Privacy Policy

1. Scope and controller

HiTutor determines the purposes and means of processing covered by this Policy. App stores, social-login providers, payment services, and external AI providers may also process information under their own privacy policies when acting for their own purposes.

2. Information we collect or create

Usage analytics: Google Analytics collects pages and app screens visited, referral sources, sessions, usage time and interactions, device, browser, operating system and language, browser or app-installation analytics identifiers, and approximate location derived from IP addresses. App analytics may include product, price, purchase and subscription events.

Depending on how you use the Service, we may receive or generate the following information.

• Account and authentication data, including email address, display name, login provider, and internal account identifiers. Development-stage password accounts, if available, store only a non-reversible password hash.
• Learning profile data, including native and target languages, level, interests, goals, and learning settings.
• Conversation and learning data, including date, duration, topic and status, normalized transcripts, AI feedback, corrections, review activity, learning plans, and progress estimates.
• Voice input used to produce a real-time conversation. HiTutor does not keep raw audio files in long-term server storage or use voice as biometric data to identify you.
• Device and operations data, including app version and build number, platform, a one-way security hash of an app-installation identifier, recent login IP address, limited session, error, latency and usage logs, and push registration data. Authentication and push tokens are treated as sensitive credentials.
• Subscription data, including product, store, status, term, renewal setting, and verification result. HiTutor does not directly collect your full payment-card number.
• Information you voluntarily provide in support requests.

3. Why and on what basis we process data

We use analytics to understand usage of the HiTutor website and app and improve their features and quality.

Depending on applicable law, we process data to perform our contract with you, with your consent, to meet legal obligations, and for legitimate interests such as security and service improvement.

• Create and secure accounts, provide the Service, and respond to support requests.
• Deliver real-time AI conversations, transcription, feedback, review, and personalized learning.
• Manage free and paid usage, verify subscriptions, and prevent fraud or abuse.
• Diagnose errors and improve quality, performance, accessibility, and security.
• Send requested launch notices and separately opted-in newsletters.
• Comply with law, resolve disputes, and protect rights and safety.

4. Voice conversations and AI processing

The app may establish an encrypted connection between your device and an AI processing provider for real-time voice conversation. A normalized transcript may be used temporarily to create feedback and learning results.

Temporary transcripts are deleted when feedback succeeds or a conversation is aborted. If analysis reaches a terminal failure, they are retained for recovery for up to 24 hours by default and then deleted. Selected corrections and bounded learning results may remain with your account for review and progress features. AI output may be inaccurate or inappropriate and is not used to make decisions that produce legal or similarly significant effects.

5. Launch notifications and newsletters

When you sign up on our website, we store your email address, selected site language, consent-text version and timestamps, and delivery or withdrawal timestamps. We may process a one-way hash of the request IP for abuse prevention. These records are kept separately from app user accounts.

The website now offers newsletter subscriptions. Subscribing requires your explicit consent to email collection and use and to receiving the newsletter; a subscription is not required to use the app. Launch notifications collected before release remain a separate consent history. Existing launch-notification subscribers are not automatically enrolled in the newsletter. You can withdraw newsletter consent at any time through our contact channel.

6. Sharing and service providers

We use Google Analytics, provided by Google LLC, to process usage statistics. Analytics data may be processed in the United States and other countries.

We do not sell personal data or share it for third-party targeted advertising. We may use providers bound by contractual confidentiality and data-protection duties.

• AI, voice, and transcription providers such as OpenAI.
• Cloud hosting, database, and security providers such as Amazon Web Services.
• Push and operations infrastructure such as Google/Firebase.
• Login, app-distribution, and subscription providers such as Apple and Google.
• An email-delivery provider for communications you choose to receive.
• Authorities or professional advisers when required by law or reasonably necessary to protect rights and safety.

7. International processing and transfers

HiTutor is a global service, so data may be processed outside your country of residence. Where required, we use recognized transfer mechanisms such as adequacy decisions, standard contractual clauses, or comparable contractual and technical safeguards, and provide any required notice or consent.

8. Retention and deletion

Google Analytics event data is retained for 2 months and user data for 14 months from the last activity. Reports aggregated without identifying individuals may remain longer.

We keep personal data only for as long as needed for its purpose. Account data and learning results are generally retained while your account remains open. When account deletion is completed, we delete or de-identify them unless limited retention is required by law or reasonably necessary for security.

Recent login IP addresses are encrypted and automatically erased 90 days after their latest update. Only a super administrator may explicitly reveal the original value, and each reveal is audited. We do not store the raw app-installation identifier on the server.

Launch-only data is deleted within a reasonable period after the launch-notice purpose is completed. Newsletter data remains until consent is withdrawn. Consent evidence, transaction, tax, dispute, and anti-abuse records may be kept for the period required by law or legitimate protection needs. Backup copies expire through regular rotation.

9. Security

We use reasonable technical and organizational safeguards, including encryption in transit, access controls, separation of secrets and tokens, password hashing, log minimization, administrator controls, and audit trails. No system is completely secure. If a personal-data breach occurs, we will investigate and provide notices required by applicable law.

10. Your rights and choices

Depending on your location, you may request access, a copy, correction, deletion, restriction, portability, objection, or withdrawal of consent. Data export and account deletion may be available in the app; other requests can be submitted through our contact channel.

We may reasonably verify your identity and may limit a request where a legal exception applies, explaining the reason where required. We will not discriminate against you for exercising privacy rights. You may also have the right to complain to your local data-protection authority.

11. Usage analytics, cookies and choices

The official website and app versions with Analytics automatically collect usage statistics during use. The website uses analytics cookies lasting up to 180 days; the app uses an app-installation analytics identifier.

Analytics data is not used for personalized advertising or advertising tracking across other companies’ services. We do not collect advertising identifiers or precise GPS location, or send names, email addresses, signed-in account IDs, voice, transcripts or original learning results as analytics data.

You can block or delete cookies in your browser settings and use the Google Analytics opt-out add-on in supported desktop browsers. Blocking cookies alone does not stop all analytics transmissions. Contact us to request deletion, object to processing or exercise other rights over analytics data.

12. Children’s privacy

HiTutor is not directed to children below the age at which they may independently consent to data processing in their jurisdiction, and never knowingly collects personal data from a child under 13 without valid parental or guardian consent. If we learn that this happened, we will verify the circumstances and delete the data or obtain the required consent.

13. Changes to this Policy

We may update this Policy when the Service, our processing, or the law changes. We will provide advance notice of material changes through the app, website, email, or another appropriate method and obtain new consent when required. The date above identifies the current version.