TutorFee Privacy Policy
TutorFee ("TutorFee", "we", "us" or "our") respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you use the TutorFee website, mobile application, web application and related services.
This Privacy Policy is intended to explain our data practices in accordance with applicable Sri Lankan law, including the Personal Data Protection Act No. 9 of 2022, as applicable to our processing activities.
1.What TutorFee Does
TutorFee is a tuition-class management software platform. The Service allows teachers and educational service providers to manage information relating to their tuition activities, including students, classes, attendance and tuition fee records. Because teachers may enter information about students and parents/guardians, TutorFee may process personal data on behalf of teachers or organisations using the Service.
2.Important Information About Your Role
Depending on the type of personal data and the purpose of processing, TutorFee may act as a controller or processor under applicable data-protection law. For example:
TutorFee as a controller
TutorFee generally acts as a controller for information relating to:
- Your TutorFee account
- Registration and account verification
- Subscription management
- Billing and payment records
- Customer support
- Security
- Website operation
- Service improvement
- Legal compliance
TutorFee as a processor
Where a teacher or organisation uses TutorFee to store and manage information about their students, parents or guardians, TutorFee may process that information on behalf of the teacher or organisation. The teacher or organisation remains responsible for determining why that information is collected and how it should be used within their educational/business activities, subject to applicable law.
3.Personal Data We May Collect
The information we collect depends on how you use TutorFee.
A. Teacher account information
This may include:
- Name
- Email address
- Telephone/mobile number
- Password-related authentication information
- Profile information
- Profile photograph where provided
- Account status
- Teacher/business information
- Registration information
B. Student information
Where a teacher enters student information, TutorFee may process:
- Student name
- Student contact information
- Parent/guardian contact information
- Class information
- Enrollment information
- Attendance information
- Tuition fee information
- Payment records
- Other information entered by the teacher
TutorFee does not require teachers to enter information that is unnecessary for the use of the Service. Teachers should avoid entering sensitive personal information unless it is genuinely necessary, legally permitted and supported by an appropriate lawful basis.
C. Account and subscription information
We may collect:
- Subscription plan
- Subscription status
- Trial information
- Subscription start and end dates
- Payment/order identifiers
- Credit balances
- Transaction information
- Purchase history
D. Payment information
Payments may be processed by third-party payment providers. Where payment information is submitted directly to a payment provider, TutorFee may receive information such as:
- Transaction ID
- Order ID
- Payment status
- Amount
- Currency
- Payment timestamp
- Other transaction-related information required to confirm the payment
TutorFee does not intentionally store complete payment-card information where payment processing is handled directly by the payment provider.
E. SMS information
Where SMS functionality is used, TutorFee may process:
- Recipient telephone number
- Message content
- Message type
- Delivery status
- Message timestamps
- SMS credit usage
- Related teacher/account information
SMS messages may be processed through third-party telecommunications or SMS service providers.
F. Device and technical information
When you use the website or mobile application, we may receive technical information such as:
- Device type
- Operating system
- Application version
- Browser type
- IP address
- Network information
- Device identifiers where technically required
- Error and diagnostic information
- Log information
G. Usage information
We may collect information about interaction with our Service, such as:
- Pages or screens accessed
- Features used
- Approximate usage times
- Error information
- Security events
- Performance information
We only use such information where necessary and appropriate for the purposes described in this Privacy Policy.
4.How We Use Personal Data
We may use personal data for the following purposes:
Providing the Service
- Create and manage accounts
- Authenticate users
- Provide dashboards
- Manage students and classes
- Store attendance records
- Store tuition fee records
- Synchronise supported mobile data
- Provide SMS functionality
- Provide subscription features
Account verification
- Verify account information
- Review teacher registration requests
- Prevent fraudulent registrations
- Approve or reject accounts where applicable
Payments
- Create payment orders
- Confirm transactions
- Manage subscriptions
- Manage SMS credits
- Maintain financial records
- Prevent payment-related fraud
Security & Support
- Protect accounts and infrastructure
- Detect suspicious activity
- Prevent fraud and investigate abuse
- Respond to support requests
- Investigate technical problems
- Resolve account issues
Legal Compliance & Service Improvement
- Comply with applicable law and respond to lawful requests
- Maintain required records and protect legal rights
- Improve performance, diagnose errors, and develop features
We do not sell your personal data.
