Privacy Notice

1. Who We Are

Mitra is an AI-powered tutoring service for middle and high school students, with expertise in supporting students with ADHD and other learning differences. Sessions are delivered via Telegram and WhatsApp.

2. Information About Children (COPPA)

Mitra is directed in part to children under 13. We collect personal information from children only with the prior verifiable consent of their parent or legal guardian, obtained through our enrollment process.

3. Information We Collect

From parents at enrollment: Name, email, phone number, student name, age, grade, school, learning profile (diagnoses, performance levels, attention patterns).

During tutoring sessions: All text messages sent to Mitra, homework photos voluntarily sent for tutoring help.

Automatically generated: Session assessments, cross-session memory notes, parent engagement data.

We do NOT collect: Payment card numbers, government IDs, precise geolocation, or biometric data.

4. Third Parties

We share student information only as necessary to deliver the service:

• Anthropic — AI model provider. Receives learning profile and conversation text to generate tutoring responses. Does not use API data for training. Privacy policy
• Twilio — WhatsApp message delivery. Receives phone numbers and message text. Privacy policy
• Telegram — Message delivery. Receives user IDs and message text. Standard chats are not end-to-end encrypted. Privacy policy
• Railway — Cloud hosting (SOC 2 Type II certified). Privacy policy

We do not sell student data. We do not share student data with advertisers or data brokers.

5. Data Retention

• Student profile and learning data: retained while enrolled, deleted within 30 days of withdrawal or deletion request
• Tutoring session content: retained while enrolled, deleted within 30 days of deletion request
• Cross-session memory notes: auto-expire after 7 days unless referenced during an active session
• Parent contact information: retained while account is active, deleted within 30 days of deletion request

6. Parental Rights

As the parent or guardian of an enrolled student, you have the right to:

• Review your child's personal information
• Correct any inaccurate information via the parent portal
• Delete your child's personal information by unenrolling through the parent portal
• Withdraw consent at any time by contacting us

7. Security

All data is encrypted in transit (HTTPS). Our infrastructure provider (Railway) is SOC 2 Type II certified with encryption at rest. Webhook endpoints validate signatures. All forms are CSRF-protected. Rate limiting is applied to public endpoints.

8. Contact Us

For questions about this privacy notice or your child's data: support@mitratutor.com

사업자 정보 (Business Information)