Privacy Policy

Last updated · April 2026

TuitionHub ("we", "us") explains below what personal data we collect, how we use it, and your rights over it. This policy covers the TuitionHub web application ("the Service").

1. Data we collect

About instructors (account holders):

  • Full name (display name)
  • Email address
  • Password, stored as an Argon2 hash — we never see the plaintext
  • Account type (free / paying)
  • Session metadata: IP address, browser user-agent, session timestamps — used to keep you signed in and protect against session hijacking

About your students:

  • Full name
  • Contact number (often a parent's)
  • Attendance marks you make
  • Payment records you enter

2. How we use your data

  • To run the Service — show you your batches, students, and monthly rollups.
  • To send security notifications about your account.
  • To respond to support requests you send us.

We do not sell, rent, or share your data with advertisers.

3. What we don't do

  • We don't contact your students. Reminder messages are copy-to-clipboard — you send them yourself.
  • We don't share student contact details between instructors. Each roster is private.
  • We don't process tuition fees. Payment records in TuitionHub are bookkeeping entries only; money moves between you and the student directly.

4. Where your data lives

  • TuitionHub runs on dedicated servers in Europe (Hetzner).
  • Data lives in a PostgreSQL database on the same infrastructure.
  • Application source code is on GitHub; container images are hosted in GitHub Container Registry.
  • We do not transfer data to any third-party processor for advertising or analytics.

5. Data retention

  • Active accounts: we keep your data as long as your account exists.
  • Removed students: stay in the database so historical attendance and payment records remain intact. Removed students don't appear in your active roster.
  • Account deletion: email us and we'll permanently delete your account, batches, students, and associated records within 30 days.

6. Cookies

TuitionHub uses a single HTTP-only session cookie (sid) for authentication. No advertising cookies, no third-party trackers, no analytics tracking beyond standard server-side logs (IP + request path + status code) used for debugging.

7. Your rights

Under the Personal Data Protection Act 2022 (Sri Lanka), you have rights to access, correct, and delete your personal data, and to object to certain kinds of processing. To exercise any of these rights, email us at shooquehq@gmail.com.

8. Students' data

The data you enter about your students is personal data about them, not about you. You are the data controller for that information — you collected it for your tuition class and TuitionHub stores it on your behalf. You represent that you have the right to collect and store this information, and that you will respond to students' (or their parents') requests to see, correct, or delete it.

9. Changes

Material changes will be emailed to your account at least 14 days before they take effect.

10. Contact

Privacy questions: shooquehq@gmail.com. General support: shooquehq@gmail.com. WhatsApp: +94 77 726 3326.