Plain-English privacy: what we keep, where it flows, and what we don’t do.

Who we are

aitutors.me is an indie UK product. We are the data controller for parent account data (your email, billing, support correspondence). For your child’s conversation data, you — the parent who holds the account — are the controller, and we act as the data processor on your behalf. We are registered with the UK Information Commissioner’s Office under registration ZC127414.

How your child’s data flows

When your child uses Mentor or Professor Pi, the conversation travels along this path:

1. Your child’s Claude app (Claude Desktop or Claude Code) sends each message to the aitutors MCP server that hosts the tutor.
2. That MCP server runs on Anthropic Managed Agents — Anthropic’s commercial infrastructure for hosting third-party tools that plug into Claude. Our pedagogy, prompts and routing live there.
3. The tutor’s reply travels back through Anthropic’s infrastructure to your child’s Claude app.
4. We store a short session record in our UK Supabase database — see “What we store about each session” below.

The important thing to know: conversation content passing through Anthropic Managed Agents is governed by Anthropic’s commercial API terms, not its consumer-product terms. Under those commercial terms, Anthropic does not use that content to train any of its models. We hold them to that, and we do not train any model on it either.

Anthropic publishes its commercial data-handling commitments at anthropic.com/legal/commercial-terms. If those terms ever change in a way that affects your child’s data, we will update this page and email account holders.

What we store about each session

To give parents transparency over what their child is studying, every tutor session writes a small row to our mcp_sessions table. That row contains:

• The time the session started and ended.
• Which tutor was used (Mentor or Professor Pi) and which topic.
• A short note the tutor writes summarising what was covered (e.g. “Worked on expanding brackets, two hints needed”).
• The session duration.

We do not store verbatim transcripts of what your child typed. The full back-and-forth lives only inside your child’s Claude app — under your child’s control there, and under Anthropic’s commercial-API retention policies for the brief moment it transits their infrastructure.

How long we keep it

Session records (the rows described above) are soft-deleted after 30 days on a rolling basis. This is the default for new accounts. From your dashboard you can choose a shorter window (delete at session end, or 7 days) or a longer one (90 days) — your choice, your data.

You can also email support@aitutors.me and ask us to wipe everything we hold about your account earlier than that. We respond within 30 days, usually within one or two.

Billing records (Stripe customer ID, last-four card digits, invoice history) are kept for as long as UK tax law requires — currently six years.

What we never do

• We do not train any model on your child’s conversations — not now, not later. Neither does Anthropic on the commercial-API path our MCP servers use. Neither does any third party.
• We do not sell or share personal data with advertisers, brokers or analytics resellers.
• We do not run non-essential cookies. Our analytics (PostHog EU) is configured cookieless, so there is no cookie banner to click through.
• We do not store payment card numbers. Stripe handles all card data; we only see the last four digits and the brand for support purposes.

How we gate access to the tutors

When you subscribe, our system mints a short-lived authentication token (a JWT) that lets your child’s Claude app reach the tutors. That token:

• Is bound to your parent account.
• Lives for 15 minutes, then refreshes automatically while your subscription is active.
• Carries a subscription_status field the tutors check on every call.
• Stops minting the moment you cancel — so access to the tutors ends within 15 minutes of your next refresh, cleanly and predictably.

Where we store data

Our database is Supabase Postgres in the London (eu-west-2) region. Data is encrypted at rest. We do not transfer your data outside the UK and EEA for our own processing. Anthropic’s Managed Agents infrastructure may process the in-flight conversation in other regions under its own terms.

Your rights under UK GDPR

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the right to access, correct, erase, port, restrict and object to our processing of your personal data. For your child’s session data you exercise these rights as the controller — we as processor will action your instructions promptly.

Email support@aitutors.me with the subject “GDPR request” and tell us what you want. We respond within 30 days; in practice it is one to two.

Children’s data

aitutors.me is a parent-account-only service. The account holder is always an adult (18+). Children use the tutors through the parent’s installed Claude app. We do not collect a separate child profile, child email or child contact details. You — the parent — remain in control of your child’s study record.

For more on how we behave when a tutor detects a safeguarding indicator, see our Safeguarding page.

Complaints and the Information Commissioner

aitutors.me is registered as a data controller with the UK Information Commissioner’s Office under registration ZC127414. If you are unhappy with how we have handled your data and a conversation with us hasn’t resolved it, you have the right to complain to the ICO at ico.org.uk/make-a-complaint.