Student Data & Retention Policy

RemedyHub Pro is used by independent tutors and tutoring businesses (“tutors”) to manage instruction for their students, many of whom are minors. This policy explains what student data is stored, how long it is kept, and how it can be corrected or deleted.

RemedyHub Pro is operated by Silo Security LLC (“we”, “us”), the legal business entity behind the service. For tutor account, billing and website data, Silo Security LLC is the data controller. For student records entered by a tutor, the tutor (or their tutoring business) is the data controller and Silo Security LLC acts as the data processor, storing and processing that data on the tutor's behalf and only on their instructions.

Our legal bases for processing are: performance of a contract (providing the subscribed service to tutors), consent (parent notification emails, which tutors may withdraw at any time), and legitimate interests (security, audit logging, and service improvement using aggregated, de-identified data).

Profile basics: first and last name, grade level, subject focus, learning status and notes about the student's current bottleneck or skill gap.

Work samples: scanned or photographed worksheets, papers and quizzes a tutor uploads, together with the date, category, score and any tutor feedback notes.

AI-generated content: diagnostic summaries (identified error patterns and skill gaps) and remediation lesson plans generated from information the tutor provides.

Progress data: mastery velocity, remediation hours, resolved error patterns and milestone notes shown on reports and in the parent portal.

Parent contact details: a parent's email address, when a tutor provides one, used only to send notifications about lesson plans, reports and the parent portal link.

To provide the service: diagnosing uploaded work, generating lesson plans, tracking progress, and producing reports.

To notify parents, only when the tutor has provided a parent email and only about that student's own plans and reports.

Student data is never sold, never used for advertising, and never used to train AI models.

Worksheet images and tutor-entered diagnoses are sent to our AI processing provider solely to generate the requested diagnosis or lesson plan. Requests are not stored by the AI provider and are not used to train models.

AI output is a professional aid, not a final determination. Tutors should review every diagnosis and plan before acting on it or sharing it with a family.

Active workspaces: student records, papers, lesson plans and progress data are kept for as long as the tutor's account is active.

Deleted items: when a tutor deletes a paper, lesson plan or student, the record is removed from the live database immediately. Residual copies in encrypted backups expire within 30 days.

Closed accounts: when a tutor deletes their account, all students, papers, plans, team memberships and reports in that workspace are permanently deleted within 30 days.

Audit events: the workspace activity log (invitations, billing changes, AI generations, report exports, parent portal visits) is retained for 24 months for security and accountability, then deleted.

Parent portal: each student has a private, revocable portal link. Regenerating or deleting the student immediately invalidates the old link.

Students do not use RemedyHub Pro directly and no student accounts exist. All student data is entered by the tutor, who is responsible for having the appropriate permission from the student's parent or guardian.

Parents can view their child's data through the private portal link, and may ask the tutor at any time to correct or delete their child's record. Tutors can also contact us (below) and we will action verified deletion requests.

Data is encrypted in transit and at rest. Every workspace is isolated: tutors can only see students in their own business, enforced at the database level.

Payments are processed by Paddle.com Market Ltd (“Paddle”), our merchant of record and payment processor. When you subscribe, Paddle receives your name, email, billing address and payment details to process the transaction, handle taxes and prevent fraud. Paddle acts as an independent controller for billing data; its processing is governed by Paddle's own privacy policy. Payment card details never touch RemedyHub servers.

Tutors can export, correct or delete any student record from within the app at any time, and can request full account and workspace deletion by emailing us at the address below.

Parents should contact their child's tutor first. For anything unresolved, or to report a concern, email privacy@siloseclabs.com and we will respond within 30 days.