• Automatic deletion: system automatically deletes expired data according to above terms

• After account deletion request: personal data deleted immediately (maximum 30 days), accounting data according to legal requirements

• പേയ്‌മെന്റ് ദാതാക്കൾ (Stripe) - ഇടപാട് പ്രോസസ്സിംഗ്, PCI DSS അനുരൂപം

• IT സേവന ദാതാക്കൾ - Google, Fly, Vercel

• AI ദാതാക്കൾ - ട്യൂട്ടറിംഗ് പ്രവർത്തനത്തിനായി Google

• സുരക്ഷാ ദാതാക്കൾ - ആക്രമണങ്ങളിൽ നിന്ന് സംരക്ഷണം, ഉള്ളടക്ക മോഡറേഷൻ

• സർക്കാർ അധികാരികൾ - നിയമപരമായ വ്യവസ്ഥകൾ അല്ലെങ്കിൽ കോടതി ഉത്തരവിന്റെ അടിസ്ഥാനത്തിൽ മാത്രം

• എല്ലാ ദാതാക്കളും GDPR-അനുരൂപ ഡാറ്റ പ്രോസസ്സിംഗ് കരാറുകളിൽ പ്രവർത്തിക്കുകയും ഉചിതമായ തലത്തിലുള്ള സംരക്ഷണം ഉറപ്പാക്കുകയും ചെയ്യുന്നു