Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, enroll in a course, or contact us for support. This includes your name, email address, payment information, profile details, and communications with us.

Account Information

Name, email address, phone number, profile photo, date of birth (for age verification), and qualifications (for teachers applying to join the platform).

Payment Information

How your payment is collected depends on the payment method currently in effect platform-wide (see Terms & Conditions Section 6):

• Pay your teacher directly — payment is arranged directly between you and the teacher and confirmed manually in the platform.
• Pay through Tu2ria — you pay through our payment processor, Stripe. Your card details are entered directly with Stripe and are not sent to Tu2ria; see Section 5 for what we share with Stripe to process the charge.

Under either method, Tu2ria does not collect or store your card or payment-account numbers.

Usage Data

Information about your interactions with the platform, including courses viewed, sessions attended, features used, time spent on the platform, and device and browser information.

Coursework and Submissions

When a student submits an assignment, we collect the submission itself — including any text entered and any files uploaded (for example a document or PDF) — together with the grade, feedback, and related coursework records. Where a teacher enables AI-assisted grading, this submission content is processed by a third-party AI provider as described in Section 3.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information including confirmations and receipts
• Send technical notices, updates, and support messages
• Respond to comments, questions, and requests
• Monitor and analyze trends, usage, and activities in connection with our services
• Provide AI-assisted grading of assignment submissions when a teacher enables it (see Section 3)
• Comply with legal obligations and enforce our policies

3. AI-Assisted Grading

Some teachers on Tu2ria use an AI-assisted grading feature to help mark student assignments. This section explains what that means for the personal data contained in a submission.

Consent basis

Where your consent is a basis for this processing, that consent is obtained through your acceptance of our Terms & Conditions. For students between 13 and 18 years of age, acceptance and consent are also provided by a parent or guardian.

What we send, and to whom

When a teacher runs AI-assisted grading on an assignment, we send the relevant coursework to a reputable third-party AI provider, acting as our sub-processor. The data sent is limited to what is needed to produce a draft grade:

• the student's submission (its text and uploaded files);
• the assignment's mark scheme, rubric, and any lesson materials the teacher selects; and
• internal reference identifiers for the submission and assignment.

We do not send a student's name, email address, or account profile to the AI provider as separate fields. Note that a submission a student writes may itself contain identifying information (for example, a name written on an essay); that content is sent as part of the submission.

No identifying information is sent to the AI provider

When your work is sent for AI-assisted grading, we transmit only the content of your answers, together with the question, marking scheme, lesson materials, and grading rubric, and internal reference identifiers. We do not send your name, email address, or any other profile or account information. The AI provider therefore processes your work on a pseudonymous basis and cannot identify you from the data we send.

A note on free-text answers

Because your submitted answers are sent as written, please avoid including personal information about yourself or others within your answers — any such information you choose to write would be transmitted as part of your submission.

International transfer

Our AI provider may process this content on servers outside your country, including in the United States. Where that happens, the transfer is made under the provider's data-processing terms and applicable safeguards.

How the provider may use it

We have configured our AI provider account to opt out of allowing submitted work to be used to train or improve AI models.

Human review — no fully automated decisions

AI-assisted grading produces a draft only. A grade is never finalized by the AI: the teacher (or an authorized teaching assistant) reviews the draft and must approve, edit, or reject it before it is recorded. No grade is issued to a student by an automated process alone.

Retention

Submission content, the resulting grade and feedback, and records of the AI-assisted grading process are retained for the duration of your enrollment plus 12 months after your account is closed or becomes inactive, after which they are deleted or anonymized. If you have questions about how long grading records are retained, contact us using the details in Section 10.

4. Google Account & Google Classroom

This section describes the Google user data Tu2ria accesses, why, and how it is retained.

Signing in with Google

You can create a Tu2ria account or log in using Sign in with Google. When you do, we receive your name, email address, and profile photo from Google — the same basic account information described in Section 1 — solely to create and authenticate your Tu2ria account. We do not request any other Google data as part of sign-in.

Google Classroom integration (teachers only)

A teacher who uses Google Classroom can link one of their Tu2ria class groups to an existing Classroom course. Only the teacher connects a Google account for this feature — students never grant Tu2ria any Classroom permission. This keeps the consent surface to one account per class rather than one per student.

Once a teacher connects their Google account, Tu2ria requests three Google Classroom permissions, each for a specific, user-visible purpose:

• Manage your Classroom class rosters: when a teacher adds a student to a linked Tu2ria group, we enrol that student in the corresponding Classroom course automatically, so the teacher never has to add the same student twice.
• View the email addresses of your Classroom students: we read a student's email address off their Classroom profile to match them to the correct Tu2ria record, so a sync reports exactly who was linked and who was not (for example, “28 linked, 2 failed”) rather than an unexplained partial result.
• See, create, and update coursework and grades for Classroom classes: when a teacher publishes a Tu2ria assignment, we create the matching assignment in the linked Classroom course, and attach a link back to the student's work in Tu2ria onto their Classroom submission so the teacher can open it from either platform.

