Privacy Policy

1. What we collect

When you use TooTii, we collect:

• Account information — name, email address, and password (stored encrypted) when you register.
• Profile data — native language, target language, current level, and learning preferences you provide.
• Lesson and booking data — lesson history, teacher interactions, milestone records, and session recordings where you have explicitly consented.
• Payment data — processed through third-party providers (Stripe, Payoneer, domestic gateways). We do not store card numbers. We retain transaction records for accounting purposes.
• Usage data — pages visited, features used, lesson completion, and spaced repetition progress. Used to improve the platform and personalise your experience.
• Technical data — IP address, browser type, device, and approximate location (country level). Used for security and regional pricing.

2. How we use your data

We use your data to:

• Provide the service — book lessons, process payments, deliver content, track progress.
• Improve the platform — understand how features are used, fix problems, develop new tools.
• Communicate with you — lesson reminders, milestone notifications, platform updates. You can unsubscribe from non-essential communications at any time.
• Comply with legal obligations — tax records, fraud prevention, and regulatory requirements.

We do not use your data for advertising, profiling for third parties, or automated decision-making that produces legal effects.

3. Storage and security

Your data is stored in a Supabase PostgreSQL database hosted on infrastructure with encryption at rest and in transit. Access is restricted to TooTii staff and authorised contractors on a need-to-know basis.

We retain your data for as long as your account is active, plus a maximum of two years after account closure for accounting and legal purposes. Session recordings are deleted after 12 months unless you have explicitly saved them.

4. Who we share data with

We share your data only with:

• Teachers — your name, level, and lesson history relevant to your booked sessions.
• Payment processors — Stripe (Western markets), Payoneer (teacher payouts), and domestic gateways (Russia, China). Each operates under their own privacy policy.
• Infrastructure providers — Supabase, Cloudflare, and cloud hosting services. All operate under GDPR-compliant data processing agreements.

We do not sell, rent, or trade your personal data. Ever.

5. Cookies

We use essential cookies to keep you logged in and maintain your session. We use analytics cookies (with your consent) to understand platform usage. We do not use advertising cookies or cross-site tracking.

You can manage cookie preferences in your browser settings at any time. Disabling essential cookies will prevent you from logging in.

6. Your rights

Depending on your location, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request that inaccurate data be corrected.
• Deletion — request that your account and associated data be deleted. We will comply within 30 days, except where we are legally required to retain records.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to specific processing activities.

To exercise any of these rights, contact us at support@tootii.com. We will respond within 14 days.

7. Contact

For any privacy questions or requests: support@tootii.com

For EU residents: TooTii processes data in accordance with GDPR. If you believe we have handled your data unlawfully, you have the right to lodge a complaint with your national data protection authority.