Privacy Policy

CANtutor AI is an AI-assisted learning service operated by CANtutor, a corporation based in Ontario, Canada and operating as CANtutor AI (“we”, “us”, “our”). This policy explains how we handle personal information, and it applies to the CANtutor AI website and app.

We are responsible for the personal information under our control, including information we transfer to service providers for processing. If you have a question or a complaint about privacy, write to privacy@cantutor.ca, which reaches the person accountable for our compliance with this policy.

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario law.

We collect only what we need to provide and improve the service. In practice that falls into four groups.

• We do not sell personal information and we do not disclose it for a third party’s own marketing.
• We do not run advertising in the product, and there is no advertising or behavioural profiling network in it.
• We do not ask for your government ID, your address, or your financial account details.
• We do not track your activity across other companies’ websites or apps.

We identify our purposes before or at the time we collect information, and we use it only for those purposes. They are:

• To create and administer your account and let you sign in.
• To provide the service itself — generating explanations, feedback, lessons, practice and voice conversations in response to what you ask.
• To save your progress, so that your work is still there the next time you sign in.
• To process payments and manage subscriptions.
• To respond to your support requests and to contact you about the service.
• To keep the service secure and reliable, to investigate misuse, and to enforce our Terms of Use.
• To understand which features are used, so we can improve the product.
• To comply with our legal obligations.

If we ever want to use your information for a new purpose that is not listed here, we will identify that purpose and obtain your consent before doing so, unless the law permits or requires otherwise.

If you connect a Google account, we request only the permissions needed for the features you use, and we ask for them at the point you turn the feature on. You can disconnect at any time from your account settings, or by revoking our access in your Google account’s security settings.

Where a school or district enables CANtutor AI for its students, the school determines what information is provided to us and we handle it on the school’s instructions under our agreement with them. Information received through a school integration is used to provide the service to that school and its students, and for nothing else.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, and we do not sell it.

CANtutor AI is an AI-assisted tool. To answer a question, generate a lesson or hold a voice conversation, the content of your request is sent to third-party AI services that produce the response and return it to you. This includes the text you type, files, images and lecture recordings you upload for help with, and — in a voice session — your speech, its transcript, and your camera or shared screen if you turn either on. The providers are named in section 8.

We use these services under commercial terms that restrict them to processing your content in order to return a result to us. Our agreements with them do not permit them to use your content to train their general-purpose models.

Do not put sensitive personal information into a lesson. Health information, financial account details, government identifiers and similar information are not needed for tutoring and should not be entered.

AI output can be wrong. The accuracy limits of the service, and what you are responsible for when you rely on its output, are set out in our Terms of Use.

Parts of the service are social by design. Where you take part in a leaderboard, a shared room or a multiplayer activity, your display name, avatar and score are visible to the other participants. Choose a display name you are comfortable showing to other people, and do not use your full name.

Your lessons, your uploaded work and your account details are not visible to other users.

If another user behaves inappropriately, you can report and block them from within a shared room, and you can also email privacy@cantutor.ca.

We use cookies and similar local storage for a narrow set of purposes: keeping you signed in, remembering your preferences such as theme, keeping the app working offline where that is supported, and measuring which features are used so we can improve them.

We do not use advertising cookies and we do not permit third parties to track you across other websites through our service. You can clear or block cookies in your browser settings, but signing in will not work without the ones that keep your session active.

We keep personal information only as long as we need it for the purposes in section 4, or as long as the law requires us to keep it.

• Account and learning content is kept while your account is open, so your progress is there when you return.
• Lecture recordings, transcripts and uploaded files are kept until you delete them or until your account is deleted. We do not delete them on a schedule of our own, so that your material is still there when you come back to it. Voice-session audio and video are not recorded at all; only the text transcript of a session is kept.
• Billing records are kept for as long as tax and accounting law requires, which is longer than the life of the account.
• Security and error records are kept for a short period and then discarded.

You can ask us to delete your account from inside the app, under Settings → Account → Delete account. If you have already uninstalled the app, or would rather not sign in, email privacy@cantutor.ca. Either way we will delete or anonymise your personal information, except where we are required to retain it by law.

Deletion is scheduled rather than immediate: there is a 30-day grace window, and signing back in during that window cancels it. Your subscription is set to end at the end of the period you have already paid for, so it may continue to show as active until then; you are not charged again. Full instructions and what happens to your data.

We protect personal information with security safeguards appropriate to its sensitivity. These include technical, organisational and physical measures covering access control, encryption of information in transit and at rest, and restricting internal access to those who need it to do their job.

We deliberately do not publish the details of our security controls, because describing them precisely would make them easier to defeat.

No method of transmitting or storing information is completely secure, and we cannot guarantee absolute security. Protect your own account by using a strong, unique password and not sharing it. If you believe your account has been accessed by someone else, or if you become aware of a security issue in the service, contact privacy@cantutor.ca immediately. If a breach of our safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires.

Under Canadian privacy law you have the right to:

• Access — ask us whether we hold personal information about you, what it is, how it has been used, and to whom it has been disclosed.
• Correction — ask us to correct information that is inaccurate or incomplete.
• Withdraw consent — as described in section 5.1.
• Deletion — ask us to close your account and delete your information, as described in section 11.
• Complain — as described in section 14.

To exercise any of these, email privacy@cantutor.ca from the address on your account. We respond to access requests within 30 days. There is no charge. We may ask you to confirm your identity before we act, so that we do not disclose your information to someone else. In limited circumstances the law permits us to refuse a request — for example where responding would reveal another person’s personal information — and if we refuse, we will tell you why and how to challenge that decision.

If you are not satisfied with how we have handled your personal information or your request, write to privacy@cantutor.ca. We will investigate and respond in writing.

If you remain dissatisfied, you may complain to the Office of the Privacy Commissioner of Canada. Complaining to us first is not a precondition, and nothing in this policy limits your right to go directly to the Commissioner.

We may update this policy as the service changes or the law does. When we do, we update the “last updated” date at the top of this page. If a change is significant — for example, if we begin using your information for a materially different purpose — we will give you notice in the app or by email before it takes effect, and where the law requires it, we will ask for your consent.

If you use the CANtutor AI browser extension, it reads only what you explicitly act on — the text you highlight, the current page’s title and URL, and (only when you ask for it) the text of a Google Doc, the whole page, or a screen capture. It sends what you send to CANtutor’s own backend, authenticated with your existing cantutor.ai session, exactly as this policy describes for everything else. It runs no background reads, no tracking and no analytics of its own.

The extension’s own data practices, including the Google API Limited Use disclosure for its Google Docs feature, are documented separately on the browser extension privacy policy.

For any privacy question, request or complaint, including access, correction and deletion:

For anything that is not a privacy matter, see our support page.