1. Who we are
broke money (“we”, “us”, “our”) operates afterhours.study and Afterhours (the “Service”). We are based in New Zealand.
This Privacy Policy explains how we collect, use, store, and share personal information when you visit our website, join the waitlist, create an account, or use the Service, including the tutoring marketplace.
Questions about privacy can be sent to legal@afterhours.study or through https://afterhours.study/contact.
2. Scope
This policy applies to personal information we handle about visitors to our website, waitlist sign ups, account holders, tutors and tutor applicants, students who book tutoring, and enterprise end users whose organisation has licensed the Service.
If your school or employer provides access through an enterprise agreement, your organisation may also have its own policies. Where those policies apply to data your organisation controls, they may take precedence for that portion of your use.
This policy is written to meet our obligations under the Privacy Act 2020 (New Zealand). Where the GDPR, CCPA/CPRA, CalOPPA, or COPPA apply to you, the extra sections below also apply.
3. Information we collect
We collect only what we reasonably need to run the Service, keep accounts secure, and improve your experience. Depending on how you use afterhours, this may include the following.
Email address. We collect your email when you join the waitlist, create an account, sign in, contact us, or subscribe to product emails.
First name and last name. We collect the name you give us on signup, onboarding, your profile, a waitlist form, a tutor application (including legal name and display name), or billing.
Phone number. We do not require a phone number to create an afterhours account. If you pay, complete identity verification, or set up tutor payouts, Stripe may collect a phone number to process that transaction. You may also include a phone number if you type one into a support message or session note.
Address, state, province, postcode, and city. We do not require a postal address to create an account. Stripe may collect billing or payout address details when you subscribe, pay for tutoring, or onboard as a tutor. Waitlist and profile forms may collect country. Tutors who offer in-person sessions may add a public location note (for example a campus or suburb), which is not a home address and must not be one.
Social sign-in profile information. If you sign in with Google, we receive the profile information Google shares with us, typically your name, email address, and profile photo, according to your Google account settings. We do not currently offer Facebook or X (Twitter) sign-in. Enterprise accounts may receive basic profile information from your organisation’s identity provider.
Other account and study information, such as username, password or authentication credentials, institution, programme, year of study, notes, flashcards, courses, assignments, files you upload, study activity, progress, preferences, and profile details you choose to provide.
Usage and device information, such as pages or features used, approximate location derived from IP address, browser type, device identifiers, log timestamps, referrer, and diagnostic data when something goes wrong.
Communications, such as messages you send to support, feedback you submit, and records of emails we send to you.
Billing information. If you subscribe or pay for tutoring, Stripe collects payment card or billing details. We receive limited billing metadata (for example subscription status and invoice references), not your full card number.
Waitlist information. If you join before full access opens, we collect the details you submit on the waitlist form, such as name, email, country, and school or university.
Tutoring information. If you apply to tutor, book a session, or appear on a listing, we collect the extra information described in Tutoring marketplace below.
4. How we use information
We use personal information to provide, maintain, and personalise the Service; create and secure your account, authenticate you, and prevent abuse; process subscriptions, trials, tutoring payments, and billing through Stripe; operate the tutoring marketplace, including applications, listings, bookings, payouts, reviews, and disputes; send service messages, security alerts, and, where you have agreed, product updates or marketing; respond to support requests and improve help content; analyse aggregated usage to fix bugs, improve performance, and develop features; comply with law, enforce our Terms of Service and Tutoring Code of Conduct, and protect users and the Service; and respond to reports of misuse, including alleged copyright infringement, academic integrity breaches, harassment, or tutoring disputes.
We do not sell your personal information. We do not show third-party advertising on the Service. We do not currently use remarketing networks (such as Google Ads, Meta, Bing Ads, Pinterest, or similar) to advertise to you on other sites or apps.
You should only upload or share study content you are permitted to use. Uploading copyrighted or restricted materials, or using afterhours in ways that breach academic integrity rules, is prohibited under our Terms of Service.
5. Legal bases (GDPR)
If the GDPR or UK GDPR applies to you, we process personal information only where we have a legal basis. Depending on the activity, that may be:
- performance of a contract — to create your account, deliver the Service, process payments, and provide tutoring bookings you request
- legitimate interests — to keep the Service secure, prevent abuse, understand how it is used, improve features, and communicate about the Service, where those interests are not overridden by your rights
- consent — for optional marketing emails and, where required, non-essential analytics cookies; you may withdraw consent at any time
- legal obligation — where we must keep records for tax, accounting, consumer law, or to respond to a lawful request
You may object to processing based on legitimate interests, and you may withdraw consent without affecting the lawfulness of processing before withdrawal. See Your privacy rights and GDPR rights below.
6. Emails
We send emails to operate the Service and, where you have agreed or where the message is part of the service, to tell you about afterhours. That includes account verification, security alerts, booking and payout notices, support replies, trial and billing reminders, and product updates you can opt into.
