Privacy Policy

Last updated: June 8, 2026

This Privacy Policy explains what information Studyfin ("we", "us") collects, how we use it, and your choices. We designed Studyfin to collect the minimum personal information needed to run the service, and we never sell personal data.

Jump to:
What we collect How we use it Children's privacy Tutor screening data Who we share with Your rights Security & retention

1. Information we collect

Account info: name, email, and the role you choose (student, parent, school, tutor). We use Google, Microsoft, or Apple sign-in, so we receive basic profile details from those providers.
Learning activity: the lessons, quizzes, and practice a student completes, and the resulting progress and mastery signals.
Tutoring: bookings, session times, ratings/reviews, and (for tutors) profile, credentials, and payout setup.
Payment info: processed by Stripe. We receive confirmation and limited details (e.g. last 4 digits) but not your full card number.
Technical data: standard logs needed to operate and secure the service.

2. How we use information

We use information to provide and improve the service: generate and adapt lessons, show progress to parents/teachers, match and run tutoring sessions, process payments, provide support, keep the platform safe, and meet legal obligations. We do not use children's personal information for behavioral advertising.

3. Children's privacy (COPPA & similar)

Studyfin is designed for K–10 learners, including children under 13. We follow the principles of the U.S. Children's Online Privacy Protection Act (COPPA) and comparable laws:

We ask a learner's age with a neutral screen before they start. A learner under 13 must be added by a parent, guardian, or school, who provides consent — until then, the child can't access lessons.
A parent or guardian gives consent when they link the child on the parent dashboard (we record who consented and when). Schools may provide consent on behalf of parents for school-managed accounts.
Parents can control the curriculum for each child — blocking any subject or topic they prefer the child not see.
We collect only the information needed for the educational service and the safety of tutoring sessions.
Parents and schools can review, export, or delete a child's information and revoke consent — directly from the parent dashboard (Download data / Delete data) or by contacting us. We delete the account and associated personal data unless we must retain it by law.
We do not condition a child's participation on disclosing more information than is reasonably necessary, and we do not use children's data for behavioral advertising.
For under-13 tutoring, a parent must be present in the session (see Terms), adding a layer of parental oversight.

4. Tutor screening data

Background checks for tutors are conducted by our partner Checkr, Inc. Sensitive details required for a check (such as SSN and date of birth) are provided by the applicant directly to Checkr; Studyfin does not collect, view, or store them. We receive only the outcome of the check (e.g. "clear" or "consider"). See the background-check disclosure.

We share information only with service providers who help us run Studyfin, under contract and only as needed:

Google Cloud / Firebase — hosting, database, authentication.
Google Gemini — generating lesson and quiz content (prompts are not used to identify students).
Stripe — payments and tutor payouts.
Checkr — tutor background checks.
Daily.co — secure video for tutoring sessions.

We may also disclose information if required by law or to protect the safety of users. We do not sell personal data.

6. Your rights & choices

You can access, correct, export, or delete your information, and (for parents/schools) that of children you manage. Parents can do this themselves from the parent dashboard: Download data exports the child's profile, progress, and quiz attempts as a file, and Delete data permanently erases them. You can also use the in-app assistant or a support ticket. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honor applicable requests.

7. Security & retention

We use industry-standard safeguards (encryption in transit, access controls, and trusted infrastructure) to protect your data. We keep personal information only as long as needed to provide the service or meet legal requirements, then delete or anonymize it. No method of transmission or storage is 100% secure, but we work to protect your information and to respond promptly to any incident.

Questions about privacy? Use the in-app assistant or open a support ticket. See also our Terms of Service.