Privacy Policy

EB Tutor is an independent AI study assistant for European School students. When this policy says "we" it refers to the operator of EB Tutor. We are the data controller for the personal data described here.

Account data: email address, name, and password (stored hashed by our authentication provider).

Profile data you choose to provide: year level (S1–S7), language section, preferred subjects, birthdate (used to check you are old enough to consent), and study calibration.

Content you send to the tutor: your questions, pasted text, uploaded photos or PDFs, and the tutor's responses.

Usage data: conversation history, saved roadmaps, weekly schedules, and progress signals used to personalise responses.

Billing data (Pro/Family/School only): subscription status, plan, and Stripe customer/subscription identifiers. Card details are handled directly by Stripe and never touch our servers.

Support and contact data: messages you send through the contact form.

To provide the tutoring service, ground answers in the EB syllabus for your year, subject, and language section, and remember your history.

To personalise study plans and weekly schedules.

To manage your account, subscription, and payments.

To respond to your support requests.

To keep the service secure, prevent abuse, and comply with legal obligations.

Performance of the contract: providing the tutor, account, and paid subscription features you signed up for.

Consent: for optional processing such as age confirmation for users under 16 and the explicit waiver of the 14-day right of withdrawal at checkout.

Legitimate interests: keeping the service safe, preventing fraud, and improving usability.

Legal obligation: keeping records required by tax and consumer-protection law.

Hosting, database, authentication, and storage: Lovable Cloud (our backend provider).

Payments and billing: Stripe.

AI processing: our AI providers process the text and images you send to generate tutor responses. We do not sell your data and we do not authorise these providers to train third-party models on your conversations.

Email delivery: our transactional email provider, for account and support messages.

Account, profile, conversation, and roadmap data are kept while your account is active. You can delete individual conversations any time from the sidebar.

When you delete your account, personal data is removed within 30 days, except records we must keep for legal, accounting, or fraud-prevention reasons (typically up to 7 years for invoices).

Contact-form messages are kept for up to 24 months so we can follow up.

Under GDPR you have the right to access, correct, delete, restrict, and port your personal data, and to object to certain processing. You may also withdraw any consent at any time.

You can exercise most of these rights directly from Settings, or by contacting us. You also have the right to lodge a complaint with your national data protection authority.

We use strictly necessary cookies and local storage to keep you signed in and remember preferences such as your interface language. We do not use advertising or cross-site tracking cookies.

Data is transmitted over HTTPS and stored with our backend provider under access controls. No system is perfectly secure; if we discover a breach affecting you, we will notify you and the relevant authority as required by law.

EB Tutor is designed for European School students. Users under 16 need a parent or guardian to confirm consent during onboarding. If you believe a child has signed up without the required consent, contact us and we will remove the account.

Our processors may store or process data in the EU/EEA or in third countries covered by appropriate safeguards such as EU Standard Contractual Clauses.

We may update this policy to reflect changes in the service or the law. Significant changes will be announced in-app or by email before they take effect.