Security

What we protect, and why

Your co-tutor is built from your course, your face and your voice. Your students’ conversations with it are personal: they show what each student got wrong and how fast they are moving. We designed the platform to protect both from the start.

What we keep

• Your account. Your name, your email address and your workspace.
• Your course. The materials and short videos you upload, your tutor’s settings and the skills plan built from them.
• Your face and voice. The photo and the voice recording you give us, and what we make from them.
• Your students’ sessions. Messages, spoken sessions with their recordings and transcripts, answers and progress.
• Usage. Which pages and features are used, and error reports when something breaks.
• Billing. Your plan and payment history. Card details go to our payment processor and never reach us.

Our product analytics never capture your course materials or your students’ conversations.

Your students’ conversations

Students talk with your co-tutor on the web, in Slack, Telegram and WhatsApp, and on Google Meet calls. Wherever they talk, the conversation is part of their session and protected as this page describes. Each student’s conversation is encrypted at rest. Messages sent in a chat app also stay in that app, under the app’s own rules.

Spoken sessions are recorded and transcribed, so the tutor can respond. Students can share their screen with your co-tutor and build together. The student starts the sharing and stops it.

You see how your students are doing, but not what they said. You see each student’s name, email, progress and skills, and where the product offers one, a short summary of their work. You never see their messages, their answers or their recordings. This holds for everyone in your workspace, too.

When a student writes to your co-tutor in Slack, we keep the incoming message only until the tutor has read it. That copy is deleted within a day.

Students must be 16 or older

alltutors.ai is not for children under 16. A student must be 16 or older to create an account and talk with your co-tutor. If you teach a younger audience, please do not invite them. If you believe a child under 16 has given us personal information, contact us and we will take steps to delete it.

Your course

You keep ownership of everything you upload, including your short videos. We use it only to run your co-tutor and the service around it. Your materials and the lessons generated from them are encrypted at rest.

Your co-tutor answers from your materials first, so students get answers that come from your course, not from the internet at large. It also means you can check what your co-tutor is drawing on.

Your face and voice

Your co-tutor can have your face, made from a photo you give us. Once the face is made, we discard the photo, unless you ask us to keep it. We never build a face template, and we never use your photo to identify anyone.

Your co-tutor can have your voice, made from a recording you give us. We use that recording and that voice only to make your co-tutor speak. We never license your voice to anyone else as a standalone voice. Your voice recording is encrypted at rest.

You stay in control of both. You can replace or delete your voice at any time. When you delete it, we delete the recording and ask the voice provider to remove the voice. We never keep voice data longer than three years after your last use, unless the law requires or allows it. The face stays with your tutor until you change it or delete the tutor.

Who can see what

• You and your team see your materials, settings, and your students’ progress and skills. Never their messages, answers or recordings.
• Each student sees their own conversation and progress. Never another student’s conversation.
• Our team works on production systems only to run the service.
• Our service providers get only what one feature needs.

Your team means the people you add to your workspace as owner, admin or editor. A workspace’s materials, tutors and student data never cross into another workspace.

Encryption and infrastructure

alltutors.ai runs on trusted cloud infrastructure. Data may be processed in the United States and other countries where we or our providers operate. We use appropriate safeguards for those transfers.

Sensitive content is encrypted at rest with authenticated encryption and decrypted only at the moment it is read. That covers your materials, generated lessons, students’ messages and transcripts, feedback, voice recordings and stored connections. Traffic between you and us is encrypted in transit.

Some details stay readable, because the product needs them to sort and display things: your tutor’s settings, lesson titles, names and timestamps.

The database and media storage are kept apart from the application, so a break-in to one does not hand over the others. Your co-tutor’s face, voice and lesson images are served through short-lived private links, never a public folder.

AI providers

Some features work with trusted providers, such as AI, speech and real-time calling services. Each one receives only what its feature needs, and only to provide that feature. We do not sell personal information, and we do not share it with advertisers. We do not use your course, your students’ sessions, your voice or your photo to train these providers’ models.

Signing in

There are no passwords to leak. You sign in with a one-time code sent to your email, or with your Google account, and a Google sign-in is accepted only once Google confirms the email. Sign-in, chat and public pages are rate limited, so nobody can flood the service or guess their way into an account.

Deleting your data

You can delete a tutor or your whole account from your settings. Deleting a tutor removes its materials, generated content and students’ progress. Deleting your account removes your workspaces, tutors, materials and voices. It is a real deletion, not a hidden flag.

We keep a few records where the law requires or allows it: payment records at our payment processor, and accounting and tax records. We also keep a little information to stop abuse of free usage. Backups are overwritten on a rolling basis.

What we ask of you

• Use only your own face and voice, or someone’s who has given you permission.
• Upload only materials and videos you own or have the right to use this way.
• Invite only students who are 16 or older.
• Tell your students they are talking with an AI co-tutor.
• Where the law requires it, tell people that sessions are recorded.

Report a vulnerability

Found a security issue? Email security@alltutors.ai. We take every report seriously and will get back to you.