Your data, handled the Swiss way.

When you create an account, we store: your email address, your account type (student or tutor), and any profile details you fill in. There is no password. You sign in with a one-time link sent to your email, or with Google.

When you book or teach a session, we store: who booked, who taught, the time and length, and the price agreed. We don't record sessions, we don't transcribe sessions, and we don't analyse the content of your conversations.

We do not hold your bank details. Learners pay tutors directly, so no payment data passes through Bernaly. If that changes and we start handling payments, we will say what we store before you give us anything.

If you upload qualification documents (teaching certificates, diplomas, language proficiency certs) as part of a tutor application, those documents are stored in private file storage and only accessible to Bernaly admins for verification. They are never shown on your public profile and are deleted when you delete your account.

We use your data to operate the platform: match you with tutors, send booking confirmations, process payments, surface relevant tutors in search.

We don't sell your data. We don't share it with advertisers. We don't feed it to AI training pipelines.

A handful of carefully chosen service providers help us run Bernaly. They each see only the data they need:

• Vercel hosts the site.
• Resend sends our emails: sign-in links, booking confirmations, and changes to a booking.
• Stripe (planned) will process payments once billing moves online. Today you pay your tutor directly.
• Neon hosts our Postgres database in the EU.

If we add or change any third-party processor, we update this page and notify accounts via email.

We use the bare minimum: a session cookie to keep you logged in. No tracking pixels, no third-party analytics scripts, no fingerprinting. If we add anonymous analytics in future, it'll be a privacy-respecting tool (e.g. Plausible) and we'll say so here.

Under Swiss FADP and EU GDPR, you can: see what data we hold about you, correct it, export it, or delete it entirely.

Email privacy@bernaly.chand we'll respond within 30 days. Most requests are handled within 48 hours.

Account data: as long as your account exists, plus 30 days after deletion (in case you change your mind).

Financial records (invoices, payouts): 10 years, per Swiss tax law (Art. 958f OR).

Logs (server-side error/access logs): 30 days.

Bernaly is for adults (16+). We don't knowingly collect data from younger users. If you believe a minor has signed up, email privacy@bernaly.chand we'll remove the account.

If we materially change how we handle data, we'll email every account at least 30 days before the change takes effect. No surprise updates.

Questions, complaints, or curiosities: email privacy@bernaly.ch.