Privacy Policy

Haddee Education, LLC

Effective date: September 27, 2026

This Privacy Policy explains how Haddee Education, LLC handles personal information across our websites and services, including the tutoring service at tutoring.haddee.com, accounts, prepaid tutoring purchases, bookings, messages, reviews, educator administration, and support. It applies to Students, Parents and Guardians, Educators, purchasers, and visitors. The same privacy practices apply to Haddee Education, LLC’s counseling, research, internship, camp, and other services. References to tutoring-specific features describe those features where offered; not every website offers every feature. Website-specific analytics settings are described in Section 10 and the applicable website’s privacy details.

Tutoring Student participation is for ages 13 and older. Educators must be at least 18. SMS is available only to adult Educators; Students do not receive texts. Haddee does not record tutoring Sessions. We do not sell personal information or share it for cross-context behavioral advertising.

This is a privacy notice, not an agreement to every use of your information. Accepting the User Terms or Educator Agreement, or continuing to use the Site, does not supply a separate consent required by law. Local rights apply according to the relevant law's scope and conditions.

1 Definitions

Personal information means information relating to an identified or identifiable person. Sensitive information has the meaning assigned by applicable law; examples can include tax identifiers, account credentials, financial account information, health information, and certain children's information. Not every jurisdiction classifies the same information as sensitive.

Haddee, we, us, or our means Haddee Education, LLC. Service or Site means Haddee Education, LLC’s websites and services described above. An Educator, Teacher, Tutor, or Coach is an adult approved to provide instruction. A Student receives tutoring. A Parent or Guardian is a Student's parent or legal guardian. Other service definitions appear in the User Terms of Service.

2 Who is responsible and how to contact us

Haddee Education, LLC is responsible for the processing described in this notice and acts as controller where applicable. Contact our privacy team at hello@haddee.com, +1-858-449-9689, or 10459 Roselle St Ste D, San Diego, CA 92121, United States. Website: tutoring.haddee.com.

You may contact us about any privacy question, request, applicable local representative, or complaint. No special email subject line is required. A privacy inquiry does not enroll you in marketing or SMS.

3 Information we collect and its sources

Accounts and age eligibility. We collect the name, email, sign-in information, account preferences, profile information you supply, and age information used to establish eligibility and identify minors. Age information may be reduced to birth month and year and an age-status flag for ongoing administration. We request a Parent or Guardian's name and email for Students under 18. The information used by an available social sign-in provider, such as Google, depends on the sign-in permissions and includes the identifying information needed to authenticate your account.

Purchases and tutoring. We collect Class and Educator selections, Hours and Trial balances, booking details, attendance and cancellation records, transaction and refund records, and any assignments, feedback, learning information, messages, or support materials you provide. Avoid supplying sensitive information unrelated to the requested tutoring. Haddee does not record Sessions or maintain a routine library of Session recordings.

Payments. Stripe processes Student and purchaser payments through its payment interface. We receive transaction identifiers, amounts, status, and the billing or payment-summary information needed to administer purchases and refunds. Haddee does not receive or store your full payment-card number. Educator payout providers, including Veem and PayPal where available, process payout information under their own applicable notices; we receive the information needed to arrange and reconcile payments.

Educator administration. We collect contact and profile information, qualifications, approved service location, identity and eligibility information, rate and booking records, performance and complaint information, payout details, and tax documentation required for the Educator's circumstances, including an appropriate Form W-9 or W-8. Tax identifiers are used for tax administration, verification, reporting, withholding, and legally required related purposes, not advertising. Any background-report authorization required by law is obtained separately. The Educator Agreement explains the working relationship and notice of acceptance; a handwritten signature is not assumed.

Educator SMS. We collect the verified mobile number, requested verification activity, enrollment disclosure and consent records, category preferences, opt-out and renewed-consent records, message contents and identifiers, and delivery status needed for the program. Details appear in Section 13 and the SMS Terms.

Technical information. The Site and its service providers process IP address, browser and device information, request and error logs, timestamps, security events, and information about use of Site features. General location may be derived from IP address. Optional analytics can collect page views, interactions, and cookie or device identifiers when enabled under Section 10. We do not use this tutoring Site to collect precise GPS location, Bluetooth or Wi-Fi identifiers, or mobile-app hardware inventories.

