Privacy Policy for Tulos

Welcome to Tulos, an educational platform developed by Tutoring Point and maintained by Psylinks Security Pvt Ltd. We respect your privacy and are deeply committed to protecting your personal data.

This Privacy Policy explains exactly what data we collect, why we collect it, and how we protect it. We strictly adhere to a "no tracking, no censoring" policy. We only collect the absolute minimum data required to connect you with home tutors in Guwahati.

1. Information We Collect

A. Information You Provide to Us

When you create an account and use the Tulos app, we ask for basic information required to facilitate home tuitions:

• Contact Information: Mobile phone number (used for secure OTP login) and Email address.
• Profile Information: Full name, Student Class/Grade, and School Name.
• Media (Optional): If you choose to upload a profile picture, we request the READ_MEDIA_IMAGES permission to access only the specific image you select from your gallery.

B. Automated Security Information

To protect your account from unauthorized access and session hijacking, we collect:

• Device ID Fingerprint: A mathematically generated, anonymized string unique to your physical device. This is strictly used to bind your login session to your specific phone. We do not track your MAC address, IMEI, or hardware serial numbers.

2. How We Use Your Information

We use the collected information exclusively to provide and secure our educational services:

• To match students with appropriate local home tutors based on class and subject requirements.
• To communicate with you regarding demo classes, scheduling, and academic progress.
• To send OTPs via SMS for secure, passwordless authentication.
• To manage our "Refer & Earn" rewards program (using your phone number as a referral code).

We do NOT use your data for:

• Selling or renting to third-party marketing agencies.
• Tracking your web browsing or app usage outside of Tulos.
• Algorithmic censoring or profiling.

3. How We Protect Your Data

Your security is our top priority. Our infrastructure is hardened with enterprise-grade security protocols:

• Stateless Encryption: Your session tokens (JWTs) are mathematically bound to your specific device, meaning stolen tokens cannot be used on other devices.
• Local Storage Encryption: Sensitive data cached on your phone is encrypted using Google Tink (AEAD) before being saved.
• Secure Backend: Our backend runs on Cloudflare’s secure global network. Database queries and OTP limits are strictly rate-limited and protected against brute-force attacks.

4. Third-Party Service Providers

We may share limited data with trusted third parties solely to operate the app:

• SMS Gateway (ApiTxt): We share your phone number strictly for the purpose of delivering your One-Time Password (OTP) during login.
• Cloudflare: Used for securely routing our API traffic and hosting our serverless backend infrastructure.

5. Data Retention & Deletion

We retain your profile data only for as long as your account is active.

• Account Deletion: You have the right to request the deletion of your account and all associated personal data at any time. You can do this by contacting your dedicated account manager or our support team.
• Session Data: When you log out of the app, your active session token is immediately explicitly revoked and blacklisted on our servers.

6. Children's Privacy

While our services are designed for students, accounts must be created and managed by parents or legal guardians. We do not knowingly collect personal information directly from children under the age of 13 without verifiable parental consent.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

• Platform: Tulos by Tutoring Point
• Security & Maintenance: Psylinks Security Pvt Ltd
• Location: Guwahati, Assam, India
• Email: [email protected]