Your data, handled the Swiss way.

When you create an account, we store: your email address, a hashed password (we never see your real one), your account type (student or tutor), and any profile details you fill in.

When you book or teach a session, we store: who booked, who taught, the time and length, and the price agreed. We don't record sessions, we don't transcribe sessions, and we don't analyse the content of your conversations.

For tutors processing payouts, we store the bank account details you provide. These are encrypted at rest and only accessible to the small Bernaly finance team for the purpose of paying you.

We use your data to operate the platform: match you with tutors, send booking confirmations, process payments, surface relevant tutors in search.

We don't sell your data. We don't share it with advertisers. We don't feed it to AI training pipelines.

A handful of carefully chosen service providers help us run Bernaly. They each see only the data they need:

• Vercel — hosts the site.
• Resend — sends transactional emails (booking confirmations, password resets).
• Stripe (planned) — will process payments when we move from offline to online billing.
• Neon (planned) — Postgres database hosting in the EU.

If we add or change any third-party processor, we update this page and notify accounts via email.

We use the bare minimum: a session cookie to keep you logged in. No tracking pixels, no third-party analytics scripts, no fingerprinting. If we add anonymous analytics in future, it'll be a privacy-respecting tool (e.g. Plausible) and we'll say so here.

Under Swiss FADP and EU GDPR, you can: see what data we hold about you, correct it, export it, or delete it entirely.

Email privacy@bernaly.comand we'll respond within 30 days. Most requests are handled within 48 hours.

Account data: as long as your account exists, plus 30 days after deletion (in case you change your mind).

Financial records (invoices, payouts): 10 years, per Swiss tax law (Art. 958f OR).

Logs (server-side error/access logs): 30 days.

Bernaly is for adults (16+). We don't knowingly collect data from younger users. If you believe a minor has signed up, email privacy@bernaly.comand we'll remove the account.

If we materially change how we handle data, we'll email every account at least 30 days before the change takes effect. No surprise updates.

Questions, complaints, or curiosities: email privacy@bernaly.com.