We receive information directly from you, from your interactions with the Site, and where relevant from your Parent or Guardian, purchaser, Educator, sign-in provider, payment or payout provider, screening provider, or persons reporting a support or safety concern. We do not obtain internship applications or employer-partner data as part of this tutoring service.

4 How we use information

We use relevant information to authenticate accounts and assess age eligibility; deliver and administer our services; manage Hours, bookings, cancellations, and refunds; communicate account and Session information; enable permitted messages and reviews; administer Educator eligibility, compensation, and tax obligations; provide support and accessibility assistance; investigate safety concerns, fraud, and misuse; secure and improve the Service; honor privacy and messaging choices; and meet legal obligations or establish and resolve claims.

Optional analytics and marketing email use the choices and legal grounds described below. SMS consent is limited to the Educator program's disclosed categories. We do not use Student learning records or private messages for public advertising, sell them, or use them for cross-context behavioral advertising. Separate Student publicity, such as a testimonial, requires appropriate permission; a general content license is not that permission.

5 Who receives information

Service providers. We disclose necessary information to providers supporting hosting and storage, authentication, email, SMS, security and error monitoring, analytics, payments, payouts, screening, and tax administration. Providers may include Vercel and database services, Google for available sign-in and analytics, Stripe, Veem, PayPal, and Twilio. We apply appropriate contractual restrictions to providers processing information on our behalf. Some providers also act independently for their own legally required payment, fraud-prevention, or account functions, as explained in their notices.

Tutoring participants. Educators receive the Student identity, booking, learning, and communication information reasonably needed for their services. Students receive the Educator's public profile, booking details, and approved meeting information. Zoom, Google Meet, or another approved meeting service processes information when you join its meeting. An Educator's access does not authorize unrelated solicitation, personal texting, private recordings, or independent advertising use.

Parents and Guardians. For Students under 18, we may send account, purchase, attendance-reminder, and safety notices to the parent contact supplied. An attendance reminder may include the session details and current meeting link. We verify identity and authority as appropriate before responding to requests for access or changes, and respect rights the Student has independently. Listing a parent or sending that person a notice does not make the parent a contracting party, impose payment liability, or replace legally required consent.

Public content. Educator profiles and reviews deliberately submitted for public display may be visible to other users and the public. In-Service messages are not public, but authorized Haddee personnel may review them for support, moderation, safety, and related disclosed purposes. Do not post personal information you do not want public in a review.

Other disclosures. We may disclose information when necessary and legally permitted for legal process, safety, fraud prevention, protection of rights, or a business reorganization or transfer, with applicable safeguards and notices. We may disclose information at your direction or with valid consent. We may use or disclose properly de-identified or aggregated information subject to measures preventing identification or re-identification. These provisions do not override the SMS non-sharing rule in Section 13 or mandatory Student protections.

6 Retention and deletion

We keep information for the period reasonably needed for its disclosed purpose, considering the account or service relationship, outstanding bookings and balances, applicable tax and accounting duties, security needs, dispute periods, legal holds, and your choices. These criteria apply separately to each category; a need to preserve a payment record does not justify retaining every message or profile field.

Account and learning information is retained for service administration and any specifically justified period after closure. Financial and tax records are retained for applicable reporting and recordkeeping periods. Security logs and message contents are limited to operational, security, and support needs. Consent evidence is retained as necessary to demonstrate compliance; a limited suppression record may remain to honor an opt-out. Cookie and analytics retention depends on the configured tool and your choices. We delete or de-identify information when no longer needed, subject to lawful backup cycles and exceptions. We do not claim that FERPA imposes a universal five-year retention period.

You may request deletion even if unused Hours, a payment issue, or a dispute remains. We may preserve only the limited records necessary and lawfully permitted to address those matters and explain relevant exceptions. Requesting privacy rights does not require forfeiting Hours. Closing an account, deleting personal information, and receiving a refund are separate matters governed by applicable law and the User Terms.

7 International processing and transfers

Haddee is based in the United States. Information may be processed in the United States and in countries where approved Educators or service providers operate. Other countries may have different protections. We must satisfy applicable transfer requirements; accepting these terms or using the Site is not blanket consent to an international transfer.

Where EU or UK law requires a safeguard for a restricted transfer, the applicable arrangement must use a valid adequacy decision, approved contractual safeguards such as EU Standard Contractual Clauses and an appropriate UK mechanism, or another lawful basis. A recipient's participation in the Data Privacy Framework is relevant only where that recipient is certified and the transfer is covered; this policy does not claim that Haddee is certified. Contact us for information about safeguards applicable to your information and an available copy, subject to lawful redactions.

