← Back to tuta

Privacy Policy

Last updated: 14 May 2025

1. Who We Are

tuta (operated by Engine8 Studios) operates the tuta platform at usetuta.app ("Platform"). We connect parents and students with qualified private tutors across Ghana.

We are a data controller under Ghana's Data Protection Act 2012 (Act 843). For privacy inquiries, contact us at hello@usetuta.app.

2. What Data We Collect

Account & Profile Data

  • Full name, email address, phone number
  • Role (tutor, parent, or student)
  • Profile photo (tutors)
  • City/location, subjects taught or required
  • Years of experience, educational background (tutors)
  • Government-issued ID documents submitted for KYC verification (tutors)

Student & Booking Data

  • Student first name, subject, academic level, and location — provided by the parent
  • Session dates, times, durations, and attendance records
  • Post-session evaluations (attendance, focus, comprehension, attitude, session notes)
  • Parent-facing pricing and payment records

Technical & Analytics Data

  • IP address, browser type, device type
  • Pages visited, time on site, click events — collected via Google Analytics (only with your consent)
  • Authentication tokens managed by Clerk (our auth provider)

3. How We Use Your Data

Provide the platformCreate accounts, match tutors to requests, manage bookings and sessionsContract performance
Verify tutor identityKYC review of submitted ID documents to protect familiesLegitimate interest / legal obligation
Session managementClock-in/out records, evaluations, progress trackingContract performance
CommunicationsBooking confirmations, session reminders, ops notifications via emailContract performance
AnalyticsUnderstanding how the platform is used to improve it (Google Analytics)Consent
Safety & fraud preventionDetect abuse, enforce our Terms of ServiceLegitimate interest
Legal complianceRespond to lawful requests from Ghanaian authoritiesLegal obligation

4. Children's Data

Our platform is used by parents to book tutoring for their children. Student data (first name, subject, level, session evaluations) is collected and processed on the basis of the parent's consent, provided when the parent creates an account and submits a request.

We do not knowingly allow children under 16 to create their own accounts. If you believe a child has registered without parental consent, contact us immediately at hello@usetuta.app and we will delete the account.

Student names and evaluation data are only visible to the parent account holder and the assigned tutor for that booking.

5. Who We Share Your Data With

We do not sell your personal data. We share data only with the following service providers who process it on our behalf:

ClerkAuthentication and session managementUnited States (SCCs apply)
Supabase / PostgreSQLDatabase hostingEU (AWS eu-west-1)
Google AnalyticsUsage analytics (consent-gated)United States (SCCs apply)
ResendTransactional email deliveryUnited States (SCCs apply)
VercelPlatform hosting and edge functionsUnited States / global CDN

Where data is transferred outside Ghana, we ensure appropriate safeguards are in place in accordance with the Data Protection Act 2012.

We may also disclose data to Ghanaian law enforcement or regulatory authorities where required by law.

6. Cookies & Analytics

We use cookies for two purposes:

  • Essential cookies: Required for authentication (Clerk session cookies). These cannot be disabled without breaking the platform.
  • Analytics cookies: Google Analytics cookies that track how you use the site. These are only set after you click "Accept all" on our cookie banner.

You can change your cookie preference at any time by clearing your browser's local storage for usetuta.app or contacting us.

7. How Long We Keep Your Data

Account dataFor the life of the account + 2 years after deletion
Session & booking records7 years (financial record-keeping requirements)
KYC documents5 years from the end of the tutor relationship
Session evaluations3 years from the session date
Analytics data26 months (Google Analytics default)

8. Your Rights

Under Ghana's Data Protection Act 2012, you have the right to:

  • Access: Request a copy of personal data we hold about you
  • Correction: Ask us to correct inaccurate data
  • Erasure: Request deletion of your data where there is no legitimate reason to retain it
  • Objection: Object to processing based on legitimate interests
  • Withdrawal of consent: Withdraw analytics consent at any time without affecting prior processing

To exercise any right, email hello@usetuta.app. We will respond within 21 days. You may also lodge a complaint with the Data Protection Commission of Ghana.

9. Security

We implement industry-standard security measures including:

  • All data transmitted over HTTPS/TLS encryption
  • Authentication managed by Clerk with multi-factor support
  • Database access restricted to application services only
  • KYC documents stored with restricted access controls

No system is completely secure. If you discover a security vulnerability, please report it responsibly to hello@usetuta.app.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email or in-app notice. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

tuta (operated by Engine8 Studios)
Email: hello@usetuta.app
Website: usetuta.app

See also our Terms of Service.