Privacy Policy

1. What we collect

• Account data — name, email, role (student or tutor), profile photo, and the profile details you add (subjects, languages, qualifications, headline).
• Verification data (tutors) — identity document images, a selfie, and the document’s name, number, and expiry, used solely for identity review and payout-name matching.
• Activity data — bookings, class enrollments, session history, messages, reviews, notifications, and wallet transactions.
• Payment data — transaction amounts and the payout destination you provide (e.g. an EcoCash number). Card and mobile-money payments are processed by our payment provider; we do not store full card numbers.
• Technical data — IP address, device/browser type, and authentication cookies needed to keep you signed in.

2. How we use it

• Run the Service: match students with tutors, schedule and host live sessions, deliver messages and notifications.
• Verify tutor identities and show the verified badge.
• Process payments, hold session funds until completion, and pay tutors out.
• Keep the platform safe: fraud prevention, abuse investigation, and an audit trail of administrative decisions.
• Communicate service messages (booking confirmations, payout updates, security notices).

3. Live video sessions

Video and audio in live rooms stream between participants and are not recorded by default. Whiteboard content and in-room chat are synced live to participants in the room. Anyone with a session link can request to join with a display name — share links only with people you want in the room.

4. What other users see

Tutor marketplace profiles (name, photo, headline, subjects, rating, rate, verified badge) are visible to signed-in users. Students are visible to tutors they book or message, and to classmates in shared classrooms. Verification documents are never visible to other users.

5. Sharing

We do not sell your data. We share it only with service providers needed to run the platform — hosting and database infrastructure, payment processing, and video relay (TURN) servers — and where the law requires. These providers process data on our instructions.

6. Retention

We keep account and transaction records while your account is active and as required for financial record-keeping afterwards. Rejected or superseded KYC submissions are kept only as long as needed for fraud prevention. You can request deletion of your account and associated personal data; some transaction records must be retained by law.

7. Security

Data is encrypted in transit, access is scoped per-user at the database level (row-level security), verification documents live in private storage accessible only to you and our review team, and administrative actions are audit-logged.

8. Your rights

You can view and edit your profile in-app, and you may request a copy or deletion of your personal data at any time by emailing us. We honour applicable data-protection rights, including those under Zimbabwe’s Data Protection Act.

9. Children

The Service is for users 13 and older. Users under 18 need parental or guardian consent. We do not knowingly collect data from children under 13; if you believe a child has created an account, contact us and we will remove it.

10. Changes & contact

We will announce material changes in-app and update the effective date above. Privacy questions or requests: support@preppdeck.com.