Where China's PIPL or another local transfer law applies, we provide required notices, obtain separate consent where required, and satisfy applicable assessment, contractual, certification, or other legal requirements before the affected transfer. An overseas Educator may not independently transfer Student information beyond the approved service arrangement.

8 Children and teenagers

United States. This tutoring service does not permit participation or accounts for children under 13, including through someone else's account. Parental permission alone does not create an exception to that service rule. If we learn that information was collected from a child under 13, we take the steps required by COPPA and other applicable law, including stopping unauthorized collection and deleting information as required. Contact hello@haddee.com to report a concern.

Students ages 13–17. The User Terms permit direct purchases with authorized funds and preserve applicable minor-contract rights. That does not eliminate a separate parental privacy consent where law requires one. Parent contacts are used as described in Section 5. California registered users under 18 may request removal of content they posted, subject to statutory exceptions; removal may not eliminate independently retained copies. We do not use minors' information for cross-context behavioral advertising.

EU and UK. When consent is the basis for providing an online service directly to a child, required parental authorization depends on the applicable country's digital-consent age. The EU default is 16, with member states permitted to lower it to at least 13; the UK threshold is 13. We obtain any required authorization before the affected consent-based processing. Other legal grounds require their own conditions and do not provide a way to avoid children's protections. Privacy permission does not automatically bind a parent to a purchase contract.

China and other jurisdictions. Where PIPL applies, information about children under 14 is sensitive information and requires the applicable parental consent and special safeguards. Thus a 13-year-old's eligibility under the User Terms does not itself authorize processing under PIPL. Other mandatory local child protections also apply; services must not begin until the required permissions and safeguards are in place.

School records. FERPA applies only where its legal conditions are met, such as a qualifying arrangement with a covered educational institution. Where Haddee receives records under such an arrangement, we follow the applicable purpose, disclosure, access, and deletion restrictions. FERPA rights can transfer to a Student at age 18 or upon attending a postsecondary institution at any age. Ordinary direct-to-family tutoring does not by itself establish FERPA coverage.

9 Security

We use reasonable technical and organizational safeguards appropriate to the information and risks, including access restrictions and protections for transmission and storage. Sensitive tax and payout information is restricted to authorized personnel and providers with a legitimate need. Providers and Educators must protect the information they receive as applicable to their roles. No system can guarantee absolute security. Protect your account credentials and report suspected compromise promptly. Do not send sensitive payment, tax, or Student records through ordinary SMS.

10 Cookies and tracking choices

Necessary cookies and similar storage support authentication, security, and essential functions. Optional preferences and analytics may use additional storage or identifiers. Google Analytics, when enabled, helps us understand Site use; analytics information is not necessarily anonymous when collected. Security and error monitoring is used for operational protection with appropriate limits, not advertising.

We obtain consent before nonessential cookies where required and provide a way to withdraw it. You may use available cookie controls, browser settings, or contact hello@haddee.com for assistance. Browser settings alone may not stop every form of processing. We do not use advertising cookies for cross-context behavioral advertising. Global Privacy Control and other legally recognized opt-out signals are honored as applicable; an ordinary cookie selection does not override a binding signal. Do Not Track does not otherwise change our practices.

Google explains its handling of partner-site information at Google partner sites. Its Analytics opt-out add-on provides an additional option; it does not replace our required controls.

Analytics on home.haddee.com. Google Analytics runs only on the production Home website after you select “Accept.” Declining leaves the website fully usable. Analytics stays off on the contact page, even after a previous acceptance, and we do not send contact-form contents to Analytics. When enabled, it may receive page views, referral sources, browser and device information, approximate location, and interactions such as scrolling or service-link clicks. We use aggregate reports to improve the website. Advertising personalization and Google Signals are disabled. Page URLs sent by our tag exclude query strings and fragments.

Home saves your choice in this browser’s local storage. After acceptance, Analytics may set first-party cookies such as _ga, scoped to this host. Use “Privacy choices” in the footer to withdraw consent; this disables tracking, clears accessible Home Analytics cookies, and reloads the page. If browser storage is unavailable, the choice lasts for the current page. Your Home analytics choice applies to home.haddee.com. Analytics configuration and choices may differ on other Haddee websites. The Home website privacy details provide additional information about this website’s contact form, Google review content, and privacy choices.

