Clear about what we process.

The controller for this website and Tuto's own account and service operations is Stepan Orlov, operating under Tuto, Schivelbeiner Str. 49, 10439 Berlin, Germany.

For privacy questions or requests, email stepan@hey-tuto.com.

Depending on how you use Tuto, we process the following categories of data:

• Account data: email address and authentication information.
• Lesson workspace data: student names, lesson notes, transcripts, corrections, summaries, exercises, and homework progress that a teacher creates or uploads.
• Audio: a temporary lesson recording when a teacher chooses to record a session.
• Technical data: security and operational information needed to run and protect the service.
• Analytics data: only after you choose to allow Google Analytics.

We use account and lesson workspace data to provide the service requested by teachers: recording or documenting lessons, producing a transcript, preparing lesson follow-up, and making homework available. The legal basis is performance of a contract or steps taken before entering one (Art. 6(1)(b) GDPR).

We use limited technical data to keep Tuto secure, reliable, and available. This is based on our legitimate interests in operating and protecting the service (Art. 6(1)(f) GDPR). Where we must retain data to meet a legal obligation, the basis is Art. 6(1)(c) GDPR.

Google Analytics runs only after your consent. You can reject it, or change your decision at any time through Privacy settings. Consent is the basis for this processing (Art. 6(1)(a) GDPR and, where applicable, § 25 TDDDG).

Teachers decide which learner information they enter into Tuto. Teachers are responsible for ensuring they have an appropriate legal basis and provide any required information to their students.

We use carefully selected providers to operate Tuto. They receive only the data needed for their role.

• Supabase. authentication, database, and private file storage.
• Railway. hosting and running the Tuto application.
• AssemblyAI. speech-to-text processing for lesson recordings.
• OpenAI. analysis of lesson material and generation of follow-up exercises.
• Google Analytics. aggregate website analytics, only after consent. We disable Google Signals and ad-personalisation features.
• Sentry. technical error monitoring, only when enabled in the production environment. Tuto removes lesson content, request bodies, cookies, and user details before events are sent.
• Yandex Object Storage. temporary audio storage only if this optional feature is enabled for an eligible account.

Some providers may process data outside the European Economic Area. Where this happens, we use the transfer safeguards required by applicable data-protection law. You can request further information using the contact details above.

• Raw lesson recordings: Tuto deletes its stored copy immediately after the transcript has been successfully saved. If processing fails, the recording may remain temporarily for a retry or until the teacher deletes the session.
• Lesson workspace data: retained while the teacher keeps the relevant session or account, then deleted on request or when no longer needed to provide the service, subject to legal retention duties.
• Operational logs: session-processing and operational-event logs are deleted after 90 days. Detailed error fields in service-usage records are also cleared after 90 days.
• Google Analytics: user- and event-level data are retained for up to two months. We do not reset this period when a visitor returns, and do not use Google Signals or advertising-personalisation.

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction of processing, portability, or object to processing based on legitimate interests. You may withdraw analytics consent at any time without affecting processing that occurred before withdrawal.

You can also lodge a complaint with the Berlin supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, or through datenschutz-berlin.de.

We may update this policy when Tuto or the applicable legal requirements change. We will publish the current version here and update the date above.