School Portal Privacy Notice

Who we are

U Tutors LLC, doing business as U Tutors Academy ("U Tutors", "we"), 5915 Ponce de Leon Blvd, Suite 18, Coral Gables, FL 33146 · (786) 730-6332 · ututors@ututorsacademy.com, runs the school portals on our online practice platform at practice.ututorsacademy.com. We are the only operator collecting students' personal information through them. This notice covers school portals only. A family's own account on the practice platform is covered by that platform's own Privacy Notice and Children's Privacy Notice.

What we collect, and why

• From the school: each student's first and last name, or a username the school assigns; grade; class or group; the school email address or login used to sign in, if the school uses one; and the names and work email addresses of the school staff who use the portal.
• From students, as they use the portal: answers, scores, time spent on practice sets, and progress records.
• Automatically: sign-in records (date and time, IP address, and device and browser details), used to keep the portal working and secure. The portal sets only the cookies needed to sign users in, remember their settings and keep the portal secure. We do not use them to show ads, build profiles or contact students.
• Why: we use this information only to run the portal for the school, which means letting students practice, showing students and their school's staff their results, keeping the portal secure and supporting the school. Students cannot make personal information public in the portal, and no student has to give more information than the portal needs.

Who receives it

We do not sell or rent students' information, show advertising in the portal, or use students' information to market tutoring or any other product to students or families. A student's information is seen by the student, the school staff the school authorizes, and U Tutors staff who need it to support the portal. Our service providers process it only for us, under written confidentiality and security commitments: Vercel (hosting), Supabase (database and sign-in), Stripe (card payments made by families), Microsoft 365 (email) and any others listed in the school's agreement with us. Otherwise we disclose it only as the school directs in writing, or where a law, subpoena or court order requires it. We may create de-identified data that can no longer be linked to any student. We use it only to improve our educational services and to show how well the portal works, share it only with others who are developing or improving educational services and agree not to re-identify it, and never sell it. De-identified data made from information about students under 13 is used only to improve the portal and is never shared.

Children under 13

For students under 13, a parent gives consent at the platform's checkout, verified by a credit or debit card charge (a refundable consent deposit, or the school plan), after reading this notice and the platform's Children's Privacy Notice; the student's account cannot be used until then. Where a school has chosen instead to authorize the collection on parents' behalf, for the school's educational use only, as the Children's Online Privacy Protection Act allows, the school tells parents and no deposit is charged. A parent may ask the school, or us, to review the child's information, to delete it, or to stop further collection or use. We work with the school and respond within ten (10) business days.

How long we keep it

We delete a student's information within thirty (30) days after the school asks us to or tells us the student has left, and in any case within twelve (12) months after the student's last sign-in. We delete all of a school's information within sixty (60) days after its agreement with us ends. For a Florida public school, we also delete a student's information at the end of the program it was collected for, unless the school renews the program, as Fla. Stat. § 1006.1494 requires. Copies in backups are overwritten within ninety (90) days.

Security

We keep a written information security program. Students' information is encrypted in transit and at rest, and access is limited to staff who need it. If a breach affects students' information, we notify the school within ten (10) days after we determine it occurred, and we send the notices the law requires.

Parents' and students' rights, and changes

Parents and eligible students exercise their rights to inspect and correct education records through the school. When this notice changes, the version date changes, and we do not apply a material change to students under 13 until their school authorizes it. Questions: ututors@ututorsacademy.com or (786) 730-6332.