Privacy Policy

Learnivon (“Learnivon,” “we,” “us”) provides scheduling, classroom, and homework tools for independent tutors and their students (the “Service”). This policy covers learnivon.com and the Learnivon web application used by teachers and students. It applies to teachers, the students and family members they invite, visitors to this site, and people who join our beta waitlist.

Learnivon is operated as a sole trader based in Cyprus. For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for the personal data described in this policy. You can reach us using the contact details in Section 12.

From teachers

Teachers can sign in in one of two ways, and both are available to every teacher:

• With Google.We receive your name, email address, and profile photo from Google. If you additionally grant calendar access, we receive an access token and refresh token that let Learnivon create and remove calendar events on your behalf — see Section 3 for exactly how that’s used.
• With an email address and password. We store your name and email address, and your password only as a salted hash — never in a form we or anyone else can read back.

We also store optional profile details you choose to add, such as a phone number, contact address, timezone, and billing details shown on invoices.

From students and families

A teacher creates each student account; students sign in with an email address and password. Students do not sign in with Google, and we never request Google account access from a student. We store the student’s name, email, and optionally phone number, date of birth, and teacher notes. If a student belongs to a billed family, we store the family grouping and which contact receives invoices.

Content you create in the Service

• Homework files and attachments you upload (stored via Cloudflare R2).
• Chat messages between a teacher and a student.
• Class bookings, unavailability blocks, invoices and line items, and vocabulary/dictionary lookups saved to a class.
• Live audio/video during classroom video calls, relayed in real time through our video provider (Daily.co). We do not record or store classroom calls.

From the beta waitlist

If you join our beta waitlist from this website, we collect the name and email address you enter in the form, and the date you signed up. You don’t need a Learnivon account to join the waitlist, and waitlist contacts are kept separately from Service account data. Section 6 explains exactly what we send and how to stop it.

Automatically collected

Standard server logs (IP address, browser type, request timestamps) and a single authentication cookie used to keep you signed in. We don’t run third-party analytics or advertising trackers on this website or in the Service, and we don’t use cookies for advertising or profiling.

When a teacher connects Google, Learnivon requests access to their basic Google profile (name, email, photo) and to their Google Calendar. We use calendar access only to:

• Create an event on the teacher’s primary calendar when a class is booked.
• Remove that event if the class is cancelled or rescheduled.

Connecting Google is optional and applies to teacher accounts only. A teacher who signs in with an email address and password, and never connects Google, has no Google data stored with us at all.

Learnivon does not read, browse, or export the rest of a teacher’s calendar, does not access other calendars they own or are shared with them, and does not share Google user data with third parties or use it for advertising. Access and refresh tokens are stored encrypted at rest and used only for the actions above; a teacher can revoke access at any time from their Google Account permissions page, which immediately stops Learnivon from creating or removing events.

Learnivon’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Operate core features: scheduling, the classroom, homework, chat, and billing.
• Send transactional email about classes, homework, invoices, and payments.
• Take payment for an invoice, where a teacher has enabled online payments.
• Authenticate accounts and keep the Service secure.
• Respond to support requests.
• Diagnose bugs and understand basic usage of the Service.
• Send beta and product updates to people who joined the waitlist — see Section 6.

Under the GDPR, we rely on performance of a contract for everything needed to run the Service for an account holder, legitimate interests for keeping the Service secure and diagnosing faults, and consent for waitlist and marketing email, which you can withdraw at any time.

We don’t sell personal data. We share it only with the service providers that run Learnivon on our behalf, each bound to use it only to provide their service to us:

• Google Calendar API — calendar events, as described above.
• MongoDB — primary database, hosted by Railway.
• Cloudflare R2 — file storage for homework attachments.
• Resend — transactional and waitlist email delivery.
• Daily.co — live classroom video/audio relay.
• Stripe — card payment processing for invoices, where a teacher has enabled online payments.
• Web3Forms and Zapier — receiving beta waitlist form submissions and adding them to our Resend contact list.
• Railway — application hosting.

A student’s teacher can see that student’s bookings, homework, notes, chat messages, and billing details — that visibility is how the Service works. We may also disclose information if required by law, or to protect the rights, safety, or property of Learnivon or our users.

Transfers outside the EEA

We are based in Cyprus, and several of the providers above are based in the United States, so some personal data is transferred outside the European Economic Area. Where that happens, the transfer is covered by the provider’s Standard Contractual Clauses or an equivalent safeguard under Chapter V of the GDPR. You can ask us for details of the safeguard applying to a specific provider.

If you join the beta waitlist, you are giving us your consent to email you about Learnivon. We use that address to send a short welcome message, a small number of updates while the product is in private beta, and an invitation when a place opens up for you.

• Every one of these emails has an unsubscribe link. Unsubscribing takes effect immediately and stops all further marketing email from us.
• We do not sell, rent, or share the waitlist with anyone, and we don’t use it for advertising or pass it to advertising networks.
• The waitlist is separate from your Service account. Unsubscribing from waitlist email does not affect transactional email about your classes, homework, or invoices, which is part of running the Service and cannot be switched off while your account is active.
• Joining the waitlist does not create an account and does not give you access to the Service.

Waitlist contacts are held in Resend, our email provider. If you would rather be removed entirely instead of unsubscribed, email us and we will delete your record.

Learnivon is a tool teachers use directly with the students they already teach; students don’t self-register. A student account is created by the teacher (or, for a billed family, linked to a parent/guardian contact), so a parent or guardian is expected to be involved in that setup and in any billing correspondence for students who are minors. If you’re a parent or guardian and have questions about a student’s data, contact us using the details below or speak with the student’s teacher.

We keep account, class, homework, chat, and billing data for as long as an account is active, so a teacher’s history and a student’s records stay available. If a teacher deletes their account, we delete or anonymize associated personal data within a reasonable period, except where we need to keep records for legal, billing, or security reasons.

In-app notifications are deleted automatically 60 days after they are created. Waitlist contacts are kept until you unsubscribe or ask to be removed, or until we stop running the waitlist.

We use industry-standard safeguards — encrypted connections (TLS), encryption at rest for stored files and OAuth tokens, hashed passwords, and access controls limiting who can see a given teacher’s or student’s data. No system is perfectly secure, and we can’t guarantee absolute security.

Because we are established in the EU, the GDPR gives you the right to access your data, have it corrected or erased, restrict or object to how we use it, receive a portable copy, and withdraw consent at any time where we rely on it — including for waitlist email. Exercising any of these is free, and we will respond within one month.

A teacher can also revoke Google Calendar access at any time (see Section 3), and anyone on the waitlist can unsubscribe from any email we send (see Section 6). To exercise any other right, contact us below.

If you believe we have handled your data improperly, you can complain to the Cyprus Office of the Commissioner for Personal Data Protection, or to the supervisory authority in the EU country where you live.

We’ll update this page if how we handle data changes, and update the “last updated” date above. For material changes, we’ll notify teachers by email.

Questions about this policy, your data, or a request to exercise any of the rights in Section 10? Email info@learnivon.com.