Welcome to Singapore Math Drills ("we," "our," or "us"). We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what data we collect, why we collect it, and the rights you have over it. It applies to all users of our website and mobile app, including parents, teachers, and students.

We collect only what is necessary to deliver our educational service. For parents and teachers (account holders): • Email address — for account authentication, password recovery, and service communications. • Billing information — processed securely by Stripe or Google Play. We never store payment card numbers. • Name and display preferences. For students: • An optional display name or username chosen by a parent or teacher. • A mascot avatar selection (fictional animal characters). • Learning progress: XP earned, skill level, topic milestones, practice accuracy, and hints used. What we do not collect from students: • No email address required. • No phone number, social media profiles, or real full name. • No Advertising IDs (AAID/IDFA) or device serial numbers. • No precise location data.

We use the information we collect for the following purposes: • To create and manage your account and provide access to the platform. • To personalise and adapt the learning experience based on performance. • To generate progress reports for parents and teachers. • To communicate with account holders about their subscription and support requests. • To maintain the security and integrity of the platform. We do not sell your data to third parties. We do not use student data for advertising or behavioural profiling.

We use a self-hosted instance of Umami Analytics to understand how features are used. Umami is a privacy-first analytics tool that: • Does not set tracking cookies. • Does not collect IP addresses or personal identifiers. • Records only anonymous, aggregated usage events (for example: "practice session started," "level completed"). We do not use Google Analytics, Facebook Pixel, Mixpanel, or any other third-party analytics service. There are no advertisements in our app — we are entirely ad-free.

We share data with third parties only to the extent necessary to operate the service: • Stripe — processes subscription payments for web users. Stripe receives billing details; we receive a customer reference. Stripe's privacy policy is available at stripe.com/privacy. • Google Play Billing — processes in-app purchases on Android. Subject to Google's privacy policy. Practice reminders on Android are delivered as local, on-device notifications using the Capacitor Local Notifications plugin. No notification content or device identifiers are sent to any external server. No other third-party services receive personal data.

Singapore Math Drills serves Primary 1 to Primary 6 students (ages 6–12) and complies with the Children's Online Privacy Protection Act (COPPA) and applicable regulations. • Students cannot create accounts independently. All student profiles must be provisioned by a verified parent under a Family Plan, or by a teacher or school administrator under a School Plan. • Parents retain full control over their child's profile, learning history, and account status. • We collect only the minimum data required to deliver the educational service. No email address or personal identifier is required for student accounts. • We do not display advertising to any user, and we do not engage in behavioural profiling of children. Parents who wish to review, update, or delete their child's information may do so through their account settings or by contacting us at [email protected].

We take reasonable technical measures to protect your data: • All data is transmitted over HTTPS with TLS encryption. • Passwords are hashed using bcrypt with a minimum of 10 salt rounds. Plain-text passwords are never stored or logged. • Database access is restricted to an internal data access layer — no application component queries the database directly. • We use secure, isolated server environments and access controls. No method of electronic storage is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].

You have the following rights over your personal data: • Access and correction: Update your account information at any time through your Profile settings. • Deletion: Delete your account and all associated personal data directly from your Profile settings page. Deletion is immediate, permanent, and cannot be reversed. All practice history, progress records, and managed child accounts are wiped. • Organisation-managed accounts: If your account was created by a school or organisation, please contact your administrator to request changes or deletion — your account is under their control. • EU users (GDPR): You additionally have rights to data portability and the right to object to certain processing. Contact us at [email protected] to exercise these rights. To request deletion or raise any privacy concern directly, contact us at [email protected].

We retain your account data for as long as your account is active. When an account is deleted, all personal data is removed immediately, except: • Stripe and Google Play billing records, which are retained only as required for legally mandated financial reporting. • Anonymised, aggregated analytics that cannot be linked back to any individual.

We may update this Privacy Policy from time to time. We will notify account holders of material changes by email and will update the "Last Updated" date at the top of this page. Continued use of the service after a policy update constitutes acceptance of the revised terms.

For any questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact us at [email protected].