5.Lawful Basis for Processing
Where the Sri Lankan PDPA applies, we process personal data on an appropriate lawful basis depending on the processing activity. Depending on the circumstances, this may include:
- Performance of a contract or provision of a requested service
- Compliance with a legal obligation
- Legitimate interests, where applicable and permitted
- Consent, where consent is required or relied upon
- Other lawful grounds recognised under applicable law
The applicable basis may differ depending on the type of information and processing activity.
6.Student and Children's Data
TutorFee is designed for teachers and may therefore process information relating to students who may be under 18 years of age. Teachers and organisations using TutorFee are responsible for ensuring that they have the necessary authority, lawful basis or consent, where required, to collect and provide student or parent/guardian information to TutorFee.
TutorFee does not intentionally use children's information for unrelated advertising or sell children's information. We recommend that teachers only enter information that is necessary for legitimate educational or administrative purposes.
If you believe that a child's personal data has been entered into TutorFee without appropriate authority, please contact us at: [PRIVACY EMAIL].
7.Sharing Personal Data
We may share personal data with service providers where necessary to provide TutorFee. Depending on the features you use, these providers may include:
Firebase / Google Cloud
Used for services such as authentication, cloud database infrastructure, cloud functions, storage, and application infrastructure.
PayHere
Used for payment processing where PayHere is offered as a payment method. TutorFee may receive transaction information necessary to confirm payments.
SMS Providers
Where SMS services are used, recipient information and message content may be transmitted to the applicable SMS service provider.
Infrastructure and technical providers
We may use hosting, security, monitoring, communications and other technical service providers necessary to operate TutorFee.
We require service providers to process information only as reasonably necessary for the services they provide and subject to applicable contractual and legal requirements.
8.International Data Transfers
Some third-party service providers used by TutorFee may process or store information outside Sri Lanka. Where personal data is transferred outside Sri Lanka, we will take steps required by applicable Sri Lankan data-protection law, including applicable requirements concerning lawful transfers and safeguards. The location of processing may vary depending on the service provider and infrastructure configuration.
9.Data Security
We use reasonable technical and organisational measures designed to protect personal data. Depending on the system and feature, these measures may include:
- Authentication controls
- Access controls
- Firebase security controls
- Server-side validation
- Encrypted network communication
- Secure cloud infrastructure
- Access restrictions
- Logging and monitoring
- Backup and recovery mechanisms
- Security updates
However, no system connected to the internet can be guaranteed to be completely secure. You should also protect your account credentials and mobile device.
10.Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by applicable law. Retention periods may depend on:
- The type of information
- The purpose for which it was collected
- Whether your account remains active
- Subscription and transaction requirements
- Legal obligations
- Security and fraud-prevention requirements
- Dispute resolution
When information is no longer required, it may be deleted, anonymised or securely disposed of, subject to applicable legal and operational requirements.
11.Account Deletion
You may request deletion of your TutorFee account and associated personal data by contacting: [PRIVACY EMAIL]. We may need to verify your identity before processing a deletion request.
Deletion may not immediately remove information that we are legally required to retain or information necessary for:
- Legal compliance
- Financial/accounting requirements
- Fraud prevention
- Security
- Dispute resolution
- Establishing or defending legal claims
Where complete deletion cannot legally be performed, we will retain only what is necessary and restrict its use where required.
12.Your Data Protection Rights
Subject to applicable law and any relevant conditions or exceptions, you may have rights concerning your personal data. These may include rights relating to:
- Access to personal data
- Correction of inaccurate or incomplete data
- Withdrawal of consent where processing relies on consent
- Deletion or erasure
- Restriction or objection to certain processing
- Other rights provided under applicable Sri Lankan data-protection law
Requests may be submitted to: [PRIVACY EMAIL]. We may request reasonable information to verify the identity of the person making the request.
