Privacy Policy

Last updated: September 11, 2026

1. Data Controller

The data controller for this service is:

  • Company: EduMate
  • Registered Address: Singapore
  • Privacy Contact: privacy@edumate.ai
  • Data Protection Officer: Not applicable

2. Information We Collect

2.1 Information You Provide

  • Account information: Email address, display name, password (encrypted)
  • Payment information: Transaction amount, payment status. We do not store complete card numbers — card data is processed by our payment provider (see Section 5)
  • Communication records: Emails, support tickets, and feedback you send to our team

2.2 Information We Automatically Collect

  • Device and network: IP address, device model, operating system, browser type, timezone
  • Usage behavior: Page visits, feature usage, operation logs, session duration
  • Log data: Request timestamps, error logs, performance data

3. How We Use Your Information

Purpose Legal Basis
Providing and maintaining serviceContract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interest
Service notifications (billing, security, policy updates)Legitimate interest
Security and fraud preventionLegitimate interest
Product optimization and analyticsLegitimate interest
Legal complianceLegal obligation
Marketing communications (with consent)User consent

We may aggregate or de-identify data for statistical analysis. Such data cannot be linked to specific individuals.

4. Cookie Policy

Type Purpose Can be disabled
Strictly necessaryMaintain login, core functionalityNo
FunctionalLanguage preferences, personalized settingsYes
AnalyticsAnonymous usage statistics, product improvementYes
Marketing (optional)Targeted advertising and performance measurementYes

We do not use third-party analytics tools that track you across websites. Basic usage statistics are collected internally for service improvement only. You can adjust cookie preferences through your browser settings.

5. Information Sharing and Disclosure

We do not sell your personal information, including as defined under applicable laws (such as CCPA). We only share information in the following circumstances:

  • Service providers: Cloud computing, payment processing, customer support, analytics — all bound by confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS compliant payment processor, Waffo Pancake, and is not stored on our servers.
  • AI model providers: Chat content is processed by third-party AI providers (DeepSeek for tutoring, Creem for content safety filtering) solely for generating teaching responses and enforcing usage guidelines. These providers are contractually bound to use your data only for providing the service.
  • Legal requirements: As required by law, court order, or legitimate government request.
  • Business transfers: In cases of merger, acquisition, or similar corporate transactions, with advance notice and continued protection obligations.
  • With your consent: For any other purpose, only with your explicit prior consent.

6. Data Security

  • Transmission encryption: TLS/HTTPS
  • Storage security: Passwords and sensitive data are encrypted or hashed
  • Access controls: Principle of least privilege; employees sign confidentiality agreements
  • Regular security audits and vulnerability scans

In the event of a security incident affecting your rights, we will notify you and relevant regulators within 72 hours of discovery, as required by applicable law. Please safeguard your account credentials and do not share them with others.

7. Data Retention

Data Type Retention Period Disposal
Account informationDuring active period; 90 days after account deletionDeleted or anonymized
Transaction recordsAs required by law (typically 5-7 years)Deleted or archived
Customer support records3 yearsSecurely deleted
Security audit logs12 monthsSecurely deleted

8. Your Data Rights

To exercise the following rights, contact us. We will process requests within 30 calendar days.

Right Description
Right to knowUnderstand what data we collect and how we use it
Right to accessReceive a copy of your personal data
Right to rectificationCorrect inaccurate or incomplete information
Right to erasureRequest deletion of data under specific conditions
Right to restrict processingPause data processing under specific circumstances
Right to data portabilityReceive data in a machine-readable format
Right to objectObject to processing based on legitimate interest or marketing
Right to withdraw consentWithdraw consent for processing based on consent

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.

9. Marketing Communications

With your consent, we may send marketing-related emails, SMS, or in-app notifications about our products and services. You can unsubscribe at any time by clicking the "unsubscribe" link in emails, disabling marketing notifications in account settings, or contacting us. Unsubscribing does not affect service-related notifications (billing, security, policy updates).

10. International Data Transfers

Our servers and partners may be located in Singapore, the United States, or other jurisdictions where our service providers operate. For international transfers, we protect data through:

  • Data processing agreements incorporating EU Standard Contractual Clauses (SCC) where applicable
  • Transfers only to recipients with equivalent protection levels
  • Transfers to countries with adequate data protection as recognized by relevant authorities

11. Children's Privacy

This service is intended for users aged 13 years and older. We do not knowingly collect information from users below this age. If you believe your child has provided us with information, please contact us immediately at privacy@edumate.ai, and we will promptly delete it.

12. Third-Party Links and Services

Our service may contain links to third-party websites or integrate with third-party services. This policy applies only to information we directly collect. We are not responsible for third-party data practices. We recommend reviewing their policies before using their services.

13. Policy Changes

We may update this policy from time to time. For significant changes, we will notify you at least 15 days in advance via platform notice or your registered email address, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance of the updated policy.

14. Contact Us

  • Privacy inquiries: privacy@edumate.ai
  • Customer support: support@edumate.ai
  • Company: EduMate
  • Mailing address: EduMate, Singapore
  • Service hours: Monday to Friday, 09:00–18:00 UTC+8