Privacy policy

Who we are

Crestio Tutoring (“Crestio”, “we”, “us”) is a tutoring service run by Lenin Joaquin in Sydney, Australia. We match students with tutors, arrange lessons online and in-home, and run the scheduling, lesson notes, invoicing and payments through our own software at crestio.ai.

Questions about this policy or your information: hello@crestio.ai.

What we collect and why

We collect only what we need to match a tutor, run lessons and take payment.

• Parents and guardians: your name, email, phone number and suburb, and the content of your enquiries and messages.
• Students: first name (and surname once enrolled), year level, school, subjects, lesson notes written by the tutor, homework set and completed, and progress notes. For students who use the optional student portal: email, full name and date of birth, for age verification.
• Tutor applicants and tutors: contact details, suburb, qualifications and results, Working With Children Check details, ABN, availability, and the notes from our interview and checks.
• Payments: handled by Stripe. We see your name, email and the last four digits of a card; we never store or see full card numbers.
• Technical: the pages you visit on crestio.ai and basic device information, used only to keep the site working and secure. A one-way hash of the network address is stored with each form submission to limit spam.

How we use it

• To match a tutor to a student and arrange lessons.
• To run lessons, write and send lesson notes, set homework and track progress.
• To send invoices, take payment and keep the financial records the law requires.
• To communicate with you about lessons, changes and your account.
• To vet, onboard and pay tutors.
• To keep the service secure and to meet our legal obligations.

Lesson notes may be tidied by a writing assistant (Anthropic's Claude) before they are sent to you. The note is written by the tutor; the assistant improves the wording. We do not use your information for advertising and we do not sell it to anyone.

Who we share it with

• Your matched tutor, an independent tutor introduced by Crestio, receives the details needed to arrange and deliver lessons: student name, year level, subjects, the address for in-home lessons, and your contact details. Tutors agree to use them for lessons only.
• Supabase: authentication and database hosting. Data is stored in Sydney, Australia.
• Vercel: web hosting.
• Stripe: payment processing. Stripe sees your name, email and card details; we do not.
• Resend: sends our emails (confirmations, lesson notes, invoices).
• Anthropic (United States): the writing assistant used to tidy lesson notes. Note content is sent only when a tutor uses that feature. Under Anthropic's commercial terms, content is not used to train their models.
• NSW Office of the Children's Guardian: we verify tutors' Working With Children Check details through the official online verification service.

We do not share your information with anyone else unless the law requires it.

Children's information

Information about a child is provided by the parent or guardian and is handled with extra care. We collect only what is needed to provide tutoring, and only tutors and parents have administrative accounts.

The optional student portal lets a student see their own lessons, homework and files. Students cannot sign up by themselves. For a student under 16, the invitation goes to the parent first and the account is not created until the parent approves; parents can revoke access at any time. Students never see other students, invoices, payments, internal notes or marketing, and we send students no promotional email of any kind.

For in-home lessons with a child, we ask that a parent or guardian is home during the lesson. Every tutor holds a NSW Working With Children Check that we verify before they meet a student.

Tutor applicants and tutors

If you apply to tutor, we keep your application and our notes from the selection process. If you are not selected, we keep your application for up to 12 months in case a suitable position opens, then delete it; you can ask us to delete it sooner. If you join, we keep your records for as long as you tutor with us and for the period the law requires afterwards.

Where your information is stored

Our database is hosted by Supabase on servers in Sydney, Australia, and is encrypted at rest. Information sent to service providers travels over encrypted connections. Files uploaded to the app are stored privately in Sydney and can be seen only by the tutors in our team and the parents and students linked to them.

How long we keep it

We keep family and student records for as long as you use the service and for a reasonable period afterwards so we can pick up where we left off if you return. If you ask us to, we delete your records within 30 days. Financial records are kept for 7 years as Australian tax law requires. Enquiries that do not go ahead are deleted after 12 months.

Your choices and rights

Under the Australian Privacy Act 1988 you can:

• ask for a copy of the information we hold about you or your child;
• ask us to correct anything that is wrong;
• ask us to delete it;
• ask us to stop contacting you.

Email hello@crestio.ai and we will respond within 14 days. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner.

Cookies

crestio.ai uses only the cookies needed to keep tutors and parents signed in to the app. There are no advertising cookies and no tracking that identifies individuals.

Security

We use encrypted connections, encrypted storage and access controls so that each tutor, parent and student can see only their own information. No system is perfectly secure; if you believe you have found a problem, email hello@crestio.ai.

Changes

We may update this policy. The current version is always on this page with the date it was last updated. If a change materially affects how we use your information, we will email you before it takes effect.

Contact

Crestio Tutoring · Sydney, NSW, Australia · hello@crestio.ai.