Privacy policy

Who is responsible

Java Assistant is responsible for the personal data described in this policy, which covers javaassistant.com and the Java Assistant mobile app.

What we collect

• Account details: your name, email address, phone number, country and password.
• Study details: your school or university, level, courses and the requests you place.
• Session activity: bookings, attendance, messages with your tutor and staff, and ratings.
• Files you upload, such as project briefs, notes and payment receipts.
• Payment records: what you bought, how much you paid and when, and Whish’s payment reference when you pay with the Pay with Whish button. Card numbers and Whish account details are not included.
• Referral details, if you joined through a friend’s code or share your own.
• Details you leave for our team before you have an account: the name and WhatsApp number you type into Javi’s contact form, or the name, email and message you send from our Contact page about getting started. We keep them in our team’s records so we can reply and help you get started.
• Technical data needed to keep the service secure, such as device type and security checks.

Tutors also give us their qualifications, transcripts and payout details, which we use to vet and pay them.

How we use it

• To create and run your account.
• To match you with a suitable tutor and schedule your sessions.
• To take payment, keep financial records and handle refunds.
• To send you messages about your requests, sessions and payments.
• To keep the service secure and prevent fraud and abuse.
• To improve the service and answer your questions.

We use your data because we need it to provide the service you asked for, because the law requires it (for example, keeping payment records), or because we have a legitimate interest in keeping the service safe and working well.

Who we share it with

We share your data only as far as needed to provide the service:

• Your tutor, who sees what they need to prepare for and run your sessions.
• Google Firebase, which hosts our database, files and sign-in.
• Google Analytics, which counts visits to our website so we can see which pages help.
• Whish Money, which takes payments made with the Pay with Whish button. We send it the amount, what you are paying for (the package name, “Group class seat”, or just “Project”, “Assignment” or “Paper”) and an order number, never your name, email, phone number or project details.
• Resend, which delivers our emails.
• Algolia, which powers tutor search.
• OpenRouter and the AI provider it routes to, which power Javi, our help assistant (see below).
• WhatsApp, when you choose to contact us there.
• Authorities, when the law requires us to.

We never sell your personal data or share it for advertising.

Javi, our help assistant

When you ask Javi a question, your question and the details Javi looks up from your own account, such as your session times or payment status, are sent through OpenRouter to the AI provider that runs Javi’s model (currently DeepSeek), so it can write the answer. Names, email addresses and phone numbers are never sent. We only allow providers that keep no copy of your question and do not use it to train their models.

We keep a copy of questions and answers for 30 days to improve Javi, then delete it. Some of our users are under 18, so Javi never asks for personal details in the chat.

If you’re not signed in and want help, Javi may show a short form under its answer where you can leave your name and WhatsApp number, with a box to tick so our team may message you. What you type there goes straight to our team, never to Javi or the AI provider. Javi passes on only what you asked about, such as the course and how soon you need help. If you’re under 18, make sure a parent knows before you send it.

If you ask Javi a question without signing in, your browser keeps a random ID so each visitor gets their own daily questions, even on shared Wi-Fi. It says nothing about who you are, and you can clear it at any time by clearing your browser’s site data.

Where your data is stored

Our main servers are run by Google in the United States, and some of the providers above process data in other countries. We choose providers that protect personal data to recognised standards.

How long we keep it

We keep your data while your account is open. After it closes, we delete or anonymise it, except records we must keep for legal, tax or accounting reasons, which we keep only as long as those rules require.

Cookies and local storage

We use browser storage to keep you signed in and to remember settings such as language. Security checks from Google help block automated abuse. Google Analytics sets its own cookies to count visits; it receives your browser details and an approximate location, never your name or email. We do not use advertising or cross-site tracking cookies.

Your rights

You can ask us to:

• give you a copy of the personal data we hold about you,
• correct anything that is wrong,
• delete your account and data,
• stop using your data for a particular purpose.

Email us to make a request. We reply within 30 days: support@javaassistant.com

Students under 18

School students under 18 can use the service with the permission of a parent or guardian, who can make any of the requests above on their behalf.

Security

We protect your data with encrypted connections, access controls and security rules that limit who can read each record. No system is perfectly secure, so please use a strong password and keep it private.

Changes to this policy

The date at the top of the page shows when this policy last changed. If a change materially affects how we use your data, we will tell you in the app or by email.