Lessilo Privacy Policy

Working draft. This text was written by the operator, not by a lawyer, and has not had a formal legal review. It describes how Lessilo actually handles personal data today. If anything in it is unclear, write to us.

Version: 2026-10-06. Last updated: 6 October 2026.

This policy explains what personal data Lessilo collects, why, on what legal basis, who else receives it, how long we keep it and what rights you have. It applies to the website lessilo.com, the web app at app.lessilo.com and the Lessilo mobile apps. It also applies to people who register for a tutor’s public event without a Lessilo account (“guests”). It is written to meet the EU General Data Protection Regulation (GDPR). The short version:

we collect only what is needed to run the schedule, the lesson diary, the payment record and public events;
we do not sell data, show ads, track you across sites or apps, or use analytics tools;
we do not use cookies;
what you enter about a lesson is visible to the people in that lesson, and to nobody else;
if you register for an event, only its organizer sees your registration, and we delete it soon after the event;
you can download your data and delete your account yourself, at any time, in Settings;
a guest without an account can see, cancel and delete their registration at any time with the personal link in our emails.

1. Who is responsible for your data

The controller of your personal data is Valentin Sobolev (“we”, “us”), the developer of Lessilo. Contact for anything about your data: contact@meerhelm.com. We have not appointed a data protection officer, as we are not required to.

Tutors decide what they write about their own students in Lessilo. A tutor who uses Lessilo for their own tutoring business is responsible, alongside us, for having a reason to enter data about their students and for what they write.

The same applies to public events. A tutor who runs an event (the “organizer”) decides to hold it and decides what to do with the list of people who registered. The organizer is responsible, alongside us, for the data of the guests they receive through Lessilo: their names, email addresses, the status they chose and whether they paid. We do not add guests to any mailing list, and an organizer must not use the list of guests for marketing without the guest’s consent.

2. What data we process

2.1 Account data

email address;
name, and a phone number if you choose to give one;
date of birth, and whether you are a minor (we use it to decide whether a parent’s consent is needed and whether you can open a tutor profile);
how you sign in (email and password, Google or Apple). Your password is held by our authentication provider in hashed form; we never see it. If you sign in with Google or Apple, we receive your email address and a confirmation from that service that it is you, and, if you allow it, your name;
your time zone and interface language;
which profiles you have (tutor, student, parent) and which one you last used;
the documents you accepted (which version and when), and any consent you withdrew.

2.2 Relationships

Who is whose tutor, student, parent or guardian, and the settings of each link (for example, how a student is billed). When a parent adds a child, the parent enters the child’s name and, optionally, the child’s email address.

2.3 Lessons and the lesson diary

Lesson date, time, duration, subject, status and price; the link to an online lesson if the tutor adds one; and the texts written about a lesson: topic, summary, homework, the tutor’s comment to the student, the tutor’s private notes, and reasons for cancellation.

2.4 Money records

Prices, prepaid lesson packages, and payments recorded by the tutor: amount, currency, method (cash or bank transfer), date and an optional note. Lessilo never receives the payer’s bank card or bank account details, and no money passes through Lessilo.

2.5 Tutor profile

Subjects and prices, available hours and exceptions to them, booking rules, and the address of the tutor’s public page, if the tutor opens one.

2.6 Public events

What the organizer enters: the event’s title, description, start and end time, an optional limit on the number of seats, an optional price, the payment instructions shown to paying guests (for example, the organizer’s bank details for a transfer), the link to the online call, and whether registration is open.

About each person registered for an event:

name and email address;
the status they chose (student, tutor or parent). It is only for the organizer’s information and changes nothing about the registration;
their time zone and interface language, taken from the browser, so that our emails are written in their language and show times in their time zone;
that they confirmed they have read this policy and that they are 16 or older (or, for a younger child, that a parent is registering them);
the state of the registration (waiting for email confirmation, confirmed, cancelled), whether the organizer marked it as paid, and when it was made, confirmed and changed;
which emails about the registration are due or were sent, and when.

If you register while signed in to Lessilo, the registration is linked to your account and uses the name and email address of your account. If the organizer registers a person themselves, the organizer enters that person’s name, email address and status, or chooses one of their own students.

2.7 Records we keep for accountability

a log of changes to your personal details (what was changed, from what, to what and when), so that a correction can be proven and undone;
requests you make about your data (download, deletion, restriction) and when they were answered.

2.8 Technical data

sign-in sessions (an identifier, when the session started and ended, and the active profile);
server logs: for each request, the time, the method and the address requested (with secret parts removed), the response and the network address the request came from. We use them only to keep the service running and secure;
to choose the language of the website and of the sign-in screen, our server looks up the country of your network address in a database kept on our own server. Your address is not sent anywhere for this, and the country is not stored;
to stop abuse of event registration, our server counts for a few minutes how many registrations come from one network address and how often a personal event link is used. These counters live only in the server’s memory, are never written to the database and disappear on their own.

We do not collect your location, contacts, photos or files, and the mobile apps ask for no permissions other than internet access.