13.Teacher-Controlled Student Data
Where TutorFee processes student information on behalf of a teacher or organisation, requests relating to that information may need to be directed to the relevant teacher or organisation first. TutorFee may assist the teacher or organisation in responding to valid data-protection requests where appropriate. If you are a student or parent/guardian and believe your information is being processed through TutorFee by a teacher, you may contact the relevant teacher or organisation regarding their use of your information. You may also contact TutorFee where you believe the issue concerns TutorFee's own processing activities.
14.Cookies
Our website may use cookies or similar technologies. Cookies may be used for purposes such as:
- Authentication
- Security
- Maintaining sessions
- Remembering preferences
- Website functionality
- Performance measurement
Where required by applicable law, we will provide appropriate choices or notices regarding non-essential cookies.
15.Local Mobile Data
The TutorFee mobile application may store certain information locally on your device to support offline functionality. This locally stored information may include information required to operate supported features, such as:
- Student records
- Class records
- Attendance records
- Payment records
- Account-related information
If another person gains access to your unlocked device, they may potentially access locally stored information. You are responsible for maintaining appropriate device security. Deleting the application may remove locally stored data from the device, but it does not necessarily delete the corresponding cloud account or server-side records.
16.Notifications
TutorFee may send service-related notifications. These may include:
- Account notifications
- Security notifications
- Subscription notifications
- Payment notifications
- System notifications
- Other notifications required to provide the Service
You may be able to control certain notification permissions through your device settings.
17.Marketing Communications
Where we send marketing communications, we will provide an appropriate mechanism to opt out where required by applicable law. Service-related communications that are necessary to operate your account may continue even if you opt out of marketing communications.
18.SMS Communications
If a teacher uses TutorFee's SMS functionality, TutorFee processes SMS information to provide that feature. The teacher is responsible for:
- Recipient accuracy
- Message content
- Having the necessary authority or lawful basis
- Complying with applicable requirements for electronic communications
TutorFee may retain message metadata and delivery information for operational, billing, security and support purposes.
19.Third-Party Websites and Services
TutorFee may contain links to third-party websites or services. Third-party services have their own privacy practices. TutorFee is not responsible for the privacy practices of third-party websites that are not controlled by TutorFee. You should review the applicable third-party privacy policies before providing information to them.
20.Payment Providers
When you make a payment, you may be redirected to or interact with a third-party payment provider. Payment processing may be subject to the provider's own privacy policy and terms. TutorFee may receive transaction information necessary to identify and confirm the payment but does not intentionally store complete payment-card information where the payment provider handles the card-processing process.
21.Security Incidents and Data Breaches
If TutorFee becomes aware of a personal-data security incident, we will assess the incident and take appropriate action in accordance with applicable law. Where notification to affected individuals or a regulatory authority is legally required, we will make the required notification within the applicable timeframe.
22.Automated Decision-Making
TutorFee does not currently intend to use personal data to make decisions with legal or similarly significant effects on individuals through solely automated decision-making. If this changes, we will update this Privacy Policy and provide any information or rights required by applicable law.
23.Data Accuracy
We rely on users to provide accurate information. Teachers should update or correct student and parent/guardian information when necessary. If you identify inaccurate information controlled by TutorFee, contact us at: [PRIVACY EMAIL].
24.Changes to This Privacy Policy
We may update this Privacy Policy when:
- Our Service changes
- Our data practices change
- Third-party providers change
- Legal requirements change
- Security or operational requirements change
The latest version will be published on the TutorFee website. The "Last Updated" date will indicate when the policy was most recently revised. Where required, we may provide additional notice of material changes.
25.Complaints
If you have concerns about how your personal data is handled, please contact us first:
Privacy Contact: [PRIVACY EMAIL] | General Support: [SUPPORT EMAIL] | Address: [BUSINESS ADDRESS], Sri Lanka
We will review privacy complaints and respond within a reasonable period. You may also have rights to raise matters with the relevant Sri Lankan data-protection authority or other competent authority where applicable.
26. Contact Us
For privacy questions, data requests or concerns regarding this policy:
Last Updated: August 14, 2026