1. Who this policy covers
Tutorio is the data controller for information handled directly by the Tutorio service. “Tutorio,” “we,” and “our” in this policy refer to the operator of the Tutorio app and the services at tutorio.me and api.tutorio.me.
Other companies, such as Google and OpenAI, act under their own terms and privacy notices when they provide services described below.
2. Information we collect
Account and authentication information
- A guest account identifier created when the app first connects to Tutorio.
- Your name and email address if you register, plus email verification status.
- Session and refresh-token records used to keep you signed in and protect your account. Authentication tokens are stored securely on your device.
Profile and learning information
- Your interface, base, and learning languages; selected learning purposes and courses.
- Vocabulary lists, custom words, translations, list titles and descriptions, skipped words, and shared-list choices.
- Quiz answers, correctness, response time, word mastery, review schedule, lesson duration, streaks, daily activity, and other learning progress.
- Theme and media cache preferences stored locally on your device.
Images, shared text, and speech input
- If you choose camera, gallery, or image sharing, the selected image is uploaded to find vocabulary. Tutorio does not access other photos.
- If you share text with Tutorio, that text is processed to identify suitable vocabulary.
- If you dictate a word, your device’s speech-recognition service processes the microphone input. Tutorio receives the recognized text rather than a stored microphone recording. Your device or speech-recognition provider may process audio under its own privacy terms.
Purchases and subscriptions
Google Play processes payment details. Tutorio receives the subscription product, purchase token, order reference when provided, subscription state, renewal status, and expiry time so we can validate and provide Pro access. We do not receive your full payment-card details.
Technical information
Our servers may record IP address, request time, requested URL, response status, user agent, and security or error diagnostics. The app may also send basic request metadata needed to operate the API and prevent abuse.
3. How we use information
- Provide accounts, authentication, language courses, lessons, smart review, progress, and shared vocabulary lists.
- Personalize lesson difficulty, quiz selection, repetition intervals, recommendations, and learning statistics.
- Extract and translate vocabulary and generate word or course illustrations and pronunciation audio.
- Validate subscriptions, enforce plan limits, and provide purchased features.
- Deliver verification email, answer support or privacy requests, secure the service, prevent misuse, diagnose failures, and improve reliability.
- Show advertising to eligible free-plan users, subject to consent choices and applicable law.
Depending on your location, our legal bases include performing our agreement with you, your consent, our legitimate interests in operating and securing Tutorio, and compliance with legal obligations. You may withdraw consent where processing depends on it, without affecting earlier lawful processing.
4. AI-assisted features and OpenAI
Tutorio uses OpenAI’s API for selected features. Depending on the feature, we may send OpenAI a word or phrase, its language and learning context, a custom-list title or description, shared text, or an image you deliberately submit for vocabulary extraction. OpenAI returns translations, extracted words, pronunciation audio, or generated illustrations.
- OCR requests use
store: false. Tutorio removes the original uploaded image or shared source text from the OCR job after processing completes or is marked failed. - Extracted suggestions and job status may remain associated with your account until deletion or routine cleanup.
- Generated concept images and audio are cached and may be reused for the same language-independent vocabulary meaning. Do not place confidential or identifying information in custom list names or vocabulary content.
- OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. Under default API controls, some content may be retained in abuse-monitoring logs for up to 30 days, unless a longer period is legally required.
Learn more in OpenAI’s Privacy Policy and API data controls.
5. Advertising and Google services
Eligible free-plan users may see ads supplied through Google Mobile Ads (AdMob). Google’s SDK may automatically collect and share IP address (which may indicate general location), app interactions, diagnostic information, Android advertising ID, app-set ID, and other device or account identifiers for advertising, analytics, and fraud prevention.
Where required, Tutorio uses Google’s User Messaging Platform to request advertising choices before requesting ads. You can revisit available advertising privacy choices from the app profile. Device settings may also let you reset or delete the Android advertising ID. A Pro entitlement disables Tutorio’s ad placements, although previously collected information remains subject to applicable retention rules.
Google Play also processes app installation, subscription, purchase, and account-attribution information. Review Google’s Privacy Policy and how Google uses information from partner apps.
7. Retention and security
Account, custom vocabulary, learning progress, and subscription-entitlement records are generally kept while your account remains active so Tutorio can preserve learning history across sessions. Guest data is also stored server-side to preserve the guest session. Verification records, revoked sessions, logs, temporary jobs, and error diagnostics may be removed earlier under operational retention processes.
After a verified deletion request, we delete or de-identify associated data unless limited retention is reasonably necessary for security, fraud prevention, dispute resolution, financial or regulatory records, or another legal obligation. Residual copies in protected backups, if present, are isolated from normal use and expire through the backup rotation process.
We use HTTPS in transit, access controls, restricted production secrets, and other reasonable technical and organizational safeguards. No online service can guarantee absolute security.
8. Delete your Tutorio account and data
You can request permanent deletion even if the app is no longer installed. Send the request from the email address registered to your Tutorio account so we can verify ownership. For a guest account, contact us and we will explain the available verification steps. Never send a password, one-time email code, refresh token, or payment-card information.
A verified request covers the account and associated profile, authentication sessions, learning progress, custom vocabulary lists, OCR jobs, and other account-linked data, subject only to the limited retention reasons described above.
Important: deleting Tutorio does not automatically cancel a Google Play subscription. Cancel it separately in Google Play subscriptions to prevent future renewal.
Request account deletionEmail privacy@tutorio.me with the subject “Tutorio account deletion request.” We may ask for limited information necessary to verify the account before deletion.
9. Your choices and privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; withdraw consent; or complain to a data-protection authority. You may also update profile and language preferences in the app, decline optional camera or microphone access, avoid sharing content, and manage advertising choices when available.
Contact us to exercise a right. We may need to verify your identity, and legal exceptions may apply. We will not discriminate against you for making a privacy request.
10. Children’s privacy
Tutorio is not intended for a child to create and manage an account without the involvement of a parent or legal guardian where consent is required by local law. If you believe a child supplied personal information without appropriate authorization, contact us so we can investigate and delete it where required.
11. This website
The public Tutorio landing page and this privacy page do not embed advertising, analytics, or consent-dependent scripts. Normal web-server logs may still record the technical request information described above. Shared-list links may open the Tutorio app and expose the vocabulary list identified by the link.
12. Changes to this policy
We may update this policy as Tutorio changes or legal requirements develop. We will publish the revised policy here and change the “last updated” date. If a change materially affects your rights, we will provide additional notice where reasonably required.
13. Contact
For privacy questions, rights requests, or account deletion, email privacy@tutorio.me.
Service: Tutorio
Website: tutorio.me