Privacy Policy

Information you enter

You may enter student names, contact details, schools, grades, subjects, lesson packages, class records, schedules, bills, learning results, homework, reviews, signatures, notes, and attachments. These records support your tutoring work. The Android app does not require a separate Tutor Planner account and does not request contacts, precise location, microphone, or camera access for its core features.

Storage and deletion

Tutoring records and imported attachments are stored locally on your Android device. You can delete records and their associated attachments in the app. Uninstalling the app removes its private local storage; copies you exported or shared remain under your control or that of their recipients.

Optional Google Drive synchronization

Where available, Google Drive synchronization is off until you connect a Google account and authorize it in Settings > Data & Sync. It sends the tutoring records described above, shared teaching preferences, attachments, change history, deletion markers, and device model/version labels to this application's private app-data folder in your Google account. These files use your Google storage. Devices connected to the same account can receive the changes; this does not connect to iCloud or share data with the iOS CloudKit database.

The app requests access to its own Drive app-data folder, plus your Google account identifier and verified email address to identify the selected account and prevent accidental account mixing. It does not request access to your other Drive files. Short-lived Google access tokens are used for authorized requests; the app does not embed a Google client secret or store a long-lived refresh token. Google processes account, API request and stored data under its privacy policy. Connections use HTTPS; hiding the app-data folder is not end-to-end encryption.

Information obtained through Google APIs is used only to provide and protect the synchronization you request. We do not use it for advertising, sell it, or send it to product analytics or subscription providers. Tutor Planner's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting stops automatic synchronization without deleting local records or cloud history. Deletion markers remove records from the current synchronized view, while earlier immutable versions and attachment chunks remain in the app-data folder for conflict protection and recovery. Uninstalling the Android app does not erase that cloud history. To delete the app's cloud history, use Google Drive's Settings > Manage apps > Tutor Planner > Delete hidden app data. Google controls the availability and wording of these settings. A missing cloud history pauses synchronization to protect local data; retained local data is not automatically treated as a replacement empty cloud account. Keep local devices and any exported copies under your control.

Calendar, reminders, and widgets

Calendar access is optional. When you enable calendar mirroring, the app reads available calendars and creates or updates its lesson events in the calendar you select. Your calendar provider may synchronize those events under its own policies. Notifications and alarm access support lesson reminders and current-lesson notifications. Home-screen widgets use locally stored course information; student-name display is optional.

Files and sharing

Images and PDF attachments are selected through the Android system file picker. Backups and exports are generated locally. You choose whether to save or share them and which destination receives them. External file providers, calendar providers, and recipients handle the information under their own policies. Deleting a local record does not delete previously exported copies.

Google Play subscriptions and RevenueCat

Where subscriptions are available, Google Play processes payments and RevenueCat manages products, purchase history, subscription status, purchase-related identifiers, and an anonymous app user identifier to validate Pro access. Purchase-related data is transmitted using encryption. Tutor Planner does not send student records, lesson content, attachments, or tutoring financial records to RevenueCat. Builds with subscriptions disabled do not initialize the RevenueCat purchase service. You can contact support@tutorplanner.app to request assistance with purchase-related data deletion; cancellation of a subscription is managed separately through Google Play.

Complimentary access codes

If you enter an access code supplied by Tutor Planner, the app sends that code and its anonymous RevenueCat app user identifier to our access service hosted by Cloudflare. The service verifies the code and asks RevenueCat to grant complimentary Pro access. It does not receive student records or Google Drive account data, and it does not initiate a payment or an auto-renewing subscription. We do not store access codes in the app or log codes and app user identifiers in the access service. Cloudflare processes network requests under its policies; RevenueCat retains the entitlement grant under its policies. Reinstalling the app may require entering the code again.

Optional product analytics

Where Product Improvement is available, it is off by default and requires your explicit consent. You can disable it in Settings > Support & About > Product Improvement. When enabled, TelemetryDeck receives a hashed installation-scoped identifier, fixed product interaction events, restricted categorical parameters, app version and build, OS version, device model, and app locale. Student names, contact information, lesson content, attachments, financial amounts, shared content, receipts, and business-record identifiers are excluded. Disabling it stops future signals and discards the pending local queue; it does not retroactively erase signals already sent. Builds with analytics disabled send no product analytics.

Website and support

Cloudflare hosts these pages and may process standard request information, including IP addresses and browser information, to deliver and secure them. These pages contain no analytics script or advertising tracker. If you email support, we receive your address and the information you choose to include to handle your request. Please avoid sending identifiable student information. Contact us to request deletion of support correspondence; information may be retained where needed to resolve a dispute or satisfy applicable obligations.

Children and your responsibilities

Tutor Planner is intended for tutors and adult users, not children. Enter student information only with appropriate authority and only as necessary for your work. We do not sell tutoring records or use them for advertising.

Security and retention

Keep your device, Google account and exported backups secure. Local records remain until you remove them or uninstall the app. If you enable Google Drive synchronization, the history described above remains until you clear the app's hidden Drive data. Third-party purchase and analytics data is retained under the respective providers’ policies and applicable obligations. No electronic storage or transmission can be guaranteed completely secure.

Changes and contact

We may update this policy as the Android app changes. The effective date identifies the published revision. For privacy questions or data requests, email support@tutorplanner.app.