Who is responsible
[company name and registered address to be added] runs Sudo Tutors and is the controller of your personal data. Contact for anything about your data: [contact email to be added]. This policy follows the GDPR and the Turkish KVKK.
What we collect and why
- Account: name, email address, timezone and your role. To create your account and show times correctly.
- WhatsApp number (optional for students, required for teachers): only our team sees it. We use it to message you about your bookings. You can withdraw consent on your account page, and we then delete the number.
- Lessons: who booked what and when, cancellations, attendance (from the video service), notes and homework links, your balance and weekly plans. To run the lessons and settle them fairly.
- Chat and reviews: messages between a student and a teacher, and reviews you write. Chat messages are visible to the two people involved and, if someone reports a message, to our team.
- Teachers: profile text, topics, languages, rate and weekly availability, shown publicly once approved.
- Technical data: a session cookie, and the usual server logs (address, time, page) for security and fixing errors.
We do not sell your data and we do not use advertising or analytics trackers.
Legal basis
Running your account and bookings (contract), keeping the service safe and preventing abuse (legitimate interest), WhatsApp messages (your consent) and keeping records the law requires (legal obligation).
Who we share it with
- Video lessons: Daily (daily.co) provides the video rooms. They receive the names shown in the room and the call itself.
- Hosting and backups: our server and database provider.
- The other person in a booking: a teacher sees a student's name, lessons and chat with them; a student sees the teacher's public profile. Teachers and students never see each other's phone numbers or emails.
- Payments: when payments are switched on, the payment provider will receive what it needs to take payment. This page will be updated before that happens.
- Authorities, when the law requires it.
Some providers are outside your country, including outside the EU and Turkey. We use providers that protect data to a comparable standard.
How long we keep it
Your account data while the account exists. Lesson and payment records for as long as the law requires them for accounting. When you delete your account we delete or anonymise what we are not required to keep. Server logs are kept for a short time.
Your rights
You can ask to see your data, correct it, delete it, restrict or object to its use, move it to another service, and withdraw consent at any time. You can also complain to your data protection authority (in Turkey the KVKK Board). Write to [contact email to be added] and we answer within 30 days.
Age
The service is only for people aged 18 or over. If we learn that someone younger has an account, we close it.