TutorFlow (accessible via Telegram Mini App and Telegram Bot) Last updated: February 7, 2026 Effective date: February 7, 2026
Consent Form
By using TutorFlow, I confirm the following:
1. Data Controller
Service: TutorFlow Website: https://fitvia.net Contact: admin@fitvia.net
2. Consent
I hereby give my informed and voluntary consent to the processing of my personal data by TutorFlow under the conditions described in this document, in accordance with:
- General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679, Article 6(1)(a) and Article 7
- Federal Law No. 152-FZ "On Personal Data" (Russian Federation), Articles 6, 9, and 10
3. Categories of Personal Data
I consent to the processing of the following categories of my personal data:
Data obtained from Telegram upon authentication:
- Telegram User ID (unique identifier)
- First name and last name
- Username
- Language preference
Data I voluntarily provide while using the Service:
- Student names and notes (for teachers)
- Lesson schedules and attendance records
- Payment tracking information (lesson counts and statuses)
- Group names and membership
- Telegram usernames of students (for account linking)
Technical data generated during use:
- Authentication tokens
- Session identifiers
- Usage analytics (page views, feature interactions)
- Error reports (without personally identifiable information)
4. Purposes of Processing
My personal data is processed for the following purposes:
- Providing the Service — managing lessons, students, schedules, and payments
- Authentication — verifying my identity through Telegram
- Notifications — sending lesson reminders and payment notifications via Telegram Bot
- Subscription management — processing Pro plan subscriptions through Tribute
- Service improvement — analyzing anonymized usage patterns and fixing errors
- Security — preventing unauthorized access, fraud, and abuse
5. Methods of Processing
Personal data is processed through:
- Automated collection upon authentication via Telegram WebApp
- Manual data entry by the user (teacher entering student information)
- Automated storage in a secure database
- Automated analytics event recording
- Automated error reporting (with PII disabled)
- Automated data retention and deletion after 180 days of inactivity
6. Data Sharing
My personal data may be shared with the following third parties, strictly for the purposes described:
| Third Party | Purpose | Data Shared |
|---|---|---|
| Telegram | Authentication, notifications | Telegram ID, messages |
| Tribute | Payment processing (Pro subscription only) | Telegram User ID, payment status |
| Sentry | Error monitoring (PII disabled) | Technical error data only |
My data is NOT shared with advertising networks, data brokers, or any third parties for marketing purposes.
7. Data Storage and Protection
- Data is stored on a server hosted by Hostinger (Lithuania, EU)
- All data transfers are encrypted via TLS/SSL
- Database access is restricted to the local server
- Server is protected by a firewall and intrusion prevention system
- Rate limiting is applied to prevent abuse
8. Data Retention Period
- Active accounts: Data is retained for the duration of the account's active use
- Inactive accounts: Data is automatically deleted after 180 days (6 months) of inactivity
- Upon withdrawal of consent: Data is deleted within 30 days of the request
9. My Rights
I understand that I have the following rights regarding my personal data:
Under GDPR:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent at any time (Art. 7(3))
- Right to lodge a complaint with a supervisory authority (Art. 77)
Under Federal Law No. 152-FZ:
- Right to access my personal data and information about its processing (Art. 14)
- Right to request correction, blocking, or destruction of my data (Art. 14)
- Right to withdraw consent at any time (Art. 9)
10. Withdrawal of Consent
I understand that:
- I may withdraw my consent at any time by contacting admin@fitvia.net or using in-app functionality
- Withdrawal of consent does not affect the lawfulness of processing performed prior to withdrawal
- Upon withdrawal of consent, my account and all associated data will be deleted within 30 days
- Some data processing is based on legal grounds other than consent (contract performance, legitimate interest) and may continue as described in the Privacy Policy
11. Consent for Processing Student Data (Teachers)
As a teacher using TutorFlow, I additionally acknowledge that:
- I am a data controller for the personal data of my students that I enter into the Service
- I am responsible for obtaining appropriate consent from my students (or their legal guardians, in case of minors) before entering their data
- TutorFlow acts as a data processor on my behalf for student data
- I will comply with applicable data protection laws when processing student information through the Service
12. Consent Declaration
By continuing to use TutorFlow, I confirm that:
- I have read and understood this Consent document, the Privacy Policy, and the Terms of Service
- I voluntarily consent to the processing of my personal data as described above
- I understand my rights and how to exercise them
- I am at least 16 years of age
How consent is given: Consent is given implicitly by using the Service (accessing TutorFlow through Telegram). The first use of the Service after these documents are published constitutes acceptance.
How to withdraw consent: Send an email to admin@fitvia.net with the subject "Withdrawal of Consent" or use the account deletion feature in the application.