Privacy Policy

E&E is a managed institute, not an open marketplace. Accounts are created and overseen by the institute's Principal. Students, parents, and tutors do not sign up anonymously; each account is set up as part of enrolling with the institute. Because we work with children, a parent or guardian must be involved before a student account is active (see Children and parental consent).

• Account details: first and last name, email address, phone number, preferred language, and the password you set (stored only as a secure hash, never in plain text).
• Student learning details: grade or year level, education board or curriculum (for example CBSE, ICSE, IGCSE, IB), school name, and learning goals.
• Parent or guardian details: for a student who is a minor, the contact details of the parent or guardian who gives consent and links to the student.
• Tutoring activity: the classes a student is enrolled in, session schedules, and the tutors assigned to them.
• Messages: the content of messages exchanged through our moderated messaging (for example between a parent and the Principal, or a parent and an assigned tutor), along with timestamps and read receipts. Messaging is structured and kept on the record by design.
• Limited technical data: to keep accounts secure we keep a history of sign-ins — the time, the device (browser and operating system), your IP address, and a rough location (city and country level only, derived from the IP address, never a precise location). Your IP is also used to rate-limit sign-in and invite attempts against abuse. You and, for your own account, the Principal can review this sign-in history.

We do not collect payment-card details on the platform, and we do not use third-party advertising or cross-site tracking.

We use this information only to run the institute:

• Matching: to pair a student with a suitable, chosen tutor.
• Scheduling: to arrange and manage classes and sessions.
• Moderated messaging: to let parents, the Principal, and assigned tutors communicate safely and on the record.
• Running your account: to create, secure, and support your account and to contact you about your classes.
• Safety and security: to protect accounts, prevent abuse, and keep conversations in bounds.

We do not sell your personal information, and we do not share it for advertising.

E&E works with students who are minors, and we take that seriously.

• A student account for a minor requires a parent or guardian's consent and their contact details. We do not knowingly activate a student account for a minor without a parent or guardian involved.
• A parent or guardian is linked to their child's account through a consent step — a private link code the student shares with them — so linking only happens with the family's agreement.
• A parent or guardian can, at any time, ask to see the information we hold about their child, ask us to correct it, or ask us to delete the child's account and data, by emailing us (see Your rights).
• We keep the information we collect about a minor to the minimum needed to run their tutoring.

Access is limited by role, and we keep it narrow:

• The Principal (the institute's owner and administrator) can see the accounts and activity needed to run the institute.
• Assigned tutors can see the students in their own classes and the details needed to teach them. A tutor cannot see students who are not theirs.
• Parents and guardians can see their own linked child's basic details and the threads they take part in. A parent viewing their child sees a name-only view, not other families' data.
• Students see their own classes and schedule.

No one outside these roles sees your information, and students never see each other's personal details.

We keep personal information for as long as your account is active and you are enrolled with the institute. If your account is closed or you leave the institute, we delete or anonymize your personal information within 12 months, unless we are required to keep certain records longer by law. Message history in a thread is retained while the thread's participants have active accounts and is removed when the account is deleted.

• Passwords are stored only as secure hashes, never in plain text.
• Data is transmitted over encrypted connections (HTTPS).
• Access is restricted by role, as described above.
• Sign-in and invite attempts are rate-limited to blunt guessing and abuse.
• Messaging is moderated and structured rather than open and anonymous.

We use a small number of reputable infrastructure providers to run the platform. These providers process data on our behalf, under our instructions, only to keep E&E running. We do not sell your data, and we do not share it with advertisers or data brokers.

• Cloud hosting and a managed database store the platform and the records described above.
• Cloud file storage holds the documents your tutor uploads to a class. Files are kept in a private bucket and are reachable only through short-lived links that we issue after checking who is asking.
• An email delivery provider (Resend) sends the email we describe below. To do that, Resend receives the recipient’s email address and name and the content of the message itself, and keeps delivery records so we can tell whether an email arrived. Resend acts as our processor and may not use any of it for its own purposes.

E&E sends email for two reasons, and neither one is marketing. We do not send newsletters or promotions, and we do not pass your address to anyone for theirs.

• Messages you asked for, or that your account depends on. A link to set or reset your password, and a welcome message when your institute creates your account. We never put a password in an email; we send a link that lets you choose your own instead.
• Notices about your own classes. A new announcement, a scheduled session, or a message sent to you through the platform. These carry a short preview and a link back to E&E, never the full contents of anyone’s records.

You can turn class notices off per category under Notifications in your profile, and we stop sending them straight away, including any that were already waiting to go out. Password and account emails cannot be turned off, because they are how you get back into your own account.

Where a student has a parent linked to their account, the welcome message goes to the parent rather than the student.

You can ask us to:

• show you the personal information we hold about you (or your child),
• correct information that is wrong, or
• delete your account and personal information.

To make any of these requests, email us at hello@eduandcating.com. A parent or guardian can make these requests on behalf of their child. We aim to respond within 30 days. For security, we may need to confirm your identity before acting on a request.

As the platform grows we may update this policy. When we do, we will change the “last updated” date at the top of this page. For significant changes we will make a reasonable effort to let account holders know.

Questions about this policy, or requests about your data, can be sent to hello@eduandcating.com.