Privacy Policy
Last updated: September 10, 2026
Tabshura is a private tutor that teaches on a live chalkboard. This policy explains what we collect, why, who else touches it, and how to get rid of it. We have tried to write it in plain language rather than legal boilerplate.
The short version: we do not sell your data, and we do not train models on it. We store your conversations only so they are still there when you come back, and you can delete everything in one click.
What we collect
Account information
- Your email address.
- A cryptographic hash of your password — never the password itself. If you sign in with Google we never receive a password at all.
- If you sign in with Google: your email address and basic profile information (name). Nothing else from your Google account.
Your tutoring sessions
- The messages you send and the tutor's replies.
- What was written on the chalkboard, so a session can be reopened where you left it.
- Images you choose to upload, such as a photo of a problem.
- Audio you speak, when you use the microphone. See “Voice” below.
Technical measurements
We record timing information about each turn — how long the tutor took to respond, and where that time went. We use it to make the tutor faster. It contains no message content.
What we do not do
- We do not sell your data. Not to advertisers, not to data brokers, not to anyone.
- We do not train models on your conversations.
- We do not read your conversations unless you ask us to — for example when you report a problem and want us to investigate what happened.
- We do not show advertising.
How we use what we collect
- To provide the tutoring itself, including saving your boards and history.
- To sign you in and keep your account secure.
- To send you essential email: address verification and password resets.
- To diagnose faults and improve responsiveness.
Voice
When you speak to the tutor, your microphone audio is sent to our speech-recognition provider to be turned into text. This connection is made directly from your browser to that provider. When the tutor speaks, the sentence text is sent to the same provider to be turned into audio. Voice is never on by default — it starts only when you press the microphone or the space bar, and your browser will show its own recording indicator while it is active.
Who else processes your data
We use a small number of service providers to run Tabshura. They process data on our instructions and are not permitted to use it for their own purposes.
| Provider | What it does |
|---|---|
| OpenAI | Generates the tutor's explanations. Does not train on API data. |
| ElevenLabs | Speech recognition and the tutor's voice. |
| Neon | Hosts our database (United States). |
| Railway | Runs our application servers (United States). |
| Vercel | Serves the website (United States). |
| Resend | Sends verification and password-reset email. |
| Optional sign-in, only if you choose “Continue with Google”. | |
| Cloudflare | Domain name resolution. |
We may also use an application-monitoring service to record technical traces of a turn for debugging. Where that is enabled it holds the same session content described above.
Where your data is held
Our servers and database are in the United States. If you use Tabshura from outside the United States, your data is transferred there.
How long we keep it
- Your account and conversations: until you delete them, or until you delete your account.
- When you delete your account: your conversations, boards, and uploaded images are removed from our database.
- Provider-side copies: some providers keep short-lived logs for abuse monitoring — typically up to 30 days — after which they are deleted.
Deleting your data
You can delete your account and its contents yourself: “Delete account”, under “Log out” in the sidebar — no email exchange required. You can also delete individual conversations at any time. If you would rather we did it for you, write to support@tabshura.com.
Security
- All traffic is encrypted in transit with TLS.
- Passwords are stored only as hashes.
- Our database is managed, access-controlled, and encrypted at rest by our provider.
- Access to production systems is limited to the people who need it.
No system is perfectly secure. If you believe you have found a vulnerability, please tell us at support@tabshura.com before disclosing it publicly.
Children and students
Tabshura is not intended for children under 13, and we do not knowingly collect information from them. If you are under 18, please use Tabshura with the permission of a parent, guardian, or teacher.
If you are a parent or guardian and believe your child has created an account, contact support@tabshura.com and we will delete it.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to certain processing, and to withdraw consent. You can do most of this yourself in your account settings; for anything else, email support@tabshura.com and we will respond.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Changes to this policy
If we change this policy we will update the date at the top, and for significant changes we will tell you by email or in the app.
Contact
Questions about privacy: support@tabshura.com. See also our Terms of Service.