Privacy Policy

Last Updated: August 2026

STH Academic ("we," "us," or "our") is committed to protecting the privacy of our users, particularly as our services involve minors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online tutoring Platform. This policy is designed to comply with applicable Canadian privacy laws, including PIPEDA (Personal Information Protection and Electronic Documents Act).

1. Information We Collect

We collect information necessary to provide educational services and facilitate billing:

  • Parent/Guardian Information: Name, email address, phone number, and account credentials.
  • Student Information: Name, grade level, enrolled subjects, attendance records, academic performance (marks and teacher remarks).
  • Payment Information: We collect uploaded payment transcripts/receipts to verify manual payments. We do not process or store credit card numbers directly on our Platform.
  • Platform Usage Data: Timestamps of login, assignment submission, and session attendance.

2. How We Use Your Information

  • To create and manage Parent/Student and Teacher accounts.
  • To schedule and facilitate 1-on-1 tutoring sessions via Google Meet/Zoom.
  • To process manual billing cycles and verify bank transfers.
  • To track and report academic progress (grades, remarks, attendance) to parents.
  • To send administrative notifications (e.g., class reminders, payment approvals, new assignments).

3. Data Retention and Auto-Deletion

We employ strict data minimization practices regarding student coursework:

  • Submitted Assignments: Raw files of submitted assignments are automatically deleted from our servers 24 hours after the teacher's first view/download.
  • Unsubmitted Assignments: Unsubmitted assignment files are automatically deleted upon reaching their due date.
  • Academic Records: While raw assignment files are deleted, the resulting marks and teacher remarks are retained permanently in the student's historical reports.
  • Account Deletion: If you wish to close your account and delete your personal data, please contact our Administration.

4. Third-Party Services

  • Video Conferencing: Live sessions are conducted via Google Meet or Zoom. We do not record these sessions on our servers.
  • Backend Infrastructure: We use Supabase to securely host our database, storage buckets, and manage user authentication (including Google OAuth).

5. Security Measures

  • Data Sanitization: All user inputs are strictly sanitized and validated on our servers to prevent unauthorized scripts or malicious data injections.
  • Row-Level Security (RLS): Our database enforces strict access controls. Parents can only access data belonging to their children; teachers can only access data for students assigned to them.
  • Authentication: Access to the authenticated portal is secured via encrypted passwords or secure OAuth providers.

6. Children's Privacy

Our Platform provides tutoring for students from Montessori to Grade 12. However, accounts must be created and managed by a parent or legal guardian. We do not knowingly collect personal information directly from children under the age of 13 without verifiable parental consent.