Privacy and safety

Privacy notice.

How KindTutor uses data and protects pupils and school-managed devices. Version 1.0 — 29 July 2026.

Controller and service roles

KindTutor is operated by 8CELLS Jarosław Kaczmarski, ul. Ketlinga 33A, 96-313 Jaktorów, Poland, tax ID 7962621938, REGON 366811404. Contact: hi@kindtutor.app. For school learning, the school determines the purposes and rules for pupil data and 8CELLS processes it under the school agreement.

Data used by the station

A pupil does not create an account. The managed station may process a random lesson identifier, school learning settings, text entered during the current lesson, optional microphone audio, an optional task photo or scan, non-content usage counters, redacted diagnostics and a managed-device identifier. KindTutor does not display ads, use an advertising identifier or sell personal data.

Lost or stolen tablets

The KindTutor app does not request Android location permission. On a company- or school-owned fully managed tablet, an administrator may use Android Enterprise Lost Mode only after the device is reported lost or stolen. Location, measurement time and battery level are available only to authorised incident responders, are excluded from ordinary logs and exports, and are deleted when the recovery purpose ends. Location is not used to monitor pupils, attendance or lessons.

Providers and retention

Authorised school and 8CELLS personnel may access data as required. Providers include Cloudflare for infrastructure, OpenAI for AI and voice features, and Google for app distribution and Android Enterprise. Chat content, raw audio and voice transcripts are not routinely retained by 8CELLS. A task image is retained for 0–168 hours, 24 hours by default. Account, device, aggregate usage and audit data is retained only as agreed or required for security, accounting or legal claims.

Individual rights and data deletion

To request access, correction or deletion, contact the school or email hi@kindtutor.app with the school name, relevant data type or approximate date, and contact details for an authorised adult. Do not send lesson content or additional child data. After verification, data linked to the request is deleted unless a minimal security, accounting or legal record must be retained. A complaint may be lodged with the Polish Data Protection Authority.