3. Why we process it and on what legal basis

Purpose	Data	Legal basis (GDPR)
Creating and running your account, signing you in	Account data, sessions	Performance of our contract with you (the Terms of Service), Art. 6(1)(b)
Schedule, booking, lesson diary, record of prices and payments, shared between the people in a lesson	Relationships, lessons, money records, tutor profile	Performance of the contract, Art. 6(1)(b)
Emails about lessons: booked, moved, cancelled, and reminders 24 hours and 1 hour before; invitations a parent sends to a child; email address confirmation	Email address, name, lesson time, the other person’s name	Performance of the contract, Art. 6(1)(b)
Running a tutor’s public events: the event page, registration, holding a seat, the list of registered people for the organizer	Event data, guest data (section 2.6)	Performance of the contract with the guest and with the organizer, Art. 6(1)(b)
Emails to the people registered for an event: the email address confirmation link; “you are registered” with the call link or the payment instructions; payment marked; reminders 24 hours and 1 hour before; a change of time or of the call link; cancellation of the event; removal by the organizer	Email address, name, time zone, language, the event, the organizer’s name, the registration and payment mark	Performance of the contract, Art. 6(1)(b)
Preventing abuse of event registration: limits on registrations from one network address and on the use of a personal link	Network address and personal link, counted in server memory only, not stored	Legitimate interests, Art. 6(1)(f): protecting organizers, guests and the service from spam and automated abuse
Checking age and asking for a parent’s consent for young children	Date of birth, relationships	Legal obligation, Art. 6(1)(c), and Art. 8 GDPR
Keeping lesson and payment records for the other people in a lesson after you leave, and handling disputes or legal claims	Lessons, money records, relationships	Our and the other users’ legitimate interests, Art. 6(1)(f): the tutor and the family need a reliable history of lessons and payments
Proving which documents you accepted, logging changes to personal details, answering your requests	Consent records, change log, requests	Legal obligation, Art. 6(1)(c), together with Art. 5(2) and Art. 7(1) GDPR
Security, preventing abuse, fixing errors	Technical data, logs	Legitimate interests, Art. 6(1)(f): keeping Lessilo and your data safe
Handling reports of illegal content and requests from authorities	The report, the content concerned, contact details	Legal obligation, Art. 6(1)(c) (EU Digital Services Act)
News and offers about Lessilo, only if you opted in	Email address, name, language	Your consent, Art. 6(1)(a); you can withdraw it at any time

When you sign up, we ask you to tick a box about this policy. Ticking it records that you have read the policy and agree to the processing it describes; we keep that record. The legal basis of each purpose is still the one in the table above. Giving your date of birth and email address is necessary to have an account; everything else that is optional is marked as such in the app.

When you register for an event, you tick a box confirming that you have read this policy and a box confirming that you are 16 or older. Your name and email address are necessary to register: without them we cannot hold your seat or tell you about the event.

The people in your lessons. A tutor sees the data of the students and parents linked to them, and the students and parents see the tutor’s name and the lessons they share. Lesson texts are visible to the tutor, the student and the student’s linked parent or guardian, except the tutor’s private notes and the tutor’s comment to the student, which a parent does not see. Nobody sees lessons they are not part of.
The public, only if a tutor chooses it. A tutor’s public page is off by default. If the tutor opens it, anyone can see the tutor’s name, subjects, prices and free lesson slots. It never shows students, parents, email addresses or phone numbers.
The organizer of an event you registered for. The organizer sees the name, email address, chosen status and payment mark of everyone registered for their event. Guests see nothing about other guests.
Anyone with the link to an event page. Event pages are not listed anywhere and open only by their link. An event page shows the event’s title, description, time, price, the organizer’s name and how many seats are left. It never shows who has registered, the call link or the payment instructions. The call link is shown only to people whose registration is confirmed and, for a paid event, only after the organizer has marked their payment.
Your calendar app, only if you turn it on. If you connect the calendar feed, your calendar service (for example Google Calendar or Apple Calendar) regularly downloads your lessons, including the other person’s name, from a secret link. Anyone who has that link can read the feed, so keep it private; you can turn the feed off in the app, which makes the link stop working.
Our service providers, listed below, only to run Lessilo for us.
Authorities, only where the law requires us to disclose data.

We do not sell personal data and do not share it with advertisers or data brokers.

5. Service providers

These companies process data on our behalf, under data processing agreements, and may not use it for their own purposes:

DigitalOcean, LLC (USA): the server that runs the website, the app and the API.
Supabase, Inc. (USA): the database and the sign-in service; also sends the email address confirmation message.
An email delivery service: delivers notification emails, including the emails to people registered for an event. You can ask us which one we use at the moment.

Public events do not involve any other provider: no payment service, no captcha service and no analytics.

If you choose to sign in with Google or Apple, that company confirms your identity to us. It processes your data under its own privacy policy, as a separate controller. If you never use these buttons, no data goes to them. The web app loads the Google or Apple sign-in code only when you use the corresponding button.

6. Transfers outside the EU

Our main providers are US companies. Where they store data outside the European Economic Area or their staff access it from outside, for example for support, such transfers are covered by the EU–US Data Privacy Framework where the company is certified under it, and otherwise by the European Commission’s Standard Contractual Clauses. You can ask us for a copy of these safeguards.

