Privacy Policy (Notice)

In accordance with Section 7(3) of the PDPA, this Privacy Notice is issued in both English and Bahasa Malaysia. In the event of any conflict, discrepancy, or inconsistency between the English version and the Bahasa Malaysia version (or any other translated version, such as Chinese), the English version shall prevail.

This App is designed for children under the age of 18 (“Students”). Under the PDPA, we do not process the personal data of minors without explicit consent. By creating a Master Account and checking the consent box during registration, you confirm that you are the parent or legal guardian of the Student, and you explicitly consent to the collection and processing of their data as outlined in this Policy.

We operate a strict “closed environment” and employ data minimization strategies to protect children’s privacy.

A. Parent data (Master Account)

To create and manage the Master Account, we collect:

• Parent’s email address
• Encrypted password

B. Student data (Profiles)

We do not collect login credentials (email, phone number, or passwords) from Students. We only collect the following profile information provided by the Parent:

• Name / nickname
• Gender
• School or grade level
• Worksheet progress, answers, and scores

Note: Students access the App entirely through a system-generated “Student Code” provided to the Parent. A local token (cookie/storage) may be placed on the device solely to keep the Student logged in without re-entering the code.

We process personal data strictly for the following purposes:

• Parent data: To manage the Master Account, verify identity, provide password resets, and send critical legal or security notifications.
• Student data: To personalize the App experience, track worksheet progress, calculate scores, and display academic history exclusively to the authenticated Parent.

We consider your family’s data strictly confidential.

• No selling: We do not sell, rent, or trade Parent or Student personal data to data brokers, marketing firms, or any other third parties.
• No behavioral ads: We do not use behavioral or targeted advertising (tracking a child’s clicks to serve specific ads) within the App.
• Closed environment: Student profiles and scores are not shared publicly, nor are they shared with teachers, schools, or other App users.
• Service providers: We only share data with trusted infrastructure providers (e.g., secure cloud hosting) who are contractually bound to safeguard the data and comply with the PDPA.

We implement robust technical and organizational security measures to protect your data against unauthorized access, loss, or alteration. However, no system is entirely impenetrable.

• Mandatory breach notification: In accordance with the PDPA amendments, in the highly unlikely event of a data breach that poses a risk of harm, we will notify the Personal Data Protection Commissioner (PDPC) within 72 hours and alert affected Parents via the email address on file.

We retain Parent and Student data only for as long as the Master Account remains active. If an account is inactive for an extended period, or if the Parent requests deletion, all associated data (including Student worksheet scores) will be securely and permanently deleted or anonymized.

Under the PDPA and App Store/Google Play guidelines, you hold the right to access, correct, or delete your data.

• Review and correction: Parents can review and edit their Master Account details and the Student’s profile information directly within the App’s settings dashboard.
• Account deletion: You have the right to request the complete deletion of your Master Account and all associated Student data at any time. You can do this by:
  1. Using the “Delete Account” button located in the Parent Settings menu within the App.
  2. Emailing a deletion request to our Data Protection Officer (details below).

Please note that deleting your account will permanently erase all Student worksheet progress, and this action cannot be undone.

If you have any questions about this Privacy Policy, wish to withdraw your consent, or need to exercise your data rights, please contact our designated Data Protection Officer (DPO) as required by the PDPA:

Email: [email protected]
Attention: Data Protection Officer