Welcome to Singapore Math Drills ("we," "our," or "us"). We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what data we collect, why we collect it, and the rights you have over it. It applies to all users of our website and mobile app, including parents, teachers, and students.

We collect only what is necessary to deliver our educational service. For parents and teachers (account holders): • Email address — for account authentication, password recovery, and service communications. • Billing information — processed securely by Stripe or Google Play. We never store payment card numbers. • Name and display preferences. For students: • An optional display name or username chosen by a parent or teacher. • A mascot avatar selection (fictional animal characters). • Learning progress: XP earned, skill level, topic milestones, practice accuracy, and hints used. What we do not collect from students: • No email address required. • No phone number, social media profiles, or real full name. • No Advertising IDs (AAID/IDFA) or device serial numbers. • No precise location data.

We use the information we collect for the following purposes: • To create and manage your account and provide access to the platform. • To personalise and adapt the learning experience based on performance. • To generate progress reports for parents and teachers. • To communicate with account holders about their subscription and support requests. • To maintain the security and integrity of the platform. We do not sell your data to third parties. We do not use student data for advertising or behavioural profiling.

We use a self-hosted instance of Umami Analytics to understand how features are used. Umami is a privacy-first analytics tool that: • Does not set tracking cookies. • Does not collect IP addresses or personal identifiers. • Records only anonymous, aggregated usage events (for example: "practice session started," "level completed"). We do not use Google Analytics, Facebook Pixel, Mixpanel, or any other third-party analytics service. There are no advertisements in our app — we are entirely ad-free.

We share data with third parties only to the extent necessary to operate the service: • Stripe — processes subscription payments for web users. Stripe receives billing details; we receive a customer reference. Stripe's privacy policy is available at stripe.com/privacy. • Google Play Billing — processes in-app purchases on Android. Subject to Google's privacy policy. Practice reminders on Android are delivered as local, on-device notifications using the Capacitor Local Notifications plugin. No notification content or device identifiers are sent to any external server. No other third-party services receive personal data.

Singapore Math Drills serves Primary 1 to Primary 6 students (ages 6–12) and complies with the Children's Online Privacy Protection Act (COPPA) and applicable regulations. • Students cannot create accounts independently. All student profiles must be provisioned by a verified parent under a Family Plan, or by a teacher or school administrator under a School Plan. • Parents retain full control over their child's profile, learning history, and account status. • We collect only the minimum data required to deliver the educational service. No email address or personal identifier is required for student accounts. • We do not display advertising to any user, and we do not engage in behavioural profiling of children. Parents who wish to review, update, or delete their child's information may do so through their account settings or by contacting us at [email protected].

We take reasonable technical measures to protect your data: • All data is transmitted over HTTPS with TLS encryption. • Passwords are hashed using bcrypt with a minimum of 10 salt rounds. Plain-text passwords are never stored or logged. • Database access is restricted to an internal data access layer — no application component queries the database directly. • We use secure, isolated server environments and access controls. No method of electronic storage is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].

You have the following rights over your personal data: • Access and correction: Update your account information at any time through your Profile settings. • Deletion: Delete your account and all associated personal data directly from your Profile settings page. Deletion is immediate, permanent, and cannot be reversed. All practice history, progress records, and managed child accounts are wiped. • Organisation-managed accounts: If your account was created by a school or organisation, please contact your administrator to request changes or deletion — your account is under their control. • EU users (GDPR): You additionally have rights to data portability and the right to object to certain processing. Contact us at [email protected] to exercise these rights. To request deletion or raise any privacy concern directly, contact us at [email protected].

We retain your account data for as long as your account is active. When an account is deleted, all personal data is removed immediately, except: • Stripe and Google Play billing records, which are retained only as required for legally mandated financial reporting. • Anonymised, aggregated analytics that cannot be linked back to any individual.

We may update this Privacy Policy from time to time. We will notify account holders of material changes by email and will update the "Last Updated" date at the top of this page. Continued use of the service after a policy update constitutes acceptance of the revised terms.

For any questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact us at [email protected].