1. Introduction
PSLE Alex ("the Service") is operated by NoCodeVit Pte Ltd ("we", "us"). We are committed to protecting the privacy of our users, particularly children. This Privacy Policy explains how we collect, use, and safeguard your personal data in compliance with the Singapore Personal Data Protection Act 2012 (PDPA).
2. Data We Collect
Account Information
- Email address (for authentication)
- Display name (chosen by user)
- Avatar selection
- Selected subjects and target AL scores
Learning Data
- Practice session answers and scores
- Exam attempt history
- AI tutor conversation history
- Work area content (handwriting canvas data, step-by-step solutions)
- Question annotations (highlights, eliminated options)
Technical Data
- Device type and browser information
- IP address (for security and rate limiting)
- Usage analytics (pages visited, session duration)
3. How We Use Your Data
- Personalized learning: Adapting question difficulty, tracking mastery progress, and generating targeted practice.
- AI grading & feedback: Sending your answers and working to our AI system (Claude by Anthropic) for grading and personalized feedback.
- Performance analytics: Generating mastery reports, work habit assessments, and improvement suggestions.
- Account management: Authentication, subscription management, and communication.
- Service improvement: Aggregated, anonymized analytics to improve question quality and AI accuracy.
4. AI Processing
When you use the AI Tutor or submit open-ended answers for grading, your input is sent to Anthropic's Claude API for processing. This includes:
- Question text and your answer
- Your work steps (if provided)
- Canvas drawings (converted to images, if provided)
Anthropic processes this data according to their privacy policy. We do not send your personal information (name, email) to AI providers.
5. Data Storage & Security
- Data is stored on Supabase (hosted on AWS in the Singapore region).
- All data is encrypted in transit (TLS) and at rest.
- Row-Level Security (RLS) ensures users can only access their own data.
- Payment processing is handled by Stripe; we do not store credit card numbers.
6. Children's Privacy
PSLE Alex is designed for children aged 7–12. We take extra precautions:
- We collect only the minimum data necessary for the educational service.
- We do not serve behavioral advertising to children.
- We do not sell or share children's data with third parties for marketing.
- Parents/guardians may request access to, correction of, or deletion of their child's data at any time.
- Account creation for users under 13 requires parental consent.
7. Data Sharing
We do not sell your personal data. We share data only with:
- Supabase: Database and authentication provider.
- Anthropic: AI processing for grading and tutoring (no personal identifiers sent).
- Stripe: Payment processing.
- Vercel: Hosting and content delivery.
8. Your Rights Under PDPA
Under the Singapore PDPA, you have the right to:
- Access: Request a copy of your personal data we hold.
- Correction: Request correction of inaccurate data.
- Withdrawal: Withdraw consent for data collection (which may affect service functionality).
- Deletion: Request deletion of your account and associated data.
To exercise these rights, email privacy@pslealex.com.
9. Cookies & Local Storage
We use:
- Authentication cookies: Essential for login sessions (managed by Supabase).
- Local storage: For theme preference, onboarding progress, and offline data caching.
- We do not use third-party tracking cookies or advertising pixels.
10. Data Retention
- Active accounts: Data retained for the duration of the account.
- Deleted accounts: Personal data purged within 30 days. Anonymized learning analytics may be retained.
- AI conversation logs: Retained for up to 90 days for service improvement, then deleted.
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top reflects the most recent revision.