This page has no policy text yet. It needs to cover the account details stored in MongoDB, the chat and quiz history kept against each student, the uploaded PDFs, and the questions sent to Google and Groq for embedding and generation.
Write it against what this deployment actually does before you share TutorRAG with students, and have someone qualified review it. Placeholder legal text is worse than none.