Privacy Policy

• We do not sell your data. Not to advertisers, not to anybody.
• Your CNIC is seen by you and by the staff who verify it. Never by another member.
• Your phone number is not on your public profile. It is shown only to members whose plan includes contact details, and only once you are working together.
• We do not read your messages — except a specific conversation that somebody has reported, in order to act on that report.
• You can ask for a copy of your data, or ask us to delete it.

The rest of this page is the detail behind those five lines.

Things you give us.

• Name, email address, mobile and WhatsApp number, city, area and address.
• Your role — tutor, parent, school or academy — and, for parents, the children you add (first name and class level only; we do not ask for a child’s CNIC, photograph, school or date of birth).
• For tutors: subjects, levels, qualifications, experience, fee, availability, profile photograph and an introduction video.
• Verification documents: CNIC number and image, and degree or qualification certificates.
• Everything you write: job posts, applications, messages, reviews, demo feedback and reports.
• Payment details you enter: the amount, method, reference and any receipt you upload. We never see or store your card number — that goes directly to the payment gateway.

Things we record as you use the site. When you signed in, when your profile changed, when a job was posted or an application sent, that a message was sent (never what it said), which profiles were viewed, and what search filters were used. This is what lets us investigate a report, show a tutor that their profile is being seen, and count a monthly allowance honestly.

Things your browser sends. IP address, device and browser type, and the pages you visit.

• Running the platform — showing profiles and jobs, delivering messages, ranking search results.
• Verifying identities and qualifications, which is the entire basis of trust here.
• Taking payments, activating plans, and counting monthly allowances.
• Sending you emails about your account: verification decisions, being shortlisted or hired, payment receipts, and plan expiry. You can switch off the non-essential ones at Notification settings.
• Investigating reports, preventing fraud and abuse, and deciding whether to warn or suspend an account.
• Promoting TutorMint using your public profile and photograph, as described in our Terms. Tell us if you would rather we did not.
• Understanding, in aggregate, which parts of the site work and which do not.

Anyone on the internet sees a listed tutor’s public profile: name, photo, headline, biography, subjects, city and area, qualifications claimed, experience, fee, rating, reviews, and the introduction video if it has been approved for public viewing. Search engines index these pages — that is how families find tutors.

Signed-in members additionally see job posts and can exchange messages with you.

Members on a plan that includes contact details see your phone and WhatsApp number. On every other plan a number typed into a message is masked until both sides have that right.

Nobody else, ever: your CNIC number and image, your home address, your original certificate files, your payment receipts, and the contents of your messages.

TutorMint staff see what their role requires and no more. A verifier sees verification documents; a finance role sees payments; a support role sees reports. Every administrative action is recorded with who did it and when, in a log that cannot be edited or deleted.

Messages are stored so that you and the person you are talking to can read them. Beyond that:

• There is no screen anywhere in TutorMint that lets staff browse conversations. It does not exist, deliberately.
• When somebody reports a conversation, moderators can read that conversation, because a report cannot be judged without the thing being reported.
• Our internal activity records note that a message was sent and in which conversation. They never contain the text.
• Message content is never included in an email notification.

Identity documents are held in a private storage area that has no public address. There is no URL that will return your CNIC image to somebody who has not been authorised, and one cannot be created by guessing.

Degree certificates are shown to parents as a reduced-size copy with a TutorMint watermark. The original is never published.

These measures stop casual copying. They cannot stop someone photographing their own screen, and we would rather say so than imply a protection that does not exist.

• Your account and profile: while your account is open.
• CNIC images and certificates: while your account is open. When you close your account we delete the image files, and keep only the fact that verification was approved or refused, and on what date.
• Messages, jobs, applications and reviews: kept after an account closes, with the closed member’s name removed, because the other person was part of that conversation too and it is their record as much as yours.
• Payment records: kept for seven years. These are accounting records and we are required to be able to produce them.
• Reports, suspensions and moderation decisions: kept after an account closes, so that somebody suspended for harming another member cannot simply return under a new email address.
• Activity and administrative logs: two years.

We do not sell your personal data, and we never will. Advertisers on TutorMint buy a banner slot. They do not receive any information about who saw it beyond a count.

We share data with the companies that run parts of the service for us:

• Supabase — our database, authentication and file storage.
• Vercel — hosting.
• Our payment gateway and banking channels — to take payments. They handle card details; we do not.
• Resend — to deliver email.
• An SMS provider — to deliver one-time verification codes to your phone.
• YouTube — introduction videos are uploaded to our channel, privately until approved.

Each of these receives only what it needs to do its job. We also disclose information where the law requires it, or where it is necessary to protect someone from serious harm.

Our database and files are hosted with Supabase, and our site with Vercel, on servers outside Pakistan. Some of the services listed above operate internationally. By using TutorMint you accept that your information is stored and processed outside Pakistan.

• Everything travels over an encrypted connection.
• Passwords are stored hashed. Nobody at TutorMint can read yours.
• The database enforces who can read what row by row, so a fault in a page cannot expose somebody else’s data.
• Private documents live in storage with no public address at all.
• Staff access is limited by role, every administrative action is logged, and destructive actions require the password to be entered again.

No system is perfectly secure. If a breach ever affects your data, we will tell you what happened, what was involved, and what to do.

• See and correct your data — most of it is editable in your dashboard.
• Get a copy — ask us and we will send you what we hold.
• Delete your account — ask us. See section 6 for what is kept and why.
• Choose your emails — at Notification settings. Emails about verification, payments, plan expiry and moderation are always sent; they are the ones you would be worse off missing.
• Withdraw permission to use your photograph in promotion, at any time, with no effect on your account.

We use cookies to keep you signed in and to keep the site secure. That is all they are for.

We do not use advertising cookies, and we do not let third parties track you across other websites from here.

TutorMint accounts are for adults. A parent or guardian holds the account and may add a child’s first name and class level so that a tuition can describe who it is for. We do not collect a child’s CNIC, photograph, school, date of birth or contact details, and a child’s name is never shown on a public page.

To ask what we hold, to correct something, to have your data deleted, or to raise a concern: contact us. We answer these ourselves — there is no form that goes nowhere.