We send email using Resend. Resend processes recipient addresses and message content on our instructions. Resend’s Privacy Policy is at https://resend.com/legal/privacy-policy.
You can opt out of non-essential marketing emails using the unsubscribe link in those messages or by contacting us. You cannot opt out of emails that are necessary to provide the Service (for example password resets, security notices, or tutoring booking confirmations) while you have an account.
7. Payments
Users can pay for afterhours products and services, including Pro subscriptions, add-ons, and tutoring sessions. Tutors can receive payouts for booked sessions.
Payments, identity verification, and tutor payouts are processed by Stripe. Stripe may collect your name, email, payment card details, billing address, phone number, bank account details (for Connect payouts), and identity documents (for Stripe Identity). Stripe’s Privacy Policy is at https://stripe.com/privacy.
We do not store your full card number on afterhours servers. We receive payment status, invoice and subscription references, Connect account identifiers, payout request records, and identity verification status as needed to run billing and tutoring.
8. Analytics and tracking
We use analytics and related tools to understand how the Service is used, fix bugs, and improve performance. These tools may set cookies or similar identifiers and may collect device, usage, and approximate location information.
We may use Google Analytics. Google’s Privacy Policy is at https://policies.google.com/privacy. Google Analytics help is at https://support.google.com/analytics/answer/6004245. Where Google provides an opt-out browser add-on, you can use it at https://tools.google.com/dlpage/gaoptout.
We may use PostHog for product analytics (for example page views and feature use, identified only when you are signed in). PostHog’s Privacy Policy is at https://posthog.com/privacy.
We may use Datadog for application monitoring and real-user diagnostics so we can detect errors and keep the Service reliable. Datadog’s Privacy Policy is at https://www.datadoghq.com/legal/privacy/.
Promo and marketing short links may record click analytics (including approximate city and country derived from network location headers, device type, and referrer) so we can understand campaign performance.
We do not use Firebase Analytics, Matomo, Clicky, Statcounter, Flurry, Mixpanel, or Unity Analytics.
9. reCAPTCHA and bot protection
We use Google Invisible reCAPTCHA on some forms (for example signup, login, and waitlist) to distinguish people from automated abuse. reCAPTCHA may collect hardware and software information, such as device and application data, and send it to Google for analysis.
Use of reCAPTCHA is subject to the Google Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms).
We do not currently use Google Places, Mouseflow, or Freshdesk as part of the public Service.
10. Advertising, remarketing, and social pages
We do not show third-party ads on afterhours. We do not currently use remarketing or retargeting platforms (including Google Ads, X/Twitter ads, Facebook/Meta ads, Bing Ads, Pinterest, AdRoll, Perfect Audience, or AppNexus) to follow you around the web.
We do not operate a Facebook fan page as part of the Service, and we do not run a Facebook Pixel on afterhours.
11. AI assisted features
Some parts of afterhours use artificial intelligence to help with study tasks, for example summarising text, generating practice questions, or offering writing feedback.
When you use those features, the content you submit for that request is processed to deliver the result. Do not submit information you are not permitted to share or that contains unnecessary sensitive personal data.
We configure our AI providers to process content for service delivery. We do not use your private study content to train public AI models. OpenAI’s Privacy Policy is at https://openai.com/policies/privacy-policy.
12. Tutoring marketplace
If you use tutoring, we collect additional information so we can run applications, listings, bookings, payments, and safety processes.
Tutor applications and listings may include your legal name, display name, institution, programme, year of study, biography, subjects, hourly rate, whether you offer online or in-person sessions, location notes, profile photo, curriculum vitae, academic transcript, and the times you mark as available. We also store whether you accepted the Tutoring Code of Conduct and payout terms.
Identity verification is run by Stripe Identity. You may be asked for photo identification and a matching selfie. Stripe processes those images to confirm you are a real person matching the documents. We receive the verification session status and related metadata (for example verified, requires input, or processing). We do not store a standing copy of your identity document in the afterhours product, except where a provider or the law requires us to retain a record.
Payouts use Stripe Connect. Stripe collects the bank and identity details needed to pay you. We receive Connect account identifiers, onboarding status, and payout request records (amounts, status, and references), not your full bank account number.
Session records may include who booked whom, start and end times, online or in-person mode, price and platform fee, payment references, video meeting links, calendar clash flags, private student or tutor notes, shared session notes, reviews, cancellation records, and dispute files (including your description of the issue and our resolution).
Students who book a tutor will see listing information the tutor has chosen to publish (such as display name, photo, headline, subjects, rate, modes, and public location notes). Tutors see the student’s relevant booking details, such as display name, the requested time, and notes the student attached to that booking. We do not give tutors a student’s payment card details.
We use this information to operate tutoring, match bookings to availability, generate meeting links, process charges and payouts, handle disputes and refunds, enforce the Tutoring Code of Conduct, and keep users safe. We may pause a payout or listing while a dispute or identity check is outstanding.
14. International transfers
We are based in New Zealand. We store and process data using providers that may operate in New Zealand, Australia, the United States, the European Economic Area, and other countries.
