1. Introduction
BrightMinds Tutoring ("we," "our," or "us") is committed to protecting your privacy and handling your personal information openly and transparently. This Privacy & Data Policy explains how we collect, use, store, and share information when you access our tutoring platform, schedule sessions, or interact with our services.
By using our services, you agree to the practices described in this policy. We comply with applicable data protection laws, including the GDPR, CCPA, FERPA, and COPPA.
2. Information We Collect
2.1 Information You Provide
- Account & Profile Data: Name, email, phone number, date of birth, and secure login credentials.
- Academic Information: Grade level, subjects of interest, learning goals, progress reports, and assignment feedback shared during tutoring sessions.
- Payment Information: Billing address and payment details processed securely by our third-party payment providers (we do not store full card numbers).
- Communication Data: Messages, emails, or chat logs exchanged with our support team or tutors.
2.2 Information Collected Automatically
- Device identifiers, IP addresses, browser type, and operating system
- Usage analytics: pages visited, session duration, feature interactions
- Session recordings & transcripts (only with explicit consent, stored securely and accessible per your settings)
3. How We Use Your Data
We use your information strictly for the following purposes:
- Delivering personalized tutoring services and scheduling sessions
- Creating customized learning plans and tracking academic progress
- Processing payments and managing subscriptions
- Communicating important updates, security alerts, and policy changes
- Improving our platform, content, and user experience through anonymized analytics
- Complying with legal obligations and enforcing our terms of service
4. Data Sharing & Disclosure
We may share your information only in the following circumstances:
- Service Providers: Secure cloud hosting, payment processors, video conferencing tools, and analytics providers who act under strict data processing agreements.
- Educational Partners: Schools or institutions you authorize us to share progress reports with.
- Legal Requirements: When required by law, court order, or to protect the rights, safety, or property of BrightMinds and its users.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction, with continued privacy protections.
5. Security & Protection
We implement industry-standard technical and organizational measures to safeguard your data, including:
- End-to-end encryption for data in transit (TLS 1.3) and at rest (AES-256)
- Regular security audits, penetration testing, and vulnerability assessments
- Strict access controls, role-based permissions, and multi-factor authentication for staff
- Automated backups and disaster recovery protocols
While we strive to protect your information, no online service can guarantee 100% security. We encourage you to use strong passwords and never share your login credentials.
6. Your Rights & Choices
Depending on your jurisdiction, you may have the right to:
- Access, correct, or update your personal information
- Request deletion or anonymization of your data (subject to legal retention requirements)
- Export your data in a portable, machine-readable format
- Opt out of marketing communications at any time \n
- Withdraw consent for session recordings or analytics tracking
- Lodge a complaint with a relevant data protection authority
To exercise these rights, contact our Data Protection Officer using the details in Section 10. We will respond within 30 days.
7. Children's Privacy
BrightMinds Tutoring is designed for students of all ages, and we take children's privacy seriously. We comply with COPPA (US) and GDPR-K (EU) requirements:
- Users under 13 (or under 16 in the EU/UK) require verifiable parental consent before creating an account or participating in sessions.
- Parents/Guardians retain full control over minor accounts, including data access, session recordings, and communication preferences.
- We do not collect academic or behavioral data from children without appropriate parental authorization.
If you believe we have inadvertently collected information from a child without consent, please contact us immediately.
9. Policy Updates
We may update this Privacy & Data Policy to reflect changes in our practices, technology, or legal requirements. Significant changes will be communicated via email or in-platform notification at least 30 days before they take effect. Your continued use of our services after updates constitutes acceptance of the revised policy.
10. Contact Us
If you have questions about this policy, wish to exercise your data rights, or need assistance with account privacy settings, please reach out:
- Data Protection Officer: privacy@brightminds.com
- Support Email: hello@brightminds.com
- Phone: (800) 555-1234 (Mon–Sat, 8am–9pm PST)
- Mailing Address: 123 Education Lane, Suite 200, San Francisco, CA 94102
© 2025 BrightMinds Tutoring, Inc. All rights reserved.