Privacy Policy

TailorGrow ("TailorGrow", "we", "us") operates the TailorGrow English-learning platform at app.tailorgrow.com. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It includes a specific section on data we access through Google APIs.

1. Information we collect

• Account information — your email address, name, and authentication details when you register or sign in (including via Google Sign-In).
• Profile and learning data — information you provide to personalize learning (e.g. interests, aptitude-test results, writing submissions, class membership).
• Usage data — how you interact with the product, used to improve the service and diagnose problems.

2. Google user data — access, use, and sharing

Some features connect to your Google Account. We request only the scopes needed for the feature you use:

• Sign in with Google — basic profile (name, email address) to create and authenticate your TailorGrow account.
• Google Calendar (calendar.events) — when a teacher connects their Google Calendar, we create, update, and delete class-lesson events on that teacher's calendar so the teacher is the host of the lesson's Google Meet. We only manage events created by TailorGrow for scheduled lessons.
• Google Drive (drive.file) — we create and manage only the Google Docs that TailorGrow itself generates (e.g. class lesson notes and attachments). This scope does not grant access to any other files in your Drive.

TailorGrow's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not transfer it to third parties except as necessary to provide the feature you requested, comply with the law, or as part of a merger or acquisition.

3. How we use your information

• To provide, maintain, and personalize the TailorGrow service.
• To schedule lessons, create meeting links, and send you related notifications.
• To secure accounts, prevent abuse, and diagnose and fix problems.
• To communicate with you about the service.

4. Service providers

We share data with vendors who process it on our behalf to run the service, including Supabase (authentication and database), Google (calendar, meet, and document features), and our hosting provider. These providers may only use the data to provide services to us.

5. Data retention

We keep your information for as long as your account is active or as needed to provide the service. You can delete your account or disconnect Google access at any time (see below), after which we remove the associated data on a routine schedule, except where we must retain it to meet legal obligations.

6. Your choices and rights

• Disconnect Google — you can revoke TailorGrow's Google access at any time from within the app (the "Disconnect" control in the classroom) or at Google Account permissions. Revoking access deletes the stored Google credential.
• Access and deletion — you may request access to or deletion of your personal data by contacting us.

7. Security

We protect your information with industry-standard measures. Google refresh tokens are stored encrypted at rest (AES-256-GCM). No method of transmission or storage is perfectly secure, but we work to protect your data and respond promptly to any incident.

8. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date above. Material changes will be communicated where appropriate.

9. Contact us

Questions about this policy or your data? Contact us at dev.tailorgrow@gmail.com.