11 Security incident notices

We investigate suspected personal-data breaches and provide individual and regulatory notices when required by applicable law, using the relevant legal trigger and deadline. GDPR and UK GDPR may require authority notification within 72 hours of awareness, where feasible, and notice to individuals without undue delay where there is a high risk. California's applicable breach law requires timely notice, including its 30-calendar-day deadline subject to statutory exceptions and applicable Attorney General reporting. Other jurisdictions have their own requirements. We do not delay a mandatory notice while waiting for a separate internal confirmation period.

12 Requests and choices for all users

You may contact us to request access, correction, deletion, information about processing, or withdrawal of a consent. Applicable law determines the scope, exceptions, response periods, portability, objection, restriction, appeal, and complaint rights. We explain a refusal or limitation where required. You may complain to the appropriate regulator without first contacting us.

Provide enough information to identify your request. We request identity or authority evidence only when appropriate and proportionate; do not send a government identifier unless specifically needed through an appropriate secure process. No special subject line is required. We do not require account creation to exercise rights. Withdrawal of consent does not affect earlier lawful processing. Essential information may be needed to deliver a requested service, but optional consent is not a condition of unrelated service.

13 Email and Educator SMS

We send necessary account, booking, receipt, and service emails. Optional promotional emails use appropriate consent or another legally permitted basis and include an unsubscribe method. Unsubscribing from marketing does not stop necessary transactional email. We honor applicable opt-out periods, including the CAN-SPAM deadline of 10 business days. An EU or UK existing-customer exception is used only if the applicable electronic-marketing rules permit it; a general legitimate interest does not replace those conditions.

Only Educators aged 18 or older may receive SMS. A requested verification code authorizes that verification step only. Recurring booking, booking-request, and cancellation alerts require separate optional enrollment; payout confirmations require an additional selection. The program sends no Student or marketing texts, Session reminders, no-show inquiries, or appeal decisions. Consent is not a condition of teaching, purchasing, or payment.

Reply STOP to unsubscribe or HELP for help, or contact hello@haddee.com. We also honor reasonable opt-out requests through settings, email, telephone, and ordinary-language messages. Message frequency varies; message and data rates may apply. Restarting requires renewed enrollment and any necessary carrier unblock. The SMS Terms govern the detailed procedures.

We do not sell or rent mobile numbers or SMS consent records, share mobile information with third parties or affiliates for their marketing, or share SMS opt-in data for another party's own use. Necessary information may be provided to Twilio, carriers, and providers solely to operate and support messaging on our behalf with applicable safeguards, or disclosed when legally required. No general sharing clause in this policy overrides this protection.

14 California privacy rights

Where the CCPA as amended by the CPRA applies, you may have rights to know and access information, correct it, request deletion, receive portable information, opt out of sale or sharing, limit qualifying uses of sensitive information, and receive nondiscriminatory treatment. The information categories, sources, purposes, recipients, and retention criteria are described in Sections 3–6. They include identifiers, account and billing information, commercial and booking records, internet activity, general location, educational and professional information, profile or other content you provide, and sensitive credentials or Educator tax information where collected.

We do not sell personal information for money or other valuable consideration or share it for cross-context behavioral advertising. We do not use sensitive information to infer characteristics or for unrelated advertising. We honor any applicable opt-out or limitation rights and recognized signals. You may contact us about disclosures for third-party direct marketing under California Civil Code Section 1798.83.

Submit requests to hello@haddee.com or our contact address. Authorized agents may act with appropriate authority. Access, deletion, and correction requests are acknowledged within 10 business days and generally answered within 45 calendar days of receipt, with a permitted extension and notice when necessary. Applicable sale/sharing opt-outs and qualifying limitation requests are processed as soon as feasible and no later than 15 business days. We do not require identity verification for an opt-out where prohibited. Other requests follow their applicable legal periods.

You may browse without registering, although technical information is still processed. The policy is linked from the Site. Account settings and our privacy contact provide ways to correct information. Section 21 explains change notices, and Sections 8 and 10 address minor-content removal and browser signals.

15 EU and UK privacy rights

Where GDPR or UK GDPR applies, we use the legal basis appropriate to each purpose: contract necessity for requested account, booking, and payment services; applicable legal obligations for required records and disclosures; legitimate interests for proportionate security, fraud prevention, support, and improvement that do not override your rights; consent for optional cookies, marketing where required, and other consent-based activities; or protection of vital interests in a qualifying emergency. A U.S. legal obligation is not automatically an Article 6(1)(c) basis; the applicable EU or UK requirements must be met. We consider children's interests in any balancing assessment.