When information is transferred overseas, we take reasonable steps to ensure it is protected in line with applicable privacy law, including through contractual safeguards where appropriate (for example standard contractual clauses where the GDPR requires them).
15. How long we keep information
We keep personal information only for as long as needed for the purposes described in this policy, unless a longer period is required by law.
If you delete your account, we delete or anonymise personal information within a reasonable period, except where we must retain certain records for security, billing, tutoring payouts and disputes, dispute resolution, or legal compliance. Tutor verification files and Stripe records may be kept for the period our payment provider or anti-fraud obligations require.
Backups and logs may persist for a limited time before they are overwritten.
16. Security
We use administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, or misuse.
No online service can guarantee absolute security. Please use a strong password, keep credentials private, and tell us promptly if you suspect unauthorised access to your account.
17. Your privacy rights
Under the Privacy Act 2020 (New Zealand), you may request access to personal information we hold about you and ask us to correct it if it is inaccurate.
You may update many profile fields directly in your account settings, opt out of non essential marketing emails using the unsubscribe link or by contacting us, and request deletion of your account, subject to legal and operational requirements.
Contact us at legal@afterhours.study or https://afterhours.study/contact if you have a privacy concern. We will respond within a reasonable time.
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner in New Zealand.
18. GDPR rights
If you are in the European Economic Area, the United Kingdom, or another place where the GDPR or UK GDPR applies, you also have the right, subject to legal limits, to:
- access the personal information we hold about you
- ask us to correct inaccurate personal information
- ask us to erase personal information (“right to be forgotten”)
- ask us to restrict processing
- receive a copy of personal information you provided to us in a structured, commonly used, machine-readable format, and to ask us to transmit it to another controller where technically feasible (data portability)
- object to processing based on legitimate interests, including profiling
- withdraw consent where processing is based on consent
- lodge a complaint with your local supervisory authority
To exercise these rights, email legal@afterhours.study. We may need to verify your identity before we act on a request.
19. CCPA and CPRA (California)
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) may give you additional rights. This section is intended to meet those notice requirements.
In the preceding 12 months we may have collected the following categories of personal information, depending on how you use afterhours: identifiers (such as name, email, account ID, IP address); customer records information (such as billing metadata); commercial information (such as subscription or tutoring purchases); internet or other electronic network activity (such as pages viewed and feature use); geolocation data (approximate, from IP address or campaign links); audio/visual information if you upload it or join a tutoring video call; professional or education information (such as institution, programme, and tutor application materials); inferences drawn from study activity; and, for tutors completing Stripe Identity, sensitive identifiers processed by Stripe (government ID and a selfie).
We collect this information from you, from your devices, from your organisation if it provides access, from Google if you use Google sign-in, and from our service providers (including Stripe) when they return payment or verification status. We use it for the purposes described in How we use information.
We do not sell personal information. We do not share personal information for cross-context behavioural advertising. We do not use or disclose sensitive personal information for purposes that require a right to limit under CPRA, other than as needed to provide the Service (for example Stripe Identity for tutors).
California residents may request to know the categories and specific pieces of personal information we have collected; request deletion; request correction of inaccurate information; and not be discriminated against for exercising CCPA/CPRA rights. Because we do not sell or share personal information as those terms are defined for advertising, we do not offer a “Do Not Sell or Share My Personal Information” opt-out beyond the controls in this policy.
To make a California privacy request, email legal@afterhours.study or use https://afterhours.study/contact. We will verify the request and respond within the time the law allows. You may use an authorised agent if you provide proof of authorisation.
20. CalOPPA
The California Online Privacy Protection Act (CalOPPA) requires commercial websites and online services to post a privacy policy. This policy is posted at https://afterhours.study/privacy and applies to afterhours.study.
You can review and change much of the personal information in your account through Account settings. You can ask us to correct or delete information by emailing us. We notify users of material changes by posting an updated policy on this page with a new “Last updated” date, and by email or in-product notice when the change significantly affects how we use personal information.
Do Not Track. Some browsers send a “Do Not Track” (DNT) signal. There is no consistent industry standard for responding to DNT. We do not currently alter our data practices solely because a browser sends a DNT signal. You can control cookies through your browser settings as described below.
22. Children and young people
The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13 (COPPA). If you believe we have collected information from a child under 13, contact us and we will delete it.
The Service is intended for students and learners. If you are under 16, use afterhours only with permission from a parent, caregiver, or school as applicable. Tutors on the marketplace must be 18 or older. The tutoring marketplace is not intended for children.
If we learn we have collected personal information from a child without appropriate consent, we will take steps to delete it.
23. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated version on this page and adjust the “Last updated” date.
If changes significantly affect how we use personal information, we may also notify you by email or in the product.
24. Contact us
Privacy enquiries by email: legal@afterhours.study
Or by visiting our contact page: https://afterhours.study/contact
broke money, afterhours.study and Afterhours
New Zealand