QDD privacy policy
One policy, covering both qingdouding.com and the QDD (青豆丁) app for private tutors. The website part is short. The app part is where the substance is.
Both are provided by CrumbQuest LLC, a New Mexico limited liability company, 1209 Mountain Road Pl NE, Albuquerque, NM 87110, USA. Questions about anything here go to hello@qingdouding.com.
The website
One thing collects anything: the contact form at the bottom of the home page. When you fill it out and send it, we get the name, email, student count and “what do you use now” you typed. We use it to reply to you, and to help you while you’re getting set up. Nothing else.
No ads, no third-party tracking, no analytics, no cookies. The only other thing is the basic request log every web server keeps — IP address, time, browser type.
Who uses the app
The tutor is the user. Students and parents have no accounts, never sign in, and cannot access the app. The one thing a parent does touch is the notification-preferences page linked from every email, described under “Parent email addresses” below. Everything about a student or family is entered by the tutor, for the tutor’s own records.
What the app stores
About the tutor: display name, email address, phone number, time zone, language and currency. Sign-in uses a username and password; the password is stored only as a hash. A one-time code is emailed to verify your address and to reset a forgotten password. If Face ID is turned on, the device keeps the unlock token in the system Keychain and the server stores only a hash of it, so the token itself never leaves the phone.
About students: name, skill level, hourly price, recurring lesson time, lesson frequency, whether they are currently active, the date they joined, and any free-text notes the tutor writes.
About families: family name, notes, and one parent email address with its delivery state, preferred language, and the notification choices the parent has made.
Lessons and payments: lesson records with date, time, duration, location and attendance, and payment records with amount, date and a payment-method label such as “Zelle” or “check”. No money moves through the app. A payment record describes money that changed hands somewhere else. The app is not connected to any payment processor and never asks for card or bank details.
Emails the app sends: the app can email parents statements, payment confirmations, lesson reminders, payment reminders and schedule changes. For each message it keeps the recipient address, the delivery status, the provider’s message id, and a full copy of the message itself — subject, plain-text body and HTML — so the tutor has a record of what was sent on their behalf. Replies sent to support are stored the same way.
What the tutor sends us: support tickets opened in the app, with any images, PDFs or spreadsheets attached; a reply sent by email is written back into the same ticket. That content enters the system and we read it.
Diagnostics: if a screen in the app crashes, the app sends us its own error report — the error message, the technical stack trace, which page it happened on and the app version — so we can fix it. It also records how long pages take to load and to switch between screens, with the page name, the kind of device and the app version, and sends those timings to our server after you sign in. Both are stored against your account. Timing records are deleted after 180 days. Crash reports are kept as a deduplicated record — marking one resolved only removes it from our to-do list; the record itself stays, so a recurrence is visibly a recurrence. Neither is included in our backups, and both are deleted with your account. We use no third-party crash-reporting or analytics service, and none of this is used for advertising.
What the app does not collect
About students, the app has no field that asks for date of birth, home address, email address, phone number, photographs or health information, and it gathers no location of any kind. Notes are free text and tickets accept images, so technically a tutor could put those things in — we ask them not to. It does no location tracking of anyone. It contains no advertising or analytics software, and nothing sits between you and the app collecting traffic data.
Parent email addresses
The tutor enters a parent’s address; the parent does not sign up. Because of that, the first message any address receives is a notice explaining why it was contacted and carrying a link to say “this isn’t my email”. Until that notice has gone out, the app will not send anything else to the address.
Every message a parent receives carries a link to a page we host, where they can choose which kinds of message they get, or click “this isn’t my email”. Those choices are stored with the family record and override the tutor’s settings in the app.
Sending to an address stops if it hard-bounces, if it is reported as spam, or if someone uses the disavow link.
Who processes this information
QDD is run by CrumbQuest LLC in the United States, and tutors’ and students’ records are stored in the United States. To run the service we rely on these providers, and data passes through them:
- Railway: servers and the database, where the records live. Both are in the western United States (California).
- Cloudflare: both the website and the app sit behind it. A request reaches the edge node nearest you and is passed on to our servers — it is somewhere requests travel through, not somewhere they are kept.
- Twilio SendGrid: all mail in and out — the website’s contact form, the app’s email to parents on a tutor’s behalf, and replies.
- Microsoft OneDrive (United States): the nightly off-site backup, one per tutor. How long it is kept is under “How long it is kept” below.
- Namecheap Private Email: our own mailbox.
That is the complete list. No advertising networks, no analytics services, no data brokers. We do not sell information, and we do not share it for anyone else’s marketing.
Who can see these records
Normally, only the tutor who entered them.
But leaving it there would not be honest. There are very few of us, and to help with a problem a tutor has raised, a small number of us can open an account and see what the tutor sees, including the messages sent to parents on their behalf. It is not casual: getting in requires the operator to re-enter their own password or biometric at that moment; a written reason is required and goes into the log; every visit is recorded — who, when, and what was opened; and the session ends after 30 minutes at most. If we change something while we are in there, the tutor’s own activity history shows that entry marked “By support”; if we only look, that is recorded on our side only. The full description is in the terms of service, under “Who can see your records”.
Beyond that, we do not read records out of curiosity, we do not use them for advertising, and we do not use them to train models. Nothing in QDD sends content to an AI provider today — if that ever changes, it will be written here first.
How long it is kept, and how to delete it
A tutor can request deletion of their account from inside the app. The account is deactivated immediately and permanently erased after a 30-day grace period, which exists so an accidental deletion can be undone. Once it passes, the account’s records are deleted from the database.
Deleting a tutor’s account also deletes the student and family records that tutor entered, including lesson history, payment records and stored copies of sent emails.
Two things sit outside the database and need saying plainly. First, we back up each tutor’s data to Microsoft OneDrive nightly, and an account stays in those backups throughout the 30-day grace period — so the last backup containing a tutor’s records is dated around the day the account is purged. Each dated backup is kept for up to 180 days, then deleted. Deleted files then sit in Microsoft’s own recycle bin for a further 30 days before they are gone. Second, the access log described under “Who can see these records” above is kept. It records what we did.
For anything you sent through the website contact form, write to us and we will delete it.
Information about children
A student may be a child or an adult. Where the student is a child, it is worth being precise about how their information gets here.
The app is not directed to children and is not a Kids Category app. Children do not use it, have no accounts, and cannot sign in. Information about a student is entered by the adult tutor, who has the direct relationship with that family — it is never collected from the child. The tutor is responsible for having agreement before entering someone’s details — from a parent or guardian where the student is a child, from the student themselves where they are an adult — and for what they choose to write in a note.
A parent — or the student, where they are an adult — who wants to know what a tutor has recorded, or wants it removed, should ask that tutor first, since it is the tutor’s record. You can also write to us at the address below and we will help.
Your choices
Ask us what is held about you and we will tell you. Ask us to delete it and we will, either through the in-app deletion above or by writing to us.
Contact: hello@qingdouding.com
CrumbQuest LLC, 1209 Mountain Road Pl NE, Albuquerque, NM 87110, USA
Changes
If this policy changes we will update the date at the top of the page.