MyProf.mu – Privacy Policy

Last updated: 1 December 2025

This Privacy Policy explains how MyProf.mu ("MyProf", "we", "us", "our") collects, uses, stores, and shares your personal data when you use our website and services (the "Platform").

We are committed to protecting your privacy and complying with applicable data protection laws, including the Data Protection Act 2017 (Mauritius).

1. Data Controller

The data controller responsible for your personal data is:

MyProf.mu
[Company name & registration number – placeholder]
[Registered address – Mauritius – placeholder]
Email: support@myprof.mu

2. Information We Collect

2.1 Information You Provide

When you create an account or use the Platform, we may collect:

Account details

• Name, email address, phone number.
• Password (hashed, not stored in plain text).
• Role (Student / Tutor / Parent).

Profile information

• For Students: school, level (e.g. SC/HSC), subjects of interest, exam board.
• For Tutors: education and qualifications, subjects taught, experience, hourly rate, profile photo, bio, teaching preferences, languages spoken.

Booking & communication

• Bookings, session details, messages between Students and Tutors, reviews and ratings, notes you choose to share about your learning goals.

Payment & billing

• Partial payment details handled by our payment processors (card brand, last 4 digits, expiry month/year—never full card numbers or CVV).
• Billing address, transaction IDs, subscription plan details.

Support interactions

• Emails, support tickets, dispute documentation, feedback provided through forms.

2.2 Information Collected Automatically

When you use the Platform, we may automatically collect:

Usage data

• Pages visited, clicks, features used, session duration, referring URLs.

Device and log data

• IP address, browser type, OS, time zone, approximate location (city/country).

Cookies and similar technologies

• Authentication cookies to keep you logged in.
• Preferences cookies (e.g. language, cookie consent).
• Analytics cookies to help us improve the Platform.

You can control many cookie settings through your browser and our cookie consent banner.

2.3 Third‑Party Data

We may receive information from:

• Payment providers (e.g. Stripe) – payment status, limited card details, dispute notifications.
• Identity or verification services, where used for Tutor verification.
• Analytics and error monitoring tools (aggregated, non‑sensitive technical data).

3. How We Use Your Information

We process your personal data for the following purposes:

3.1 To Provide and Operate the Platform

• Create and manage user accounts.
• Enable Students to search for Tutors and book sessions.
• Allow Tutors to manage availability, bookings, and earnings.
• Deliver messaging, notifications, and reminders (e.g. session reminders).

3.2 To Process Payments

• Facilitate secure payments from Students to Tutors.
• Manage escrow, refunds, and payouts.
• Prevent fraudulent transactions and misuse.

3.3 To Improve and Personalize the Platform

• Analyze usage to improve features, performance, and UX.
• Offer personalized recommendations (e.g. AI Tutor Matching).
• Conduct surveys and gather feedback.

3.4 To Communicate With You

• Send transactional emails (account confirmation, booking confirmations, payment receipts, password resets).
• Inform you about important changes to the Platform, Terms, or policies.
• With your consent, send marketing communications (you can opt out at any time).

3.5 To Ensure Safety, Integrity & Compliance

• Detect and prevent fraud, abuse, and security incidents.
• Enforce our Terms of Service and other policies.
• Comply with legal obligations, regulatory requests, and lawful orders.

4. Legal Bases for Processing

Where applicable, we process your data based on:

• Contractual necessity – to provide the services you request (e.g. booking sessions, managing your account).
• Legitimate interests – to improve our services, prevent fraud, and protect the Platform, provided these interests are not overridden by your rights.
• Legal obligations – to comply with tax, accounting, and regulatory requirements.
• Consent – for non‑essential cookies and marketing communications, where required.

You can withdraw consent at any time where processing is based on consent.

5. How We Share Your Information

We do not sell your personal data. We may share information as follows:

5.1 With Other Users

• When you book or accept bookings, certain profile details are visible:
  • Students see a Tutor's name, photo, bio, qualifications, ratings, and availability.
  • Tutors see a Student's name, level, subjects, and relevant booking details.
• Reviews and ratings you leave may be public on Tutor profiles.

5.2 With Service Providers

We use trusted third parties to help us operate the Platform, including:

• Cloud hosting providers (e.g. Vercel, Supabase).
• Payment processors and banks (e.g. Stripe, local payment gateways).
• Email delivery, SMS or push notification services.
• Analytics, logging, and error monitoring tools.

These providers process data on our behalf under data processing agreements and are required to protect your data.

5.3 For Legal and Safety Reasons

We may disclose information if we reasonably believe it is necessary to:

• Comply with law, regulation, or legal process.
• Respond to lawful requests from authorities.
• Protect the rights, property, or safety of MyProf, users, or the public.
• Enforce our Terms of Service, including investigation of potential violations.

5.4 Business Transfers

If MyProf is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to continued protection and notice where appropriate.

6. International Transfers

Your data may be stored and processed on servers located outside of Mauritius, where our cloud or service providers operate.

Where we transfer personal data internationally, we take appropriate measures to ensure that an equivalent level of protection is applied (for example, using contractual safeguards with service providers).

7. Data Retention

We retain personal data for as long as necessary to:

• Provide the Platform and related services.
• Comply with legal and accounting obligations.
• Resolve disputes and enforce agreements.

When data is no longer needed, we will delete or anonymize it. Some transaction records may be kept for a period required by tax or financial regulations.

8. Your Rights

Subject to applicable law, you may have the right to:

• Access – request a copy of the personal data we hold about you.
• Rectification – correct inaccurate or incomplete data.
• Erasure – request deletion of certain data, subject to legal obligations.
• Restriction – ask us to limit how we use your data in certain cases.
• Objection – object to some processing based on legitimate interests.
• Data portability – receive your data in a structured, commonly used format where technically feasible.
• Withdraw consent – at any time where processing is based on consent.

To exercise these rights, contact us at privacy@myprof.mu or via the Contact page. We may need to verify your identity before fulfilling your request.

9. Children's Privacy

MyProf is intended for students under adult supervision:

• For users under 18, we recommend a parent or guardian create and manage the account.
• We do not knowingly collect personal data from children without appropriate consent where required.
• If you believe a child has provided us with personal data without proper consent, please contact us so we can take appropriate action.

10. Security

We implement technical and organizational measures to protect your data, including:

• Encrypted connections (HTTPS/TLS).
• Secure password hashing.
• Role‑based access controls and audit logging.
• Regular updates and security monitoring.

However, no system is fully secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your password and account.

11. Cookies & Tracking Technologies

We use cookies and similar technologies for:

• Authentication and session management.
• Remembering preferences.
• Measuring usage and performance.
• Preventing fraud and abuse.

You can manage cookie preferences through:

• Our cookie consent banner.
• Your browser settings (e.g. blocking or deleting cookies).

Disabling certain cookies may affect the functionality of the Platform.

12. Third‑Party Links

The Platform may contain links to third‑party websites or services. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you (for example, via email or an in‑app notice) and update the "Last updated" date at the top.

Your continued use of the Platform after changes become effective means you accept the updated Policy.

14. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your personal data, please contact:

• Email: privacy@myprof.mu
• Or use the Contact / Help links on the website.