Legal Document

Privacy Policy

Privacy Policy — United Arab Emirates · Version 2.0 · Effective date: 1st June 2026 · Last updated: 12th October 2026
Last updated: 12th October 2026

Your Data Protection

We implement comprehensive security measures to safeguard your information

UAE PDPL Aligned

Designed for the UAE PDPL, DIFC and ADGM data protection frameworks

Your Rights

Access, correct, or delete your personal data at any time

This Privacy Policy (“Policy”) explains how TutorCloud Technology Limited, a DIFC incorporated entity in the United Arab Emirates (“UAE”) with trade licence number CL13327, having its registered office at GA-00-SZ-L1-RT-208, Level 1, Gate Avenue, South Zone, Dubai International Financial Centre, Dubai (hereinafter “TutorCloud”, “we”, “us” or “our”), collects, uses, discloses, transfers, retains and otherwise processes Personal Data of individuals who access or use the TutorCloud.AI platform, including the website www.tutorcloud.ai, our mobile applications, learner and educator dashboards, AI-enabled tutoring tools, institutional consoles and any related digital services (collectively, the “Service”).

This Policy applies to Personal Data processed in the context of Users based in, or accessing the Service from, the United Arab Emirates, including the mainland UAE, the Dubai International Financial Centre (DIFC) free zone and the Abu Dhabi Global Market (ADGM) free zone, and to institutional customers regulated by the Knowledge and Human Development Authority (KHDA), the Abu Dhabi Department of Education and Knowledge (ADEK), the Sharjah Private Education Authority (SPEA) or any other UAE education regulator.

We process Personal Data as a Controller under Article 1 of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”) in respect of Users who register directly with us, and as a Processor when we process Student Personal Data under written instructions from an Institutional Customer (a school, training institute, university, tuition centre or educational agency). Where TutorCloud provides Services to Data Subjects located in the DIFC or ADGM, this Policy is read together with the DIFC Data Protection Law No. 5 of 2020 and the ADGM Data Protection Regulations 2021 respectively.

1.1 Legal Framework Applicable to This Policy

UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its Executive Regulations.
Federal Decree-Law No. 44 of 2021 establishing the UAE Data Office.
Federal Decree-Law No. 34 of 2021 concerning the Combating of Rumours and Cybercrime.
Federal Law No. 3 of 1987 (Penal Code) and Federal Law No. 15 of 2020 on Consumer Protection.
Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services.
Wadeema’s Law (Federal Law No. 3 of 2016) concerning Child Rights.
Cabinet Resolution No. 21 of 2013 concerning Executive Regulations of Federal Law No. 6 of 2010 on Credit Information (as applicable).
DIFC Data Protection Law No. 5 of 2020 and DIFC Regulations, where TutorCloud engages Users or Institutional Customers established in the DIFC.
ADGM Data Protection Regulations 2021, where TutorCloud engages Users or Institutional Customers established in the ADGM.
KHDA guidance for training institutes and private schools in the Emirate of Dubai; ADEK, SPEA and Ministry of Education (MoE) circulars concerning student data and safeguarding.
Where TutorCloud transfers Personal Data to or from the European Economic Area or the United Kingdom, the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) and the UK GDPR are applied on a supplementary basis.

1.2 What This Policy Does Not Cover

This Policy does not apply to (i) third-party services, websites or applications accessed through the Service; (ii) offline interactions unrelated to the Service; or (iii) Personal Data processed by an Institutional Customer under its own privacy notice where TutorCloud acts merely as a Processor and the Institutional Customer is the Controller.

Changes to this Policy and Contact

We may update this Policy from time to time. Material changes are notified through the Service, by email, or via your Institutional Customer, and we seek renewed consent where the law requires. We will not materially change how we handle Student Personal Data or Child Personal Data without prior notice to the School or Parent.

For any questions about this Policy, please contact us at:

TutorCloud Technology Limited (DIFC)

GA-00-SZ-L1-RT-208, Level 1, Gate Avenue, South Zone, Dubai International Financial Centre, Dubai, UAE · Trade licence CL13327

dpo@tutorcloud.ai

support@tutorcloud.ai

Contact Data Protection Officer