Privacy Policy

•Account data: name, email and password (stored encrypted by our authentication provider).

•Private pilot request (public form on the home page, no account needed): your name, email, your child’s age, school (optional), whether there is a diagnosis (with the option not to say) and whether you would pay after the pilot. It is only used to decide whom to invite and to write to you; we ask for no reports or clinical details, and you can ask us to delete it via the contact email at any time.

•Student profile: display name, age, school grade and study language.

•Study material: the PDFs, photos and notes you upload, and the text extracted from them.

•Tutor interactions: messages, completed challenges, results and progress. When each session ends, a 2-3 line summary for the parent/guardian is generated (what was studied, what was hard) that never reproduces the conversation.

•Voice dictation and “Read it out loud” (only if the parent/guardian turns them on and confirms, per child): we do not receive or store audio. From dictation we keep the text the student reviewed and sent, marked as “dictated”, and the word count of each written challenge answer (never the text of that answer outside the challenge). From pronunciation practice we keep only numbers: language, words in the phrase, words understood, attempt, date and an identifier derived from the phrase (a pseudonym, not the phrase). With that data the parent/guardian sees how many answers were dictated and how many times they practiced pronunciation. See section 4 on who processes the voice.

•Images the student sends to Alaric (on by default; the parent/guardian turns it off per child from Settings): photos of a notebook, book or whiteboard attached during a study session. Before storing them we re-encode them without metadata (the photo's GPS location is removed); they go through the safety filter and, if it stops them, they are neither stored nor seen by the tutor. Those that pass are kept in private storage with the conversation, so the student and the parent/guardian see them in the history, and are deleted with it. An image may show personal details (a name on the page, a face); that is why the screen asks the student to crop them out before sending.

•Attention metrics: response times in challenges, pauses and returns to study, computed from activity to show them to the parent/guardian. Emotions or moods are never inferred from the voice, the way of speaking or the text.

•Usage and cost data: AI feature consumption (tokens, costs) for billing and spending limits.

•Technical data: error and diagnostic logs (via Sentry) and basic connection information.

•Visit statistics for the public pages (the home page, the guide, /funciones and the legal pages): we use Google Analytics to learn how many people visit them, from which country and how they got there. Google Analytics is not loaded inside the application: neither the parent/guardian panel nor the minor's study screen sends anything to Google, and no name, email or any other account information is ever sent to it.

We do NOT collect precise location data, we do not use advertising or third-party trackers inside the application (the only third-party measurement is Google Analytics on the public pages, described above), and we do NOT sell personal data.

We do NOT collect or store card numbers or other payment credentials; see the "Payment data" section below.

Underage students' accounts are created and managed by their parent or guardian, who consents to the processing of the minor's data described in this Policy.

The minor's data is used exclusively to provide the Service (personalize study, measure progress, control costs). From the parent panel, the parent/guardian sees the minor's progress, activity, materials and results, and can read the full conversation of every session with the tutor, exactly as it appeared on the minor's screen. So can any caregiver the account-holding parent/guardian has added to the account. The minor knows: the study screen tells them their family can view the conversations.

Minor safety: every message the student writes to the tutor is reviewed automatically (OpenAI moderation service). If content related to self-harm, sexual content involving minors or threats is detected, the tutor answers with a supportive message, an alert with an excerpt of the message is stored, and the parent/guardian and linked guardians are notified immediately. The student is told at that moment that their family will receive the alert. If the moderation service is unavailable at that moment, the message is not reviewed and the conversation continues; the failure is logged in our monitoring system and, while it lasts, no images are generated.

What the student types and their hero's name: the Operator does not send the student's first name or surnames to OpenAI, but cannot control what the student types. Their messages are processed as typed, including any personal details they choose to include (their name, other people's names, their school or their address), and the hero's name is the one the student chooses, even if it matches their real name. The parent/guardian can see and change the hero's name from the parent panel and read every conversation; as account holder and the person responsible for the minor, it is up to them to supervise that use and guide the minor to use a made-up name and not share personal details in the chat. If something was shared that you want removed, you can delete the history from Settings or write to the contact email.

•Provide and personalize the Service (adapt explanations, difficulty and pace).

•Generate AI study content from your material.

•Compute usage, enforce spending limits and issue billing.

•Keep the Service secure and diagnose errors.

•Automatically review student messages to detect risk situations and alert their family (see "Data of minors").

•Send transactional email (access credentials, parent reports).

