Privacy Policy

Last updated: September 23, 2026

Who we are and what this policy covers

WeaTeach is an online tutoring marketplace at weateach.com. Students find a tutor, book a one-to-one lesson, pay for it and sit the lesson in a video classroom; tutors keep a public profile, a calendar and a wallet. This policy explains what personal data the WeaTeach website, the teacher and student panels, the WeaTeach Android app and the WeaTeach classroom collect, why, who it is shared with, and how to get it removed. It applies to everyone who uses WeaTeach, whether as a student, a tutor or a visitor.

The data controller is WeaTeach, contactable at [email protected]. Questions about this policy are answered at that address.

1. Information We Collect

We collect only what a tutoring marketplace needs to run:

• Account information: name, email address, password (stored only as a bcrypt hash), time zone, chosen language, and for tutors the public profile you write — photo, introduction video, subjects, languages spoken, price and availability.
• Booking and lesson data: which lesson you booked with whom, when, its duration and status, your lesson credits, and the reviews and ratings you leave.
• Payment information: the amount, currency, date and status of each order, your wallet balance and, for tutors, the payout destination you enter. Card numbers never reach our servers — they are handled by the payment provider.
• Contact information: phone or WhatsApp number, and any messenger handle you choose to publish, all optional.
• Messages: chat messages exchanged with a tutor or with the WeaTeach team, including any automatic translation of them.
• Identity documents (tutors only, optional): when a tutor asks to be identity-verified, the document check is run by our verification provider; we keep only the outcome, the verified name and the date of birth, never the document images.
• Classroom audio and video: your camera and microphone streams pass through the classroom to the other person in the lesson while the lesson is running.
• App data: in the Android app, the notification token of the device, the app version, and any photo you choose to upload from the camera or gallery. The app reads no other files, contacts or location.
• Usage and device data: pages visited, features used, browser type, operating system and IP address, used for security and for understanding which pages are useful.

2. How We Use Your Information

• To run the Platform: accounts, tutor profiles, search, bookings, the classroom and the wallet
• To take payments, hold lesson credits and pay tutors out
• To send transactional email and push notifications (booking confirmations, lesson reminders, chat messages, account verification, password resets)
• To write your booked lessons into your Google Calendar, if you connect one (see section 4)
• To translate messages between a student and a tutor who do not share a language
• To send marketing email, only with your consent and with an unsubscribe link in every message
• To keep the Platform safe: fraud prevention, abuse handling and rate limiting
• To meet legal and tax obligations

We do not sell personal data, we do not use it for advertising profiles, and we do not use it to train machine-learning models.

3. Information Sharing

We do not sell your personal information. We share only what each of these needs to do its job:

• Instructors and students: the name, photo, messages and booking details needed for the lesson you booked together
• Payment processors: PayPal, Lemon Squeezy, NOWPayments and Alipay, for taking payment and issuing refunds
• Email service: Brevo (Sendinblue), for transactional and consented marketing email
• Push notifications: Google Firebase Cloud Messaging, which carries notifications to your device
• Classroom: Agora, which carries the live audio and video of a lesson
• Identity verification: our verification provider, for tutors who choose to verify their identity
• Google: only if you connect a Google account, and only as described in section 4
• Hosting and delivery: our server provider and Cloudflare, which serves the site
• Legal authorities: when required by law or to protect our rights

4. Google User Data

Teachers and students may connect a Google account to WeaTeach in two places: to sign in, and to have their booked lessons written into Google Calendar. Connecting is optional and the Platform works without it.

• Scopes we ask for: openid, email and profile (to know which Google account is connected and show its name and photo on your WeaTeach account) and https://www.googleapis.com/auth/calendar.events (to write lessons into the calendar).
• What we do with the access: we create one calendar event per booked WeaTeach lesson, move it when the lesson is rescheduled and delete it when the lesson is cancelled. We do not read, copy or store events that WeaTeach did not create, and we do not use calendar data for advertising, profiling, or to train any model.
• What we store: the Google address of the connected account, the OAuth tokens needed to keep writing, and the identifier of each event we created. Tokens are held in our database on an access-restricted server and are never shared with third parties.
• Withdrawing access: Disconnect in the teacher or student panel (or in the app's Settings) deletes the tokens and our record of the events immediately. You can also revoke access at myaccount.google.com/permissions.

WeaTeach's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Security

We implement industry-standard security measures including:

• Password hashing using bcrypt
• HTTPS encryption for all data transmission
• Secure session management
• Regular security updates

6. Cookies

We use essential cookies for session management and authentication. See our Cookie Policy for details.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for marketing communications
• Lodge a complaint with a data protection authority

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Transaction records are kept for 7 years for tax and legal compliance purposes.

9. International Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

The Platform is not intended for children under 13. We do not knowingly collect information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email.

12. Deleting Your Account and Data

You can ask us to delete your account and the personal data attached to it at any time by writing to [email protected] from the address on the account, or from the panel's Support form. We act on the request within 30 days. Records we must keep for tax or legal reasons (invoices and payout records) are retained for the periods set out in section 8; everything else — profile, messages, calendar tokens, notification tokens — is removed.

13. Contact

For privacy-related inquiries, contact us at [email protected], or at [email protected] for anything else.