Privacy Policy

The short version

We collect what is needed to run a tutoring service: who you are, what you asked, and what the tutor said and drew in response. We do not sell your data. Lesson content is sent to AI model providers only to generate your lessons, and you can ask us to export or delete your data at any time.

Who we are

Santi Open Learning ("Santi", "we") operates Santi Tutor at santitutor.com. For data-protection purposes we are the controller of the personal data described here. Our privacy contact is privacy@santitutor.com.

Where a school or tutoring centre provides Santi Tutor to its learners under a separate agreement, that institution is the controller and we act as its processor.

What we collect

• CategoryAccount data
  ExamplesName, email address, whether you signed up as a student or a parent, the name the tutor should use, your teaching region and education level
  WhyTo create and secure your account and personalise lessons
• CategorySign-in data
  ExamplesPassword (stored by Firebase Authentication, never visible to us), your Google or Apple sign-in identifier, and email verification details
  WhyTo sign you in and confirm you own the email address
• CategoryLesson content
  ExamplesLesson topics, outlines, the tutor's explanations and board drawings, your questions (typed, spoken or as an uploaded image), transcripts, quiz answers
  WhyTo deliver the lesson, save it to your history and let you replay it
• CategoryStudy materials
  ExamplesPDF files you upload to a Study Space
  WhySo the tutor can use them in lessons in that space
• CategoryUsage and credit data
  ExamplesLessons started, credits used per lesson, purchases, subscription status
  WhyTo bill accurately and show you your balance and activity
• CategoryFeedback and support
  ExamplesMessages you send through the in-app Get support, Report a bug and Leave a review forms, including the page you were on and your browser details
  WhyTo answer you and fix problems
• CategoryDevice and technical data
  ExamplesBrowser, operating system, IP address, page views, error logs
  WhySecurity, debugging and understanding how the service is used

Voice and images

When you ask a question by voice, the audio is uploaded so it can be transcribed and answered. When you attach a photo of a question, the image is uploaded so the tutor can read it. Both are stored with the lesson they belong to. Nothing is recorded unless you press the record button, and you can always type instead.

Legal bases

• Contract: creating your account, delivering lessons, taking payment and providing support.
• Legitimate interests: security, fraud prevention, fixing bugs and understanding aggregate usage.
• Consent: voice recording (you start each recording yourself) and any optional marketing email.
• Legal obligation: keeping tax and payment records.

AI processing

To answer questions and generate lessons, quizzes, illustrations and speech, we send relevant questions, conversation context, learning preferences and study materials to third-party AI services. Attached photos, recordings and transcripts may also be processed. Depending on the configured feature or model, providers include Google (Gemini and Cloud Text-to-Speech), Anthropic, DeepSeek, OpenAI, Hugging Face, OpenRouter and its selected model providers, ElevenLabs, and TTSWave. Provider processing and retention are governed by the applicable service terms; do not submit sensitive personal information or material you lack permission to share.

The mobile app asks for permission before enabling AI features. You can review or withdraw that permission in Settings on that device. Withdrawal stops new AI use there; it does not recall data already processed. Account deletion is available separately in Settings. Other devices and the website have their own sessions.

The tutor is an AI. It can make mistakes. Lesson content is generated for you on request and is not reviewed by a person before you see it.

Children and students

Santi Tutor is intended for learners aged 13 and over, including learners supported by a parent account. It is not intended for children under 13, even through a parent account. If you believe we have collected information about a child under 13, contact us so we can investigate and remove it.

Who we share with

• Service providers that run the product: Google (Firebase Authentication, Firebase Analytics and hosting), our cloud hosting and AI providers described above, and Apple App Store, Google Play or Lemon Squeezy for purchases, depending on where you subscribed. We never see your full card details.
• Anyone you share a lesson with. Creating a public replay link makes that lesson's replay visible to anyone who has the link until you revoke it.
• Your institution, if your account was provided by a school or tutoring centre under an institution agreement.
• Authorities, where the law requires it.
• We do not sell personal data and we do not share it with advertisers.

International transfers

Our providers store and process data in data centres outside Nigeria, including in the United States and the European Union. Where required we rely on the providers' standard contractual protections for those transfers.

How long we keep it

• DataAccount data
  RetentionFor as long as your account exists
• DataLessons, boards, transcripts and uploads
  RetentionUntil you delete the lesson, or until your account is deleted
• DataStudy materials
  RetentionUntil you delete the material. Removing a Study Space from your account does not by itself erase its materials; ask us if you want them purged
• DataCredit and payment records
  RetentionAs required by tax and accounting law
• DataSupport messages
  RetentionUp to 24 months after the case is closed
• DataTechnical logs
  RetentionTypically 30 to 90 days

Your rights

Depending on where you live you may have the right to access, correct, export, restrict or delete your personal data, and to object to some processing. You can delete individual lessons from Lesson History and change your name, region, level and voice preferences in Settings.

To delete your whole account, open Settings and choose Delete account. Your access ends immediately; erasure usually finishes within a few minutes but can take up to 30 days. If you cannot sign in, email privacy@santitutor.com from the address on the account and ask us to delete it; we respond within 30 days.

Security

Data travels over encrypted connections and is stored with providers that encrypt data at rest. Sign-in is handled by Firebase Authentication. Access inside Santi is limited to the people who need it to run the service and support you. The Security page has more detail.

Changes

If we make a material change to this policy we will tell you by email or in the app before it takes effect. The date at the top shows when it was last updated.