Special-category information requires an applicable Article 9 condition in addition to an Article 6 basis. Criminal-record processing has separate restrictions. Voluntarily sending sensitive information is not automatically explicit consent to unrestricted use.

Depending on the legal conditions, you may request access, correction, erasure, restriction, portability, and information about recipients and transfers; object to legitimate-interest processing; object to direct marketing; and withdraw consent. You have protections concerning solely automated decisions with legal or similarly significant effects. Haddee does not currently make such decisions solely by automated processing.

Requests are generally answered within one month, with up to two further months where permitted and notice within the initial period. Requests are generally free, subject to lawful exceptions. Additional identity evidence is requested only where justified. You may complain to an EU supervisory authority or the UK Information Commissioner's Office. Contact Haddee for details of applicable transfer safeguards and local representation. Nothing here substitutes a U.S. email address for a legally required local representative.

16 China privacy rights

Where PIPL applies, processing requires an applicable statutory ground, such as valid consent, contract necessity, or a qualifying legal obligation. PIPL does not provide a general commercial legitimate-interest ground equivalent to GDPR. Required separate consent, children's safeguards, sensitive-information notices, impact assessments, transfer measures, and local representation must be satisfied for the affected processing.

You may have rights to know and decide, restrict or refuse processing, access and copy information, correct it, delete it when statutory conditions apply, withdraw consent, request eligible transfers, and obtain an explanation or reject qualifying solely automated decisions. Eligible relatives may exercise certain rights concerning a deceased person's information. Contact hello@haddee.com; we respond within the applicable legal period and explain any lawful refusal. You may complain to the competent Chinese personal-information authority. Section 7 addresses transfers and Section 8 addresses children under 14.

17 Canada privacy rights

Where Canadian federal or provincial privacy law applies, you may request access and correction, information about processing and transfers, and withdrawal of consent subject to lawful conditions. Quebec residents may have additional rights, including eligible portability and deindexation rights. We apply the consent, security, accountability, and transfer safeguards required by applicable law. Contact our privacy team to exercise rights or raise a complaint. You may also contact the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.

18 Brazil privacy rights

Where Brazil's LGPD applies, you may have rights to confirmation and access, correction, anonymization, blocking or deletion of unnecessary or unlawfully processed information, eligible portability, information about sharing and consent choices, withdrawal, and review of qualifying automated decisions. Processing requires an applicable legal basis, and children's information and international transfers have additional protections. Contact our privacy team or the Autoridade Nacional de Proteção de Dados about applicable rights and complaints.

19 Other international users

Other jurisdictions may provide additional rights, including local request, appeal, consent, retention, transfer, and children's protections. We honor mandatory protections where they apply. Availability of a Service varies with the ability to lawfully provide it. This policy does not promise service in every country or shift Haddee's compliance responsibilities to users.

20 Other websites and providers

Third-party sites, sign-in tools, payment services, and meeting services may have their own privacy notices. Review those notices when using their services. Their independent processing is governed by their applicable responsibilities; this does not exclude Haddee's own duties for provider selection, disclosures, or processing on its behalf.

21 Policy changes

We post changes with a revised effective date and provide appropriate notice of material changes. We obtain additional consent where required before a changed use. Continued use is not deemed consent to optional processing, marketing, recording, or an international transfer. Changes do not remove existing mandatory rights or reinstate withdrawn consent.

22 Contact and related policies

For tutoring, the User Terms govern use and purchases; the Educator Agreement governs educator services and compensation; and the SMS Terms govern optional adult-Educator texts. This Privacy Policy explains information practices and does not add a separate arbitration agreement or authorize practices inconsistent with mandatory law.

Contact Haddee. Haddee Education, LLC maintains its office at 10459 Roselle St Ste D, San Diego, CA 92121, United States. Questions, complaints, billing requests, privacy requests, and legal notices may be sent to hello@haddee.com or by mail to Haddee Education, LLC, 10459 Roselle St Ste D, San Diego, CA 92121, United States. Please direct all postal correspondence to this San Diego address. Telephone: +1-858-449-9689. An email notice does not require a duplicate postal mailing unless applicable law requires otherwise.