Privacy

Privacy and collection notice

This notice covers the waitlist forms on this website. The Tuta app will have its own privacy policy when it opens.

Who we are

Tuta is run by Tutatime Pty Ltd, ABN 70 703 280 139. You can reach us at support@tutatime.com.au.

What we collect

• Parents and carers: your first name, email address and postcode, your child's year level, what you're interested in, and any subjects, sports or instruments you choose to type in. We never ask for your child's name or date of birth.
• Tutors, coaches and music teachers: your first name, email address and postcode, what you would teach, your subject, instrument or sport if you add it, and how you would teach.
• Your permission: the exact words of the box you ticked, and when you agreed, confirmed your email or unsubscribed.

The forms are for parents, carers and teachers. They're not for children, so please don't fill them in for a child, and leave names and personal details out of the boxes you type in.

You don't have to give us anything. Without your email address, though, we can't tell you when Tuta opens.

Why we collect it

To email you about Tuta's launch if you joined as a parent, or about teaching on Tuta and when teacher sign-ups open if you joined as a teacher, and to see where interest is so we know where to start. We only start emailing you after you confirm your email address.

Where it's kept and who handles it

• Your details are stored in our own database, run for us by Supabase in its Sydney, Australia data centre.
• Our emails are sent through Zoho ZeptoMail, from its Australian data centre.
• Cloudflare hosts this website, so it sees your IP address and browser details whenever you open a page. It also runs the form's anti-bot check (Turnstile), which uses technical information from your browser, such as your IP address and browser details, to tell people from bots, and to improve its bot detection. Cloudflare is a United States company and may process this information outside Australia, including in the United States. We don't send Cloudflare your name, email address or answers.
• Our server sees your IP address when you send the form. We don't keep it with your details: to stop anyone flooding the form we keep only a scrambled, one-way version of it, for one day. Supabase's and Cloudflare's standard request logs may also hold it for a short time.

What we don't do

No advertising and no advertising trackers on these pages, and we never sell or rent your details. We don't give them to tutors, coaches or anyone else.

To see how many people visit and which pages they read, we use Cloudflare Web Analytics. It counts page visits and records things like the page, the website you came from, your browser type and your country. It uses no cookies, doesn't identify you or follow you to other websites, and is never joined to your waitlist details.

How long we keep it

We keep your details while you're on the list. When we stop sending launch updates we'll delete the list, and you can unsubscribe or ask us to delete your details at any time before then. If a sign-up isn't confirmed, our daily clean-up deletes its details 30 days after they first reached us, even if our form was sent again since. We send no more than three emails asking to confirm any one sign-up, and none in its last week, so every link we send stops working before then.

If someone sends the form again for a sign-up we already have (the same email address joining again as a parent, or again as a teacher), whether it was confirmed, not yet confirmed or unsubscribed, we don't change anything. If we email that address about it, the details sent travel only with the link in that email: the page the link opens shows them, and we use them only if the owner presses Confirm there within 7 days, and only once; otherwise our daily clean-up deletes them. If we don't email that address (for example because we already emailed it in the last day), we don't keep those details at all.

If one email address joins as both a parent and a teacher, we email the second confirmation once the first one is confirmed (within our limits on how many emails one address can get), and each link confirms only its own sign-up.

When you unsubscribe, it covers every sign-up for that email address, as a parent and as a teacher. We delete the details straight away and keep only the email address, marked as unsubscribed, so we never email you by mistake. Ask us and we'll delete that too. If someone later sends our form again with that address, we send one email asking the owner to confirm (no more than one a month) and change nothing unless they do. If you report one of our emails as spam, we stop all waitlist emails to that address and keep a scrambled code of it (explained below) so they never start again.

When you confirm your email, we keep a short record that you agreed (the words you ticked, and when), and later when that ended, so we can show we had your permission. It holds a scrambled code made from your email address with a secret key we keep separately, not the address itself, and none of your other details. We don't keep this record for people who never confirm, and we delete it two years after you unsubscribe or ask us to delete your details.

To limit how many emails any one address can get from us, we note the same scrambled code each time we email it, and delete that note after 7 days.

If an email to an address can't be delivered (it bounces), our email service tells us. We then stop emailing that address and keep a scrambled code of it with a partly hidden form of it (like j•••@example.com), so we don't keep trying; if that was a mistake, ask us and we'll lift it, and we keep a note that we did for two years. Each notice our email service sends us (about a bounce or a spam report) is logged with only its reference and its kind, so we never act on it twice, and we delete that log entry after two years.

Your choices

• Unsubscribe at any time with the link in any of our emails. It stops our waitlist emails to that address, whether you joined as a parent, a teacher or both.
• Ask to see, correct or delete your details by emailing support@tutatime.com.au.

Questions and complaints

Please contact us first at support@tutatime.com.au and we'll reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Last updated 30 October 2026.