Privacy Policy

1. Introduction

CameraSim Classroom (“CameraSim,” the “Service,” “we,” “us,” or “our”) is operated by Tuitive LLC. The Service helps photography teachers give their students access to interactive exposure courses and camera simulators, including Clicked! and Field Trip. This Privacy Policy explains what information we collect, how we use it, the parties to whom we disclose it, the method of disclosure, and the security practices we use to safeguard it.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Our Commitment to Student-Data Minimization

We take student privacy seriously, and our security posture is built on data minimization. For students, we collect only a first name, last name, and a student-chosen PIN. The PIN is stored only as a secure hash, never in plain text.

We do not collect student email addresses, dates of birth, contact information, demographic data, or behavioral or advertising profiles. Student accounts exist only as part of a teacher’s class, and all associated student data is permanently deleted when the teacher deletes the class.

Student data is shared only with the infrastructure subprocessors necessary to operate the Service (Supabase, Vercel, and Amazon CloudFront — see Section 6). It is never shared with payment processors, email-marketing tools, advertising networks, or analytics providers. We do not sell student data and do not use it for advertising or profiling.

3. Information We Collect from Teachers

Teachers are the account holders and paying customers of the Service. We collect:

• Account information — your email address, used to create your account and send one-time sign-in codes.
• Billing information — if you subscribe to a paid plan, payments are processed by Stripe. We store only Stripe customer and subscription identifiers and subscription status; we never receive or store your full card number.
• Class information — class names and the share links you create.
• Support correspondence and any feedback you choose to send us.
• Usage and device data — basic analytics about how the Service is used (see Section 11).

4. Information We Collect from Students

Teachers enroll students into their classes. As described in Section 2, the only identifying information we collect about a student is their first name, last name, and a student-chosen PIN (stored hashed). To operate the Service and power the teacher’s dashboard, we also store:

• Course progress — whether a student has completed a course and related course metadata.
• Session activity — sign-in and last-seen timestamps used to keep a student signed in and to show recent activity to the teacher.

We do not collect any other personal information about students.

5. How We Use Information

• To provide, maintain, and improve the Service.
• To authenticate teachers and students and keep accounts secure.
• To process subscription payments and manage billing (teachers only).
• To send teachers account-related and, where permitted, marketing email about the Service.
• To respond to support requests and feedback.
• To understand and improve how the Service is used.

6. How Information Is Disclosed, and to Whom

We do not sell your information. We share information only with the subprocessors necessary to operate the Service, each of which is bound to protect it:

• Supabase — database and authentication hosting (SOC 2 Type II certified). Receives teacher and student data. Privacy policy
• Vercel — web application hosting. Processes traffic for teachers and students. Privacy policy
• Amazon CloudFront — static asset delivery (content delivery network). Serves assets to teachers and students. Privacy policy
• Stripe — payment processing. Teacher billing data only — never student data. Privacy policy
• Kit (ConvertKit) — email marketing. Teacher email only — never student data. Privacy policy
• Google Analytics — usage analytics (only when enabled). Teacher and visitor usage data only — never student records. Privacy policy

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (in which case we will provide notice before your information becomes subject to a different privacy policy).

7. Method of Disclosure

Information is transmitted to the subprocessors above only over encrypted connections (TLS 1.2 or higher) via their respective APIs and hosting infrastructure. We do not publish personal information, post it publicly, or share it with advertising networks.

8. Children’s Privacy and Student Records

The Service is designed for use by teachers in an educational setting. Teachers act as the controller of their students’ information and are responsible for obtaining any parental or school consent required by applicable law (such as COPPA or FERPA in the United States) before enrolling students. Our data minimization practices are intended to reduce risk: because we collect no student contact information, the data associated with a student account is limited to a name, a hashed PIN, and course progress.

9. Data Security

We protect information using industry-standard safeguards, including:

• Encryption of data in transit (TLS 1.2+) and at rest.
• Database row-level security policies that restrict access to authorized accounts.
• Hashing of student PINs rather than storing them directly.
• Use of reputable, security-certified infrastructure providers.

No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.

10. Data Retention and Deletion

We retain teacher account information for as long as the account is active or as needed to provide the Service and meet legal obligations. Student data is retained only while the teacher’s class exists and is permanently deleted when the teacher deletes the class. Teachers may request deletion of their account and associated data by contacting us at the email below.

11. Cookies and Analytics

We use cookies that are necessary to keep teachers and students signed in. Where enabled, we use Google Analytics to understand aggregate usage of the Service. These analytics do not include student records.

12. Your Rights

Depending on where you live, you may have the right to access, correct, or delete personal information we hold about you, or to object to certain processing. To exercise these rights, contact us at support@camerasim.com.

13. International Users

The Service is operated from the United States. If you access it from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service or by email where appropriate.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact Tuitive LLC at support@camerasim.com.