Privacy Policy

1. Information We Collect

We collect the following categories of personal information when you register, use our services or interact with our platform:

• Account information: name, email address, phone number, country of residence, account password
• Student information: student’s first name, year/grade level, school (optional), subjects of interest, learning goals
• Parent/guardian information: for students under 18, parent or guardian name and contact details
• Payment information: billing address and payment method details (processed securely by Stripe — we do not store full card numbers)
• Session content: recordings of live classes, whiteboard notes, quiz and test responses, written work submitted during sessions
• Technical information: IP address, browser type, device type, operating system, access times, pages viewed
• Communications: emails, WhatsApp messages, support tickets and other correspondence with us

2. How We Use Your Information

We use your personal information for the following purposes:

• Providing our services: matching students with tutors, scheduling and running live sessions, tracking progress, producing reports
• Account management: creating and managing your account, authenticating logins, sending invoices and receipts
• Communications: sending session reminders, tutor reports, progress updates, promotional material (which you can opt out of at any time)
• Improving our services: analysing session recordings and student performance to improve our tutoring methodology and platform
• Legal compliance: complying with applicable laws, responding to legal requests, enforcing our terms
• Safety and security: detecting fraud, preventing abuse and ensuring the safety of students and tutors on our platform

3. Legal Basis for Processing

We process your personal information based on:

• Performance of a contract — to deliver the services you have purchased
• Your consent — for marketing communications and optional features such as session recording for training purposes
• Legitimate interests — to improve our services, keep our platform secure and communicate with you about your account
• Legal obligation — to comply with tax, accounting and other legal requirements

4. Children’s Privacy

Our platform is used by students under 18 years of age. We only collect personal information about minors with the consent of a parent or legal guardian, who must create and supervise the account on behalf of the child.

We take the following additional safeguards for minors:

• Communications are primarily directed to the parent or guardian, not the student
• We do not use minors' personal information for targeted advertising
• Session recordings are accessible only to the student, parent and assigned tutor
• Parents can request deletion of their child’s information at any time by emailing hello@smavy.com

5. How We Share Your Information

We do not sell your personal information. We share it only in the following circumstances:

• With our tutors: matched tutors receive student name, year level and learning goals to prepare for sessions
• With service providers: Stripe (payments), cloud hosting providers, email delivery providers, video session platforms — all of whom are contractually bound to protect your data
• For legal reasons: if required by law, court order or government request; to enforce our Terms of Use; to protect the rights, property or safety of Smavy, our users or the public
• Business transfers: in the event of a merger, acquisition or sale of assets, your information may be transferred with appropriate notice to you

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with services. After account closure, we retain data only as required by law (for example, for tax and accounting purposes for up to 7 years) or for legitimate business reasons.

Session recordings are retained for 12 months unless you request earlier deletion or longer retention.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Access controls limiting who within Smavy can see personal data
• Regular security reviews and software updates
• Secure payment processing via PCI-DSS compliant providers
• Staff training on data protection and confidentiality

However, no system is 100% secure. If you become aware of a security issue, please contact hello@smavy.com immediately.

8. International Data Transfers

Your information may be stored and processed in India (our primary operations) and any other country where our service providers operate. Where we transfer data outside your country of residence, we ensure appropriate safeguards are in place consistent with applicable law.

9. Your Rights

Depending on your jurisdiction, you may have the following rights over your personal information:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of your personal data, subject to legal retention requirements
• Objection: object to certain uses of your data, including marketing communications
• Portability: request a copy of your data in a structured, machine-readable format
• Withdraw consent: where we process data based on consent, withdraw that consent at any time

To exercise any of these rights, email hello@smavy.com. We will respond within 30 days.

10. Cookies and Tracking

We use cookies and similar technologies to operate our platform, remember your preferences, analyse platform usage and personalise content. You can control cookies through your browser settings, though disabling them may affect some platform features.

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our platform. The “Last updated” date at the top of this page indicates when it was last revised.

13. Contact Us

For any privacy-related questions, requests or complaints, contact our Data Protection Officer:

• Email: hello@smavy.com
• Post: Smavy Private Limited, Registered Office, No.10, Samath Saibu Street, Jolarpettai, Tirupattur District, Tamil Nadu, India – 635851

If you are not satisfied with our response, you may lodge a complaint with the data protection authority in your country.