Privacy Policy

We collect account information (name, email, password or sign-in code), scheduling and booking data, student progress ratings and session reports, photos you upload to sessions, and payment and subscription records. Observer accounts only provide an email address; no password is collected for observer sign-in.

We use this information to operate the Service — showing calendars, generating progress charts, calculating income, and giving observers visibility into their child's schedule. We do not sell your personal information.

If you enable the AI Assistant feature and connect your own Anthropic API key, the student session data you select is sent directly to Anthropic to generate insights. This only happens when you explicitly trigger an analysis. We also use standard infrastructure providers (hosting, email delivery, error monitoring) who process data on our behalf under confidentiality obligations.

We retain account and booking data for as long as your account is active. Deleted students are soft-deleted and retained for a period to allow recovery before permanent removal.

You may access, correct, or request deletion of your personal data by contacting us. Teachers can remove a observer link or delete a student directly from the app; observers can request removal of their account by contacting the teacher who invited them or by contacting us directly.

Student records are entered and managed by teachers, not by children directly. Observer accounts provide oversight of what is recorded about their child. We do not knowingly allow children to create their own accounts.

Passwords are stored using industry-standard hashing. Sign-in codes are single-use, time-limited, and never stored in plain text. Connected AI provider API keys are encrypted at rest.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.

Questions about this policy can be sent to privacy@timellio.com.