TutorLog is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). For any privacy-related question, write to captainlongevity@gmail.com.
We do not collect, transmit, store on a server, sell, share, or analyze:
All teaching data you enter is stored locally on your iOS device using Apple's SwiftData framework. This data may be included in your iCloud or iTunes device backup if you have device backup enabled. We do not have access to your device backups.
Device-backup contents and recovery depend on your system settings, a successfully completed usable backup and Apple’s restoration process; enabling backup alone does not guarantee recovery of every record or original file. We cannot retrieve or restore your device backups.
These features process data locally on your device; paid and free availability is described in the Terms:
TutorLog uses Apple StoreKit for a monthly subscription and a one-time non-consumable Lifetime purchase. Loading products, checking offer eligibility, purchasing, restoring and verifying access communicate with Apple. The app reads verified product and entitlement information, including expiration or revocation status where applicable, and keeps local access state. Apple processes payment; TutorLog does not receive your payment-card details or Apple Account password. Current and supported historical purchase access depend on verified transactions. See the TutorLog terms for the available plans and subscription handling.
You can revoke any of these permissions at any time in iOS Settings > TutorLog.
You choose whether and where to share a parent progress report PDF, CSV, or portable backup using the iOS share sheet. Check the file before sharing, especially a sessions CSV or backup that may contain private notes. A destination you select may store or sync a copy. TutorLog does not email parents or receive a copy of the exported file.
TutorLog is intended for use by tutors, who are adults. Students you teach may be minors, but you — not the student — interact with the app. The app has no child account or developer-operated record collection. Contact support if a child has sent personal information to us. The app's age rating reflects this.
Because all data is stored only on your device, you control retention completely. To delete all teaching data, delete the app from your device. There is no remote copy for us to delete.
The App does not route records through a developer-operated record server. Apple services, legal-page hosting, support correspondence and any sharing destination you choose may process information outside your country under their own policies. Those services are separate from the App’s local record storage. The app is published in English and is primarily marketed in North America.
If we ever change how the app handles data — for example, if a future version adds an opt-in cloud backup feature — we will update this policy and surface the change in the app before you can use that feature. The "Last updated" date at the top of this page reflects the most recent revision.
Data & Backup offers a shareable .tutorlogbackup file. It includes the tutor profile and preferences, students and their contact fields and photos, sessions, payments, assessments, and schedules. It uses a JSON envelope with an integrity checksum; the checksum and Base64-encoded photo data do not provide password encryption. Protect the complete file as sensitive information, and review any destination you choose for sharing.
After validating and previewing a selected file, Restore replaces the current records and tutor-profile settings rather than merging them. The app first creates a local pre-restore safety copy; if that copy cannot be created, restore does not proceed. The saved safety file can retain earlier information after current records are changed or deleted and remains separate from the active database. Preserve an independent backup before replacement. Purchase access is checked separately through Apple; restoring a data file is not restoring a Pro purchase. The developer does not receive these files or provide a server-side recovery copy.
TutorLog's widget displays locally prepared summaries of app records. The app and its widget exchange the relevant summary and preferences through an on-device shared container; this is not a developer-operated record upload. Information displayed by a widget can be visible to people able to view the Home Screen or Lock Screen where it is placed. Use the widget and device display settings to control that visibility. Screenshots and independent copies remain separate from the records you later edit or delete.
Privacy questions: captainlongevity@gmail.com
These TutorLog legal pages are served by Vercel. Opening a page sends ordinary request information, such as IP address, browser information and the requested URL, to the host for delivery and security; see Vercel's Privacy Notice. These pages contain no advertising or analytics scripts. If you email support, we receive the address and information you choose to send to answer your request. Avoid including sensitive records that are not needed for that request.
A running or paused timer is saved separately in local system preferences with the student identifier, start/resume times, accumulated duration and completion state. It can survive an App restart before a session is committed. The matching draft is cleared after successful session completion or explicit discard, and after successful deletion of that student. Archiving a student retains the timer. The portable backup contains committed records and supported tutor-profile settings, not this unfinished timer. A successful backup restore clears the current timer draft rather than recreating it from the file.
The local pre-restore safety file is excluded from ordinary device backup. Keep a verified portable backup outside the App before replacing a device or deleting its storage.