We share data only with the providers needed to operate the Service, which process it on the Operator's behalf:

•Supabase — database, authentication and file storage (documents live in a private bucket accessed via signed URLs).

•Vercel — application hosting.

•OpenAI — AI processing: study material and tutor messages are sent to OpenAI to generate responses; per OpenAI's API policy, that data is not used to train their models. OpenAI does not receive the student's first name or surnames: the tutor knows them by the name they chose for their hero, and summaries for the parent/guardian are written without a name (we add it afterwards). With Alaric’s natural voice (paid plans), texts read out loud, such as Alaric's messages, challenge questions or the “Read it out loud” phrase, are sent to OpenAI to generate the audio, which we keep in private storage so it is not generated twice; the student's voice is never sent. Images the student attaches in the chat are sent to OpenAI so the tutor can see them and for the safety filter.

•Resend — transactional email delivery.

•Sentry — technical error logging.

•Google (Google Analytics) — visit statistics on the public pages only, with no account data; not loaded inside the application.

•PayPro Global — merchant of record for the paid plans; see section 5.

•Amazon Web Services — a server run by the Operator that forwards to PayPro Global the actions you request on your subscription (check, cancel, reactivate or change plan). It only receives the subscription identifier, the action and, to send you a sign-in link to your PayPro account, your email or the order number.

•Image sources (Wikimedia, Wikipedia, iNaturalist, Pixabay, Unsplash) — they only receive the search query, never personal data.

Browser maker, only if you turn voice on: when your child taps the microphone to dictate or for “Read it out loud”, speech recognition is done by the browser on their device with its maker's service (Chrome: Google; Edge: Microsoft; Safari: Apple). That company handles the audio under its own privacy policy, not ours, and does not act on the Operator's behalf; FocusTutor AI does not receive, store or have access to that audio. Only the resulting text reaches our servers, where it is handled like a typed message (sent to OpenAI to generate the tutor's reply and checked by the safety filter). If you would rather avoid it, leave dictation off. You can turn both features off at any time from Settings; what was already processed is not undone.

Other families, only when you decide: if the account-holding parent/guardian uses "Share with another family", whoever opens that link sees the sharer's first name and the title, subject and size of the chosen materials and challenges. The sharer's name is shown for the recipient's safety: they know who the material comes from before accepting it. The family that accepts it receives its own copy. They never see the minor's name, attempts, results or progress, and the sharer sees nothing of the other family. The link expires after 7 days, allows up to 5 families and can be revoked at any time.

We do not share personal data with advertisers or sell it to third parties. We may disclose data if required by law or a valid court order.

Payment for the plans is processed entirely by PayPro Global, Inc. (Toronto, Canada), acting as merchant of record and operating under the PCI DSS standard; your card details or other payment method are entered directly into its secure checkout page, hosted on its own domain.

FocusTutor never receives, processes or stores credit or debit card numbers, security codes (CVV) or any other payment credentials. That information travels exclusively between you and PayPro Global.

From PayPro Global we only receive the minimum information needed to manage your subscription: the plan status (active, suspended, cancelled, etc.), the order, subscription and customer identifiers, the billing email, the amount and currency of each charge, the billing country and, as a reference, the last four digits and brand of the card shown on receipts. We keep a log of those notifications for as long as the account exists, so we can handle claims and refunds. To complete the purchase we send PayPro Global your email and an internal identifier of your account, so it can link the payment to your family. When you cancel, reactivate or change plan from the Service, we send it your subscription identifier and the requested action.

PayPro Global's handling of your payment data is governed by its own privacy policy, available at payproglobal.com/legal.

We keep data while the account is active. You can delete your study history from Settings ("Delete all my data"; it includes dictated text and pronunciation records) and request full account deletion by writing to the contact email. Billing records may be kept for as long as applicable accounting regulations require.

We apply reasonable measures: encryption in transit, role-based access control, row-level security policies in the database and private document storage.

No system is 100% secure. If a security incident affects your personal data, we will notify you without undue delay through the available contact channels, together with the measures taken.

You may request access to, correction of, or deletion of your personal data (and your underage students' data, if you are their parent/guardian) by writing to the contact email. We will handle requests within a reasonable time.

The Operator is domiciled in the Republic of Costa Rica and processes personal data in accordance with Costa Rican Law No. 8968 on the Protection of Individuals regarding the Processing of their Personal Data and its regulations, where applicable.

If this Policy changes in a relevant way, we will communicate it within the Service or by email.

Contact: support@focustutor.ai