Singapore Math Drills operates under Singapore's Personal Data Protection Act 2012 (PDPA). This notice supplements our Privacy Policy and applies to all users in Singapore.

We have appointed a Data Protection Officer (DPO) responsible for ensuring compliance with the PDPA. To contact our DPO, email [email protected] with the subject line "PDPA Enquiry".

We collect personal data for the following purposes only: • Creating and managing user accounts. • Delivering personalised learning content. • Processing subscription payments. • Communicating with account holders about the service. We do not collect personal data for marketing to third parties or for any purpose not listed here.

By creating an account, you consent to the collection, use, and disclosure of your personal data as described in our Privacy Policy and this notice. Parents or guardians provide consent on behalf of student accounts. You may withdraw consent at any time by deleting your account, subject to any legal or contractual obligations. To withdraw consent without deleting your account, contact [email protected].

Under the PDPA, you have the right to request access to, or correction of, your personal data held by us. To make a request, contact [email protected]. We will respond within 30 days. We may charge a reasonable administrative fee for access requests.

We disclose personal data only to: • Stripe — for payment processing of web subscriptions. • Google Play — for in-app purchases on Android. Both are bound by contractual data protection obligations. We do not sell personal data and do not disclose it to any other third party without your consent, except as required by law.

Our servers are located outside Singapore. By using the service, you consent to the transfer of your personal data to our server infrastructure, which is subject to data protection obligations equivalent to those under the PDPA.

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Account data is deleted immediately and permanently when you delete your account. One narrow exception: a one-way cryptographic hash of your email address (not the address itself) is retained after account deletion, solely to prevent free-trial abuse through repeated deletion and re-registration.

If you believe we have violated the PDPA, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg. We encourage you to contact us first at [email protected] so we may address your concern directly.