Privacy Policy

YomoJomo Club respects your privacy. This policy describes how we collect, use, and protect your personal information.

We collect information you provide when creating an account, booking lessons, and using our platform. This information is used solely to provide and improve our services.

Your data is never sold. The safeguards we apply to it, how long we keep it, and how to have it deleted are described below. For any question about our privacy practices, contact us at info@yomojomoclub.com.

Google User Data

When you connect your Google account, YomoJomo Club accesses your Google Calendar to schedule and manage lessons:

• Create, update, and cancel calendar events (scope calendar.events) — we write lesson bookings and teacher availability to your Google Calendar and generate Google Meet links for lessons.
• Read free/busy availability ranges (scope calendar.freebusy) — to prevent double-booking. This returns only whether a time range is busy; we do not read event titles, descriptions, attendees, or other calendar contents.

We use this Google Calendar data solely to provide the lesson-scheduling features of our service. We do not sell it, use it for advertising, or share it with third parties. While your Google account is connected, we retain the OAuth credentials, calendar ID, and lesson scheduling records needed to provide synchronization. Disconnecting from your account settings revokes access where possible and removes the stored Google access and refresh tokens. You may also request deletion of your account data by emailing info@yomojomoclub.com.

YomoJomo Club's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we protect your data

We apply these safeguards to all personal information, including data received from Google APIs:

• Encryption in transit — all traffic between your browser, our servers, and our database is carried over TLS (HTTPS).
• Encryption at rest — our database runs on managed infrastructure that encrypts stored data at rest.
• Credential handling — Google access and refresh tokens are held only on our servers; they are never sent to the browser or to any third party. Account passwords are stored only as bcrypt hashes, never in readable form.
• Access control — every request is authenticated and authorized, so an account can reach only its own data. Administrative access is limited to a small number of authorized staff for support and operations.
• Data minimization — we request the narrowest Google scopes our features need, and we read only free/busy time ranges rather than calendar contents.

Retention and deletion

We keep personal information only as long as it is needed to provide the service or as required by law, and we delete or destroy it once that period ends. Google access and refresh tokens are removed as soon as you disconnect your Google account. To delete your account and its associated data, email info@yomojomoclub.com and we will carry out the request.

Sharing

We do not sell your information, and we do not transfer or disclose it to third parties for any purpose other than providing the features described in this policy. We do not use Google user data for advertising, and we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models.

To run the service we use a small number of providers that process data on our behalf, under contract and only on our instructions: Stripe (payment processing), Google (Calendar and Meet for scheduling), Amazon Web Services (email delivery and profile image storage), Supabase (database hosting), and Vercel (application hosting). Some of them process data outside the European Economic Area; where that happens we rely on an adequacy decision or on standard contractual clauses approved by the European Commission.

Who is responsible for your data

YomoJomo Club is operated by Agravity Labs, which is the data controller for the personal information described in this policy. You can reach us at info@yomojomoclub.com for any privacy question or request.

What we collect and why

• Account details — email address, display name, password (as a hash), optional phone number, time zone, and your role on the platform. If you sign in with Google we also store your Google account identifier and the email address on it.
• Profile content — for tutors, the introduction, experience, education and profile photo you choose to publish.
• Lesson and scheduling data — availability, bookings, cancellations, credits, and the calendar events we create for you when you connect Google Calendar.
• Payment data — your purchase history and a customer reference held at Stripe. Card numbers are handled by Stripe and never reach our servers.
• Learning activity — level test results, course progress, reviews and messages you send through the platform.

Legal bases for processing

• Performance of a contract — creating and running your account, scheduling and delivering lessons, syncing the calendar events you asked for, and processing payments.
• Your consent — connecting your Google Calendar. You give it in the Google consent screen and can withdraw it at any time by disconnecting, without affecting processing carried out before then.
• Legitimate interests — keeping the service secure, preventing abuse and fraud, and improving the features we offer, balanced against your rights.
• Legal obligation — keeping transaction and accounting records for the period the law requires.

Your rights

If you are in the European Economic Area or the United Kingdom, you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to how we process it, to receive it in a portable format, and to withdraw any consent you have given. To exercise any of these, email info@yomojomoclub.com; we will respond within one month. You also have the right to lodge a complaint with your national data protection supervisory authority if you believe we have handled your data improperly.