1. Scope and who we are
MyInsightAcademy, also known as Insight Academy, is a tutoring service operated by Swati Goel. Our primary operations are in Vietnam, and some online tutors work from India or Singapore. In this policy, “we,” “us,” and “our” refer to MyInsightAcademy and its operator.
This policy applies to myinsightacademy.com, our tutoring platform, support and interest forms, and our business interactions on WhatsApp. It covers students, parents and guardians, tutors, prospective users, and other people who contact us.
WhatsApp interactions also remain subject to the terms and privacy policies of WhatsApp and Meta. Their handling of information is described in the applicable WhatsApp privacy policy and Meta business terms, which are separate from this policy.
2. Information we collect and generate
Information you provide
We collect information that you, a parent or guardian, a tutor, or an administrator provides. This may include your name, email address, phone number, account credentials, role, support category, subject, messages, and other details included in a contact or join-interest request.
Account and profile information
Account records may include a name, email address, role, profile photo, timezone, reminder preferences, account status, tutor-student and parent-student relationships, and invitation, sign-in, password, and account-creation timestamps. Passwords are handled through our authentication provider; we do not display your password to tutors or other students.
Scheduling and tutoring records
We generate and store records needed to organize tutoring, including tutor assignments, availability, booking preferences, requested or confirmed lesson times, timezone, lesson duration, scheduling status, who proposed, changed, or cancelled a session, lesson notes, reminder status, and related timestamps. Parents may be linked to student records so they can assist with scheduling and communication.
Private messages and uploaded files
Private platform chats include conversation membership, sender, message text, delivery timestamps, and attachment details. Users may upload photos and image files in PNG, JPEG, GIF, or WebP format, and PDF documents. Larger images may be resized or converted in the browser before upload. Please do not upload information that is not reasonably needed for tutoring.
Information from other people
A parent, guardian, administrator, or tutor may provide information about a student, such as contact details, scheduling needs, lesson notes, or account relationships. If you provide information about someone else, you must be authorized to do so and should share only what is necessary.
3. WhatsApp and Kitty AI processing
We use the WhatsApp Business Cloud API to communicate with students, parents, tutors, and prospective users. When you message our business on WhatsApp, we may receive and process your phone number, WhatsApp profile information made available to the business, message text, voice notes, images, documents, other media, message and delivery metadata, and relevant conversation history.
A hosted assistant called Kitty, controlled by Swati Goel for MyInsightAcademy, may process this content to understand a request and prepare or provide a response. Depending on how Kitty is configured at the time, content may be sent to third-party AI model and infrastructure providers. Verified examples include OpenAI, which provides GPT models, and Anthropic, which provides Claude models. The provider can change, and other model or infrastructure providers may be used. You may contact us for information about the providers used for a particular current workflow.
AI and infrastructure providers may process prompts, message content, media or extracted content, conversation context, and generated responses to provide and secure their services. Their own contractual terms, settings, safety systems, logging, and retention practices may apply. We do not represent that messages sent through WhatsApp or to an AI system are never retained by Meta, model providers, or their infrastructure providers.
Limits of automated output
AI output can be incomplete, inaccurate, outdated, or inappropriate. A human should verify important information. The assistant is not a substitute for a tutor’s judgment or for professional medical, legal, financial, safety, or emergency advice. Do not use it for emergencies, high-risk decisions, academic misconduct, or automated decisions about another person’s rights or opportunities.
5. How we use information and applicable legal bases
We use personal information to:
- create, authenticate, administer, and secure accounts;
- connect students, parents, and tutors and manage assignments;
- schedule, confirm, reschedule, and remind people about lessons;
- provide private chat, file sharing, support, and WhatsApp responses;
- generate AI-assisted replies and improve response relevance;
- send invitations, service notices, and administrative emails;
- process interest requests and respond to questions;
- prevent misuse, investigate incidents, and enforce our Terms;
- maintain business and tutoring records and comply with law; and
- establish, exercise, or defend legal claims.
Where a privacy law requires a legal basis, we rely as appropriate on:
- Contract and requested steps when processing is necessary to provide tutoring or platform services or respond before services begin.
- Consent for activities that require it, including parent or guardian agreement for a minor and certain communications. Consent may be withdrawn, but withdrawal does not affect earlier lawful processing.
