Privacy Policy

The short version

We collect the minimum needed to run a tutoring service: who you are, what you asked, and what the tutor drew in response. We do not sell your data, we do not use your lessons to train third-party models, and you can export or delete everything from your account settings.

Who we are

Santi Open University Ltd. ("Santi", "we") operates Santi Tutor. For data-protection purposes we are the controller of the personal data described here. Our registered address is Santi Open University, Uyo, Akwa Ibom State, Nigeria, and our privacy contact is privacy@santitutor.com.

Where an institution provides Santi Tutor to its students, that institution is the controller and we act as its processor under a separate data-processing agreement.

What we collect

Card numbers never reach our servers. Payments are processed by our payment providers, who hold the card details.

Legal bases

• Contract, to provide the tutoring service you signed up for.
• Legitimate interests: security, fraud prevention, service improvement and aggregate analytics.
• Consent: optional marketing email, non-essential cookies, and voice recording where enabled.
• Legal obligation: tax, accounting and lawful requests.

AI processing

Delivering a lesson means sending your question, and the relevant part of your lesson history, to the AI models that generate the explanation and the board strokes. Some of those models are operated by sub-processors under contract.

Our contracts prohibit those sub-processors from using your content to train their models, and require deletion on our instruction. We do use aggregated, de-identified signals, such as which topics get the most repeat questions, to improve how subjects are taught.

Children and students

Santi Tutor is intended for learners aged 13 and over. Learners under 13 may use it only through a parent-managed Family profile or an institution account, where the adult holds the account and consents on the child's behalf.

We do not target advertising at children and we do not build advertising profiles from lesson content.

Who we share with

We do not sell personal data, and we do not share it with advertising networks.

• Sub-processors that run the service: cloud hosting, AI model providers, email delivery, payment processing, error monitoring and customer support tooling.
• Your institution, where your account was created by a school or tutoring centre. They can see usage and progress for their own learners.
• A parent or guardian, where you are on a Family profile they administer.
• Authorities, where we are legally required to disclose. We tell you unless we are prohibited from doing so.

International transfers

We host primarily in regions close to our learners. Where data moves across borders we rely on standard contractual clauses or an equivalent transfer mechanism. Institutions can request a specific data-residency region as part of their contract.

How long we keep it

Your rights

Most of these are self-service in the app. For anything else, email privacy@santitutor.com and we will respond within 30 days. If you are not satisfied you can complain to your local data-protection authority. In Nigeria, this is the Nigeria Data Protection Commission.

• Access: get a copy of your data, via Account → Privacy → Export data.
• Correction: fix anything inaccurate in your profile.
• Deletion: delete individual lessons, or your whole account.
• Portability: export lessons and notes in PDF or Markdown.
• Objection and restriction: object to processing based on legitimate interests.
• Withdraw consent: unsubscribe from email or turn off voice recording at any time.

Security

Data is encrypted in transit and at rest, access is role-based and logged, and we run least-privilege internally. The Security page describes our practices in more detail.

Changes

If we change this policy materially we will email account holders and post the new version here with a fresh date, at least 14 days before it takes effect.