Privacy

tutepod is in its pilot: a small group of families using it before it opens to everyone. During the pilot it is free, and it is for learners aged 13 and over. Please add only a learner who is 13 or older. We do not ask a child's age or date of birth, so this rests with you, the parent.

• We store a parent's name, email address and password (hashed), and for each child a first name and the work they do here, and a school grade if you choose to give one. Nothing else about a child: no date of birth, no address, no school, no photograph.
• Nothing is sold or shared. There is no advertising.
• No other company's code runs on any page, so nobody else sees your visit.
• You can download everything recorded for your family, and delete all of it, at any time, yourself.

• Your name and email address, which you type when you create the account. The email address is how you sign in. When the site is sending email, we write to it for two things only: once to confirm it is yours, and, if you ask, with a link to choose a new password. While it is not sending email, nothing is sent to it at all.
• Whether and when you confirmed that address.
• Your password, as a one-way hash. The password itself is never stored and cannot be read by anyone.
• Which browsers are signed in, as a hash of a random value kept in a cookie.
• Anything you send through "Request a feature" or "Report a problem", and the reply.
• A report sent with "Report an issue", by you or your child: what you write, a picture of the page as it was (with every typed field left blank, unless you leave the picture out or send your own image instead), and what the app adds so the problem can be found again: where you were, the last screens you used in that tab, your screen and browser (no finer than its version), the app's version and its last requests, and any error the app itself raised. Never your answers, passwords, codes or cookies. A report is deleted 90 days after it is closed, and at once with the learner who sent it or with your account. It is in your download.
• Whether premium is on for your family, and until when, if you have entered an access code.
• Your "Invite a friend" code, once you open "Invite a friend": a random code in your link that says only which family sent it. If your account was made from another family's link, which family that was, so they can see how many families joined from it (a count, never who). We never ask for a friend's details and never contact them; you send the link yourself. Both are in your download, and go when the account does.

• A first name, as you type it.
• A school grade, only if you choose to give it. It is used for one thing: to tell you when a course is usually taken in later grades. You can take it away again on the Family page. We do not ask for an age or a date of birth.
• Which courses you have started for them, and when, and how you teach them in each (Teach together, Coach or Self-starter), with when you chose it.
• What you have marked "Do this next" for them, until it is done or you clear it.
• A username and a hashed password, only if you invite them to have their own sign-in.
• The time they study each day, in seconds, in each course.

For each lesson: which steps are finished; the ready check's score; how many practice questions were tried and how many were right first time, by level and by skill; a count of each kind of mistake; the date, score and time of each mastery check; the teach-back's scores, and who scored them (on your sign-in, or on your child's: a parent, someone in the family, a friend, or someone else; never a name); and the dates and results of reviews.

We also keep a history: one line for every question your child has settled. It says which question it was, the skill it is on, whether it was right on the first try, the kind of mistake if not, how many hints were shown, how long it took, and when. It is what lets the dashboard say which skills need work and why a next step is recommended.

The answers a child types are not kept, in the history or anywhere else. A mastery check holds its answers until it is marked, and is removed within a day.

• You, the parent, see everything recorded for your own family.

• Your child, on their own sign-in, sees their own lessons and progress, and nobody else's, and the reports they sent. You see every report sent from your family.

• The people who run the site each see only what their part of the work needs. Your family has a short reference, shown on your Family page, and that is how most of them know you:

  • The owners can see accounts and requests in order to run the site and to answer you.
  • Someone who answers requests sees them by your reference, without your name, your email address or any picture you sent, and with names, email addresses and phone numbers in your words hidden.
  • Someone who looks after premium and access codes sees your reference, when you joined and whether you have premium. Not your name or email address.
  • Someone who writes lessons sees the lessons, and nothing of any family.
  • Someone who studies how the site is used sees totals across families, never a family on its own: a figure that comes from fewer than five families is hidden.

  Nobody who runs the site sees passwords, which are stored only as hashes. What they do in the admin pages is recorded, by who, what and when, and kept for 180 days.

• During the pilot, the owners also see totals of each family's progress, to learn what works and what gets in the way: when the family joined, how many learners it has, how many lessons were started and passed, how many mastery checks were passed and teach-backs scored, how many days a week someone studied, and when the family was last active. These are counts and dates, shown beside the parent's email address. They never see your children's answers: the answers a child types are not kept.

• Counts that name nobody, by month: how often each way of teaching is chosen or changed, how many teach-backs are scored in each, how many accounts are made from a learner's or a friend's link, and how often "Invite a friend" is opened, shared or copied. No family, child or account is in them.

• The mail service that delivers our two kinds of message sees your email address and the message, as any email service does. The messages are plain text with no tracking.

• Nobody else. Nothing is sold, shared or used for advertising.

One cookie, pt_session, keeps you signed in. It holds a random value, cannot be read by scripts, and ends when you sign out or after 30 days without use. Your browser also remembers two choices on the device: light or dark, and which child you last worked with. There are no advertising or tracking cookies.

For each request the server notes the time, the page or action, whether it worked, how long it took and the id of the account. It does not note names, email addresses, passwords, codes or anything typed.

Your family's data is kept for as long as your account exists. A link sent by email stops working after 24 hours (to confirm an address) or one hour (to choose a new password), and is then removed. Questions that were asked and checks that were taken are removed within a day. The server makes a nightly backup of everything, kept for 14 days.

• Download: Dashboard, then "Your data", gives you one file holding every learner and everything recorded for them.
• Remove one child: Family, then "Remove learner" beside their name, removes the child, their work and their sign-in.
• Delete everything: Family, then "Delete this account", removes your account, every learner, all their work and every child's sign-in, at once. It leaves the nightly backups within 14 days.

During the pilot, tutepod is for learners aged 13 and over. A child's account can be made only by a parent, by an invite code. A child is never shown a price or asked for anything. We do not knowingly keep anything about a child beyond what is listed here.

When what is stored changes, this page changes first, and the date below changes with it.

Write to support@tutepod.com.

Last changed: 14 October 2026.