- Legitimate interests in operating and securing a tutoring service, communicating with users, keeping proportionate records, and improving support, balanced against individual rights.
- Legal obligations when records or disclosures are required by applicable law.
- Vital interests when processing is reasonably necessary to protect someone in an emergency.
The available legal bases and their names differ by country. Not every basis applies to every activity or user.
7. International processing and transfers
MyInsightAcademy primarily operates in Vietnam. Authorized online tutors may access information for assigned students from India or Singapore. Our providers and their subprocessors may process information in the United States and other countries where they or their infrastructure operate.
These countries may have privacy laws different from those where you live. Where required, we use a lawful basis and appropriate contractual or other safeguards for international processing, or rely on consent or necessity to provide a service you request where the law permits. Contact us if you want more information about safeguards relevant to your information.
8. Retention
We do not apply one fixed retention period to every record. We retain information only for as long as reasonably necessary for the purpose for which it was collected, including to provide tutoring and platform services, administer student-parent-tutor relationships, maintain lesson and business records, resolve disputes, prevent misuse, enforce agreements, and meet legal obligations.
Factors include whether an account or tutoring relationship remains active, whether records are needed to explain lessons, invoices, or communications, the sensitivity of the information, legal limitation periods, safety concerns, and applicable provider and backup deletion cycles. When information is no longer needed, we take reasonable steps to delete or de-identify it.
Deactivating an account currently prevents platform use but may retain tutoring records so shared lesson, scheduling, and conversation history remains coherent. Provider systems, including WhatsApp and AI services, may retain data according to their own applicable terms, settings, and legal requirements.
9. Security
We use measures intended to protect information, including authenticated access, role-based permissions, database row-level security, storage access rules, encrypted HTTPS transport, restricted administrative credentials, file type and size checks, and account deactivation.
No method of transmission or storage is completely secure. Users should protect passwords and devices, avoid sharing credentials, send only information needed for tutoring, and notify us promptly if they suspect unauthorized access.
10. Your privacy rights and deletion requests
Depending on applicable law, you may have rights to ask whether we process your information and to request access, correction, deletion, restriction, objection, withdrawal of consent, or a portable copy. You may also have the right to complain to an appropriate privacy or data protection authority.
Submit a request to hello@myinsightacademy.com. Describe the account, phone number, or interaction involved and the action you want us to take. To protect users, we may verify your identity and, for a child, the requesting adult’s authority. Rights may be limited by applicable law, another person’s rights, safety and fraud concerns, or the need to preserve shared tutoring and legal records.
Platform-account deletion
The platform does not currently offer a self-service deletion button. Email us with the subject “Account deletion request.” We will review the account, deactivate access where appropriate, and delete or de-identify eligible information. We will explain if particular records must be retained or cannot be separated from another person’s record.
WhatsApp and AI data deletion
Email us or contact the MyInsightAcademy WhatsApp number and identify the relevant phone number. Specify whether you want deletion of WhatsApp content, the platform account, or both. We will address data under our control subject to legal and technical limitations. You may also need to use WhatsApp’s own account and message controls for information controlled by Meta. Requests affecting OpenAI, Anthropic, or another provider may be subject to that provider’s contractual, security, and retention rules.
11. Children and minors
The service is intended for students who are at least 12 years old. Anyone below the age of legal majority where they live must use the service with the involvement and consent of a parent or legal guardian. We currently obtain parent or guardian agreement by phone or in person before a minor is taught or uses the service.
Parents and guardians should supervise a minor’s use, explain safe communication practices, and help decide what files or information are appropriate to share. They may contact us to review, correct, or request deletion of a child’s information, subject to verification and applicable limits.
If we learn that a child is using the service without required consent or is younger than 12, we may suspend access and take appropriate steps regarding the information. Requirements for children, including users under 13 or under 16, differ by country and may require additional parental notice or consent.
12. Changes to this policy
We may update this policy when our services, providers, or legal obligations change. We will post the revised policy with an updated effective date and provide additional notice when required by law or when a change materially affects how we use information.
13. Contact us
For privacy questions or requests, contact MyInsightAcademy, operated by Swati Goel, at hello@myinsightacademy.com. Our website is myinsightacademy.com.