Privacy policy

How we collect, use and protect personal information about students, parents, guardians and tutors, and the choices you have.

Draft for legal review, last updated 24 September 2026. This page describes how Konetuto intends to work and will be finalised before launch.

1. Who we are

Konetuto runs an online tutoring platform at konetuto.com that connects learners and their families with verified tutors. For the personal data described here, Konetuto is the data controller.

To confirm: registered company name, registration number, address and data protection officer contact

We serve families in Nigeria and abroad. We handle personal data in line with the Nigeria Data Protection Act 2023 and, where it applies to families and tutors in the United Kingdom, the UK GDPR. Other local laws may also apply where our users live.

2. Information we collect

Account information

Your name, email address, password (stored only as a secure hash), phone number if you add one, account type and communication preferences.

Learner information

For each learner: name, school level, curriculum, subjects, learning goals, and the learning record we build with you: lessons, attendance, lesson reports, homework, assessment answers and results, and topic mastery.

Tutor information

Profile details, subjects and levels taught, availability, rates and payout details, and the evidence you provide for verification: identity documents, qualifications, references and the results of checks and interviews.

Payments

Payments are processed by our payment providers (Paystack first). We receive a payment reference, amount, status and limited card details such as the last four digits. We never see or store your full card number.

Connected services

If a tutor connects Google Meet, Google Calendar or Google Classroom, we store the access permissions needed to create meetings, events or assignments. These tokens are encrypted, and you can disconnect at any time.

Messages and support

Messages sent on Konetuto, support requests and any reports about conduct or safety.

Technical information

Device and browser type, IP address, log records and security events, and the cookies described in our cookie policy.

3. How we use information

To create and secure accounts, and to link parents and guardians to their learners.
To verify tutors before their profiles go live, and to show families what was checked.
To match learners with tutors, and to handle bookings, lessons, payments, refunds and tutor payouts.
To produce lesson reports, assessments and progress summaries for learners and their families.
To send service messages such as booking confirmations, reminders, receipts and security alerts.
To keep the platform safe: preventing fraud and misuse, investigating reports and keeping audit records.
To improve Konetuto, using aggregated or de-identified information where we can.
To meet our legal, tax and accounting obligations.

4. Our legal reasons for using data

We rely on one or more of the following, depending on the purpose:

Contract: to provide the service you signed up for, such as bookings, lessons and payments.
Legitimate interests: to keep the platform safe, prevent fraud and improve our service, balanced against your rights.
Consent: for optional things such as marketing emails or connecting a Google account. You can withdraw consent at any time.
Legal obligation: for example keeping financial records or responding to lawful requests.

5. Children’s information

Many learners on Konetuto are under 18. We collect only what’s needed to teach them and report on their progress, and we apply extra protections:

Younger learners are added and managed by a parent or guardian, who can see their learning record.
Tutors see information only about learners they are assigned to teach.
Contact details of minors are not shared with tutors, and messaging follows our safeguarding rules.
We don’t use children’s data for advertising or sell it to anyone.

To confirm: the age below which a parent or guardian must create and manage the account

7. International transfers

Some of our service providers store or process data outside your country. When that happens we use safeguards recognised by the applicable law, such as contractual protections, and we choose providers with strong security practices.

8. How long we keep information

We keep information only as long as needed for the purpose we collected it for, then delete or anonymise it. Financial records are kept for the period required by tax and accounting law. Learning records stay available to a family for as long as their account is open.

To confirm: retention periods for identity documents, learner records, lesson records and messages

9. How we protect information

Encrypted connections (HTTPS) everywhere, and encryption of sensitive items such as connected-service tokens.
Verification documents and learner files stored privately, with time-limited access links.
Access limited by role, and important administrative actions recorded in audit logs.
Regular backups and security updates.

10. Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict some uses, and withdraw consent. Parents and guardians can make these requests for learners they manage.

To make a request, contact us. We may need to confirm your identity first. You can also complain to your data protection authority: the Nigeria Data Protection Commission, or the Information Commissioner’s Office in the UK.

11. Changes to this policy

If we make important changes, we’ll tell you by email or in the app before they take effect.