Security

Our approach

Santi Tutor stores learners' questions, voices and study materials, so we treat security as part of the product rather than a checkbox. This page describes what we actually do today. We keep it honest and update it as the service matures.

Accounts and sign-in

• Sign-in is handled by Firebase Authentication. Passwords are hashed and stored by Firebase; we never see them.
• You can sign in with Google instead of a password.
• Every new account must verify its email address with a six-digit code before setup is complete.
• Password resets go through Firebase's reset email; we cannot read or set your password.

Data in transit and at rest

• All traffic between your browser and our servers, and between our servers and our providers, uses HTTPS/TLS.
• Lessons, uploads and account data are stored with cloud providers that encrypt data at rest by default.
• Access to production systems is limited to the small number of people who operate the service, and secrets are kept out of source control.

Payments

Checkout and subscription management are handled by Lemon Squeezy, a PCI-compliant payment provider. Card details are entered on Lemon Squeezy's pages and never pass through Santi's servers.

AI-specific controls

• Lesson content is sent to AI providers only to generate your lessons, under business terms that do not allow it to be used for training their models.
• Board drawings generated by the tutor are sanitised before they are rendered in your browser.
• Public replay links use a random identifier and can be revoked from the lesson's Share lesson dialog at any time.

Incident response

If we become aware of a breach affecting personal data, we will contain it, assess who is affected and notify affected users and any relevant regulator within the timeframes the law requires.

Reporting a vulnerability

If you find a security problem, email security@santitutor.com with enough detail to reproduce it. We will acknowledge your report, keep you informed, and will not take action against good-faith researchers who avoid accessing other people's data and give us reasonable time to fix the issue.