7. How long we keep data

Your account data: for as long as you have an account.
When you delete your account, it is done at once: we delete your sign-in record, your sessions and, if you are a tutor, your subjects and public page; your email address, name and phone number are erased from our records and from the history of changes.
Lessons, payments and relationships stay available to the other people in them for up to 3 years after the lesson or the end of the relationship, the general limitation period for claims. After you delete your account, these records no longer carry your name or email address.
Records of accepted documents and withdrawn consents: 3 years after the consent was withdrawn or the contract ended.
Inactive accounts: if an account has not been used for 3 years since its last lesson, we may delete it as described above.
Invitation links stop working after 7 days.
Event registrations: the email confirmation link works for 24 hours. A registration that was not confirmed is deleted after 48 hours. Other registrations are deleted 30 days after the event ends or, if the organizer marked a payment, 365 days after the event ends, so that a question about the payment can still be settled. You can delete your registration earlier yourself, at any time (section 11).
Server logs: rotated automatically and kept only as long as needed to keep the service running and to investigate errors.
Backups: kept only as long as needed to restore the service after a failure; data you deleted disappears from backups when old backups are deleted.

8. Children

Lessilo is used for tutoring, so many students are children. We protect their data in these ways:

A student younger than 16 years (or the lower age of digital consent set by the law of their country, which may be between 13 and 16) needs the consent of a parent or legal guardian. Until that consent is recorded, the child’s account works in a restricted mode.
A parent can add a child. If the parent gives the child’s email address, the child must confirm the invitation from that mailbox; if not, the parent manages the child’s account.
A linked parent or guardian can see the child’s lessons, homework and payment records, and receives lesson emails. Children cannot open a tutor profile: tutors must be adults.
To register for a public event, a guest confirms that they are 16 or older. A younger child is registered by a parent or guardian.
A child’s data is never public, is not used for marketing, and is shared only with the child’s own tutors and linked parents or guardians and, if the child is registered for an event, with that event’s organizer.
A parent or guardian can exercise the child’s data protection rights on the child’s behalf by writing to us. If you believe a child is using Lessilo without the required consent, please tell us.

9. Cookies and storage on your device

Lessilo does not use cookies. The website lessilo.com runs no scripts at all. The web app and the mobile apps store a few items on your device that are strictly necessary for the service to work, which is why we do not ask for consent to them:

your sign-in session (on mobile, in the device’s encrypted secure storage);
your chosen language and schedule view;
during sign-up, the details you have entered so far (including your date of birth), until sign-up is finished.

Event pages and personal event links add no cookies, trackers or captcha.

10. Security

All connections are encrypted (HTTPS). Access to data is checked on our server for every request, based on your active profile and your relationships; the apps never read the database directly. The secret parts of invitation and calendar links are stored only hashed or encrypted. Personal event links are signed by our server, are not stored at all and are kept out of our server logs. Access to the production systems is limited to the operator. If a personal data breach puts your rights at high risk, we will tell you without undue delay.

11. Your rights

Under the GDPR you have the right to:

access your data and receive a copy. In Settings → Account, “Download my data” gives you your profile, relationships, lessons, payments and consents, together with the purpose, legal basis and retention period of each. For a full copy, including lesson texts and the change log, write to us;
rectification: change your name, phone, time zone and language in Settings. To correct your email address or date of birth, write to us;
erasure: delete your account in Settings → Account, in the mobile app or in a browser at app.lessilo.com, effective at once, with the exceptions in section 7. If you cannot sign in, write to us from the email address of your account and we will delete it for you;
restriction of processing: write to us;
data portability: the download in Settings is a machine-readable (JSON) file;
object to processing based on legitimate interests, on grounds relating to your situation: write to us;
withdraw consent to news and offers at any time, by writing to us or with the unsubscribe link in any such email, without affecting anything done before.

These functions stay available even if you have not yet accepted a new version of our documents. We answer requests within one month. We may ask you to confirm your identity, usually by writing from the email address of your account.

If you registered for an event without an account, you have the same rights. Every email we send you about the event contains your personal link. With it you can see your registration and the data it holds, cancel it, and delete your data at once; after deletion the link stops working. You can also write to us from the email address you registered with. You may equally turn to the organizer of the event, who is responsible for the list of guests alongside us (section 1).

12. Automated decisions

We do not profile users and make no automated decisions with legal or similarly significant effects. The only automatic rules are that an account below the age of digital consent stays restricted until a parent’s consent is recorded, and that only adults can open a tutor profile; if you think your date of birth was entered wrongly, write to us. The temporary limits on event registrations from one network address are a security measure, not a decision about you; if one stops you from registering, try again later or write to us.

13. Changes to this policy

Each version of this policy has its own date and stays published at its own address. When we change it in a way that matters, we will ask you to read and accept the new version the next time you use Lessilo, and we keep a record of which version you accepted and when. If you have no account, the version in force is always at lessilo.com/legal/personal-data.html.

14. Contact and complaints

Write to contact@meerhelm.com with any question or request about your data. You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work, or where you think the problem happened.