MyITMyITTutor
CoursesLog inRegister

Privacy Policy

Version 2026-07-01 · Effective 1 July 2026

1. Who we are

MyITTutor is operated by MyIT Tutor Global Limited, a company registered in Hong Kong ("MyITTutor", "we", "us"). We are the data user responsible for your personal data, and we handle it in line with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. This policy is governed by the laws of Hong Kong.

2. What we collect

We collect the information you give us (name, email, country, and — for learners — the guardian relationship and, where provided, the learner's year/grade and date of birth), plus lesson, scheduling, payment, and support records generated as you use the service.

3. How we use it

  • To match learners with suitable tutors and run lessons.
  • To process payments and tutor/licensee payouts.
  • To keep learners safe, including reviewing messages for safeguarding.
  • To send service messages (bookings, reminders, invoices, receipts).

4. Children's data

Accounts for minors are held by a parent or guardian who consents to our processing of the learner's data. We collect the minimum needed to deliver tutoring and apply extra safeguarding controls to lesson messaging.

5. Sharing

We share data with the tutor assigned to a learner, with a licensee operator where the account was onboarded through one, and with processors (hosting, email, payments, AI services) under contract. We do not sell personal data.

6. International transfers

MyITTutor operates globally, so your data may be processed in countries other than your own, under appropriate safeguards.

7. Your rights

Subject to local law, you may request access, correction, deletion, or a copy of your data, and you can opt out of non-essential communications. If you are not satisfied with how we handle a request, you can complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong.

8. Cookies

We use strictly necessary cookies to run the site and, with your consent, analytics cookies to improve it. You can manage this from the cookie banner.

9. How we protect your data

  • Data is encrypted in transit (HTTPS/TLS). Sensitive credentials, such as Google Calendar access tokens, are also stored encrypted (AES-256-GCM).
  • Access is limited to authorised staff who need it to run the service.
  • We keep data only as long as needed to provide the service or meet legal obligations, then delete it. You can ask us to delete your account and data at any time.

10. How we use AI

We use AI models for embeddings and simple classification tasks that support the platform:

  • Embeddings turn text, such as a learning request or a tutor profile, into numbers so we can find close matches between learners and tutors.
  • Classification sorts text into categories, such as which subject a request is about, or whether a message on the platform may need a safeguarding review.
  • We also use AI to read details from a CV that a tutor chooses to upload, to help complete their profile.

All AI requests go through our own AI gateway, which we operate. We send only the information a task needs, and names are replaced with pseudonyms for safeguarding checks. The AI models we use do not use your data to train or improve their models, and we do not use your data to train AI models.

11. Google user data

Google Sign-In. If you sign in with Google, we receive your name and email address and use them only to create and sign in to your MyITTutor account.

Google Calendar (optional). If you connect a Google Calendar, we add your lessons to it and keep them up to date. For tutors, we also read the start and end times of your other events so we do not offer lesson times when you are busy. We do not store their titles, descriptions or attendees.

  • Google Calendar data is never sent to or used by any AI or machine-learning model, and is never used to develop, train or improve AI/ML models.
  • We do not sell Google user data, use it for advertising, or share it except as needed to provide these features.
  • You can disconnect at any time in Settings → Calendar. We then remove the lesson events we created, revoke our access and delete the stored credentials. You can also remove access at https://myaccount.google.com/permissions.

MyITTutor's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

12. Contact

MyIT Tutor Global Limited, Hong Kong. Privacy questions or requests: admin@myittutor.org.