Privacy Policy
Last updated: 26 April 2026
1. Who We Are
ChatPSLE ("we", "us", "our") operates the learning platform at app.chatpsle.com. We act as the data controller for personal data collected through the service. This policy applies to all users of the service ("you", "user").
2. Personal Data We Collect
We collect the following categories of personal data:
| Category | Examples |
|---|---|
| Account data | Email address, password (hashed), display name, avatar initial |
| Profile data | Student name, primary level (P3–P6), school name |
| Learning data | Quiz answers, scores, paper-completion progress, AI tutor prompts and responses |
| Billing data | Subscription status, plan tier, billing history (payment-card details are held by Stripe, not by us) |
| Technical data | IP address, browser type, device type, page-view events, session timestamps |
| Communications | Emails or messages you send to support |
3. How We Collect Your Data
- Directly from you — when you create an account, set up your profile, complete quizzes, or contact support.
- Automatically — through cookies, analytics tools, and server logs as you use the service.
- From third parties — via Google when you sign in with Google, and via Stripe when you subscribe.
4. Why We Use Your Data
We use your personal data to:
- Create and maintain your account and authenticate you when you sign in.
- Deliver the learning service, including quizzes, papers, and AI tutoring.
- Personalise your experience (e.g., recommending content based on your level and weak subjects).
- Process subscription payments and manage billing through Stripe.
- Send transactional emails (account confirmation, password reset, billing receipts).
- Analyse usage patterns to improve the service (e.g., which quizzes are most useful).
- Detect and prevent abuse, fraud, and security incidents.
- Comply with legal obligations under Singapore law.
5. Third-Party Processors
We share personal data with the following service providers, who process it on our behalf under contractual safeguards:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication, database, file storage | Account, profile, learning data |
| Google Gemini | AI-generated tutoring responses | The prompts you submit to AI tutors |
| Stripe | Payment processing | Billing email, subscription metadata (we never see your card number) |
| Vercel | Web hosting and edge delivery | IP, request logs |
| Google Analytics 4 | Usage analytics | Anonymised page-view events, device info |
6. Data Retention
- Account & profile data: retained while your account is active, and deleted within 30 days of account closure.
- Learning data: retained while your account is active. You may request deletion at any time.
- Billing records: retained for at least 5 years after the last transaction, as required by Singapore tax law.
- Server and analytics logs: retained for up to 12 months.
7. Children's Privacy
ChatPSLE is designed for primary-school students aged 9–12. We do not knowingly collect personal data from a child under 13 without verifiable parental consent. If you are a parent or guardian and believe we have collected your child's data without your consent, please contact us and we will delete it promptly.
By creating an account on behalf of a child, you confirm that you are the child's parent or guardian and that you consent to the data practices described in this policy.
8. Your Rights Under the PDPA
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request that we correct inaccurate or incomplete data.
- Withdraw consent — withdraw your consent for our processing at any time, by deleting your account or contacting us. Note that some processing (e.g., billing records) is required by law and cannot be withdrawn while the legal obligation continues.
- Portability — request an export of your data in a machine-readable format.
- Complaint — lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore.
To exercise any of these rights, email us at hello@chatpsle.com. We will respond within 30 days.
9. Cookies & Analytics
We use cookies and similar technologies to keep you signed in, remember your preferences, and measure usage. Specifically:
- Authentication cookies — set by Supabase to maintain your session. Required for the service to work.
- Google Analytics 4 (measurement ID
G-KLW7W8VJR7) — collects anonymised usage data, such as which pages are most visited. You can opt out by installing the Google Analytics opt-out browser add-on.
10. International Transfers
Some of our service providers (Supabase, Vercel, Google, Stripe) process data outside Singapore — typically in the United States, the European Union, or other regions. Where this happens, we ensure that contractual safeguards (such as Standard Contractual Clauses) are in place to provide a comparable standard of protection to the PDPA.
11. Security
We take reasonable security measures to protect your personal data, including encryption in transit (HTTPS/TLS), encrypted storage at rest, hashed passwords, principle-of-least-privilege access controls, and routine security review. However, no system is completely secure. You are responsible for keeping your password confidential.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.
13. Contact Us
For privacy questions, data-access requests, or to report a concern, contact our Data Protection Officer at hello@chatpsle.com.