We deliberately do not request access to Google Drive, and a student's uploaded files never enter Drive — the Classroom attachment is a plain link back to Tu2ria. We also do not request permission to turn in a student's coursework on their behalf; that remains the student's own action in Classroom.

Retention and disconnecting

We store a teacher's Classroom connection for as long as it stays connected. A teacher can disconnect Google Classroom from their account at any time; doing so immediately revokes Tu2ria's access to that Google account and deletes the stored connection. Any Classroom course links the teacher previously set up become inactive rather than being deleted outright, so re-connecting does not silently re-link a course the teacher meant to stop syncing. If you need help disconnecting, contact privacy@tu2ria.com.

Google user data obtained through Sign in with Google or the Classroom integration is used only to provide the features described above. We do not use it for advertising, and we do not sell or share it with third parties except as needed to call Google's own APIs on the signed-in teacher's behalf. Our use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.

5. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information with:

• Service providers who assist in our operations (e.g., cloud hosting)
• AI service providers who process assignment submissions to provide AI-assisted grading, as described in Section 3
• Payment processor — where you make a payment through Tu2ria (see Section 1), we share your email address and payment reference identifiers (such as the course, enrollment, or invoice being paid) with Stripe, our payment processor, so Stripe can process and settle the charge and send you a payment receipt. Your card details, and any billing details Stripe's payment form asks you for, are entered directly with Stripe and are never sent to or stored by Tu2ria. Stripe may also collect device and usage information directly from your browser for security and fraud prevention; Stripe's handling of that data is described in Stripe's privacy policy at https://stripe.com/privacy.
• Law enforcement when required by applicable law or legal process
• Business partners only with your explicit consent

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is subject to a different privacy policy.

6. Cookies

Tu2ria uses cookies and similar tracking technologies to collect and use information about you. We use cookies to:

• Keep you logged in securely across sessions
• Remember your preferences and settings
• Understand how you use our platform to improve it
• Provide relevant content and recommendations

You can control cookies through your browser settings. Disabling cookies may affect some platform functionality. We do not use cookies for advertising or cross-site tracking.

Your analytics choice

The first time you visit Tu2ria, we ask whether we may use analytics cookies (Microsoft Clarity and PostHog, described below). If you decline or haven't chosen yet, neither tool loads. You can change your choice at any time via Cookie Preferences in the site footer. Site operation (staying logged in, remembering preferences) and error monitoring (described under Sentry, below) don't depend on this choice.

Analytics: Microsoft Clarity

We use Microsoft Clarity, a behavioral analytics tool, to understand how visitors use our website. Clarity collects usage data such as session recordings, heatmaps, and click/scroll interactions to help us identify usability issues and improve the platform. Clarity masks all text input and user-generated content by default, so what you type into forms is not captured. This analytics data is separate from your Tu2ria account and coursework records described elsewhere in this policy.

Analytics: PostHog

We use PostHog for product analytics, session replay, and feature flags — understanding how the platform is used so we can improve it, and rolling out new features safely. PostHog session replay masks all input fields by default. PostHog data is hosted in the EU and processed only after you accept analytics cookies.

Traffic analytics: Plausible

We use Plausible, a cookieless, privacy-first analytics tool, to measure overall site traffic (page views, referrers). Plausible does not use cookies, does not collect personal data, and cannot identify individual visitors — so it runs regardless of your cookie choice above, the same way it would if you had no cookies enabled at all.

Error monitoring: Sentry

We use Sentry to detect and diagnose technical errors on the platform (e.g. a page failing to load). Sentry only captures technical error details — not your coursework, messages, or personal data, which we scrub before an error report is sent. This runs at all times, independent of your analytics-cookie choice, on the same basis as other essential site-reliability monitoring.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Regular security audits and penetration testing
• Access controls limiting data access to authorized personnel only

However, no method of transmission over the Internet is 100% secure. We encourage you to use a strong password and to log out of your account after each session.

8. Children's Privacy

Tu2ria is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will take steps to delete it promptly.

Users between 13 and 18 must have parental consent before using Tu2ria. Parents can create a parent account to manage their child's account and monitor their learning activity.

Where a teacher uses AI-assisted grading (see Section 3), a minor's submitted work may be processed by our AI sub-processor to generate a draft grade. A parent or guardian may contact us at privacy@tu2ria.com to ask that their child's work be graded without the AI-assisted feature; a teacher can grade such work manually.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (“right to be forgotten”)
• Restriction: Request that we restrict processing of your data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data for certain purposes

To exercise any of these rights, contact our Data Protection Officer at privacy@tu2ria.com. We will respond to your request within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of any significant changes by posting the new policy on this page and updating the ‘Last updated’ date. For material changes, we will also send a notification to the email address associated with your account.

Your continued use of Tu2ria after changes to this policy constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related inquiries or to exercise your data rights, contact our Data Protection Officer:

• Email: privacy@tu2ria.com
• Address: Tu2ria LLC, E Lincolnway, Cheyenne, WY 82001, USA

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.