Safety

What we do

• Nobody is published without coming through selection, and publication is a separate, named, revocable decision. Revoking it takes the profile down automatically.
• A tutor cannot reach a student under 18. Enquiries and replies pass through the parent or guardian who confirmed the account.
• Contact details are never released by browsing. They are released against an enquiry, and every release is recorded.
• Children are never behaviourally profiled. The database rejects the attempt, so it cannot come back through a change of mind or a change of staff.
• Codes we email expire, cap wrong entries, and are rate limited per address, so a consent cannot be brute-forced.
• Sensitive administrative actions are written to a log that cannot be edited or deleted afterwards.
• A review will only ever be possible from somebody who actually made an enquiry, and no review appears without being moderated first. None exist today.

What we do not do yet

• We do not verify identity, qualifications or phone numbers. Those checks are defined but not running — see "What we check, and what we do not".
• We run no criminal record or police verification of any kind, and we do not imply one.
• We cannot verify anybody’s age, a tutor’s included. Age is declared.
• We do not monitor conversations between a student and a tutor. There is no messaging in the product to monitor.
• We do not supervise teaching. What happens in a lesson is between the people in it.
• There is no way to report a concern from inside the product yet. It has not been built.

If something goes wrong