CubTutor

Privacy Policy

Last updated: August 23, 2026

CubTutor LLC ("CubTutor", "we") operates cubtutor.com, the CubTutor tutor platform, and the CubTutor mobile app. This policy explains what information we collect, why, and the choices you have. The short version: we collect the minimum needed to run the service, we don't show ads, and we never sell personal information.

What we collect

Children's privacy (COPPA)

CubTutor is used by children under 13, so we take this seriously: children's accounts are created and controlled by a parent or guardian — a child never signs up on their own. We collect only the minimal information listed above, use it solely to provide the learning service and show progress to that child's parent and connected tutor, and never use children's data for advertising or sell it to anyone.

A parent can review their child's information, remove a child, or delete a child's photo from the app at any time. Removing a child hides them and stops us managing their phone; we keep their record so you can restore them later, and you can ask us to erase it instead at any point — see Retention & deletion below. To delete an entire account and everything in it, email support@cubtutor.com — or use Delete My Account in the app, once the current update reaches the App Store. We act on any such request within 30 days.

How we use information

Who we share it with

The tutor a parent connects. This is the point of CubTutor: when a parent links their child to a tutor, that tutor sees the child's first name, grade and practice results so they can teach from them. Nothing is shared with any tutor until a parent connects one, and a parent can disconnect at any time from the app.

Service providers that make CubTutor work: DigitalOcean (hosting), Postmark (transactional email), and — when payments launch — Stripe (payments and tutor payouts). Each receives only what it needs, and each is bound to protect it. We never sell personal information, and we don't share it with advertisers beyond the advertising measurement described under Technical above.

Retention & deletion

There is one thing here we want to be completely plain about, because it differs from what many apps do.

Removing a child does not erase their record. When you remove a child from your account they disappear from the app straight away, and their phone stops being managed by us — but we keep their profile and their practice history. We keep it for one reason: so that if you remove a child by accident, or they take a break and come back, their progress, streaks and badges are still there instead of starting from nothing. We do not put a time limit on that, because we cannot know when you might want them back.

You can have it erased whenever you want. That is not a special request or a hard process. Email support@cubtutor.com and ask us to erase a particular child, or use Delete My Account in the app to erase everything at once. Either way we act within 30 days, and erasure means erasure — the records are gone, not hidden.

How long we keep each kind of information:

A removed child's information is never used for anything except being able to restore them for you. It is not used to advertise to anyone, it is not sold, and it is not shared with anyone it was not already shared with while the child was active.

Analytics on this website

On cubtutor.com (this marketing site only — never inside the tutor platform or anything children use) we use Hotjar/Contentsquare to understand how visitors use the page (aggregated heatmaps and anonymized session insights; typed input is masked), plus our own cookie-free counters of anonymous events like “demo played”. We do not sell or share visitor data, and we the only advertising tool we use is the Meta Pixel described under Technical above.

Security

We maintain a written information security program covering the personal information we hold, reviewed at least annually. CubTutor LLC's owner is the person responsible for it. In practice: all traffic is encrypted (HTTPS), passwords are stored only as salted hashes, session tokens are stored hashed, credentials live only on the production server and never in our source code, and access to production systems is limited to the people who need it. Before we share personal information with a service provider we satisfy ourselves that they are capable of protecting it. No system is perfect; if a breach affects your data we will notify you promptly.

Changes & contact

If this policy changes materially we'll note it here and, for significant changes affecting children's data, notify parents by email. Questions, or to exercise any right described here: support@cubtutor.com.