Privacy Policy

One2One, the operator of one2one.academy, is the data controller for the personal information described here. You can reach us at info@one2one.academy.

• Account details — name, email address, time zone and preferred currency.
• Booking details — subjects, session dates and times, joining links, attendance and cancellations.
• Learning records — assignments, quizzes, grades, progress notes and session recordings.
• Messages — messages exchanged between students, parents, tutors and our admin team.
• Payment information — amount, currency, payment status and a payment reference. Card details are handled by our payment provider and never reach our servers.
• Tutor application data — contact details, experience and the documents tutors upload for vetting.
• Technical data — approximate country from your IP address (used only to show your currency), plus basic security and error logs.

• To provide tutoring you booked (contract) — creating your account, scheduling sessions, generating joining links, sending confirmations and receipts.
• To take payment and keep financial records (contract and legal obligation).
• To keep sessions safe and resolve disputes (legitimate interests and safeguarding duties) — recordings, messages and quality checks.
• To operate and improve the service (legitimate interests) — fixing faults, preventing fraud and misuse.
• To send service emails (contract) — confirmations, password resets and session reminders. These are not marketing and cannot be switched off while you hold an active booking.

Accounts are held by a parent or guardian where the student is under 18. We collect only what is needed to teach the student and keep them safe. Parents can see their child's sessions, assignments and recordings through their dashboard, and can ask us to delete a child's learning records at any time.

• Your tutor — the student's first name, subject, session times and coursework needed to teach.
• Payment provider — to process your payment securely.
• Email delivery provider — to send confirmations and account emails.
• Video meeting provider — to create the room for each session.
• Hosting and database providers — to run the site and store your records.

We do not sell your data or share it for advertising.

• Session recordings: 7 days, then removed automatically.
• Temporary sign-in details: removed from our email records once the message has been delivered.
• Account, booking and learning records: while your account is active, and for up to 2 years after your last session.
• Payment and invoice records: 6 years, as required by tax law.

You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or ask for it in a portable format. Email info@one2one.academy and we will respond within one month. If you are unhappy with our response you can complain to your local data protection authority.

Access to your records is restricted by role, so students, tutors and admins only see what they need. Data is encrypted in transit. Some of our providers process data internationally; where they do, appropriate safeguards such as standard contractual clauses are in place.

See our Cookie Policy for what we store in your browser and why.