Privacy Policy

1. Who is responsible

Educa Tutoring Inc., 9520 Boulevard de l'Acadie, Suite 225, Montréal, Québec H4N 1L8, is responsible for the personal information described here.

Our Privacy Officer is Jack Lasry, President. Any question, access request, correction or complaint can be sent to info@educatutoring.com and will reach them.

2. What we collect, and why

From the account holder: name, email address, and the postal code of the household. The postal code is used to show nearby tutoring centres and for nothing else — we do not ask for or store a street address for a family account.

From each child profile: a first name, a grade, the subjects chosen, and a record of every question they answer. That record includes the answer they gave, whether it was right, how long they took, how long they thought before starting, whether they changed their answer, and — where a wrong answer matches a known misunderstanding — which one. It is what the progress reports are built from, and it is deliberately detailed: a report that only knew a score could tell you a child struggled but never what to do about it.

Payment is handled by our payment processor. We receive confirmation of payment, the last four digits of the card and its brand. We never receive or store full card numbers.

Technical information any web service receives: IP address, browser type, and pages requested, used to keep the service running and secure.

We collect what the service needs to work and no more. We do not ask for a child's date of birth, photograph, school, or address.

3. Consent, and children

Under Law 25, personal information about a child under 14 may only be collected with the consent of a parent or guardian. When you add a child, we ask for that consent explicitly, and we record the wording you agreed to, the date and time, and the address the consent came from — so that both of us can show later what was agreed.

You may withdraw that consent at any time. Withdrawing it means we delete that child's profile and their work.

4. Who can see it

You, for your own household.

If your child is enrolled at a tutoring centre using GoHiboo, that centre's administrators and the tutors assigned to your child can see that child's work and progress. They cannot see your billing information, and they cannot see any other centre's children.

Our staff, only where needed to operate or support the service, and under confidentiality obligations.

Our service providers, listed in the next section.

We do not sell personal information. We do not share it for advertising. We do not use children's work to target anything at anyone.

5. Service providers and where data is held

We use third parties to host the service, process payments, and send email. Each receives only what it needs to do its job.

Our database is hosted in Canada. Some providers — payment processing and email delivery in particular — may process information outside Québec, including in the United States. Where that happens we assess the risk before entrusting the information, as Law 25 requires, and rely on contractual protections.

A current list of providers and the countries involved is available on request.

6. How long we keep it

Account and child information: for as long as the account is open, and for twelve months after it is closed, so an account closed by mistake or at the end of a school year can be restored.

A child's question-by-question record: kept while they are learning with us, and deleted no later than 24 months after their last session. Twenty-four months spans two school years, which is the longest window year-over-year comparison needs. It is a maximum, not a fixed term — we may delete sooner, and asking us to is your right.

After that, summaries survive: averages, results per module, how many sessions. So a child returning after a year still has a history, without us holding every answer they ever gave.

Leaving a tutoring centre's roster is not erasure. Access stops immediately, but the record stays so a removal made by mistake can be undone — the 24-month clock runs from the last session either way.

Billing records: for the period Canadian and Québec tax law requires us to keep them, currently six years.

After those periods information is deleted or irreversibly anonymised.

7. Your rights

You may ask for a copy of the personal information we hold about you and your children, in a structured, commonly used format.

You may ask us to correct anything inaccurate.

You may ask us to delete your account and everything on it.

You may withdraw a consent you have given.

You may complain to us, and if you are not satisfied, to the Commission d'accès à l'information du Québec.

We respond to requests within 30 days.

8. How we protect it

Access to data is restricted by row-level rules in the database itself, so one family cannot reach another's data and one centre cannot reach another's, regardless of what the application asks for.

Traffic is encrypted in transit. Passwords are hashed, never stored in readable form.

Child credentials are generated rather than chosen, and a child's session signs out automatically after ten minutes of inactivity, because children use shared devices.

9. If something goes wrong

If a confidentiality incident creates a risk of serious injury, we will notify the Commission d'accès à l'information and the people affected promptly, as Law 25 requires, and we keep a register of such incidents.

10. Cookies

We use cookies that are necessary for the service: keeping you signed in, and remembering whether you chose French or English.

We do not use advertising cookies and we do not run third-party trackers for advertising purposes.

11. Changes

If we change this policy materially we will tell account holders before the change takes effect. The date at the top shows when it was last updated.