Privacy Policy & Data Protection Notice
1. Who we are
Impact Point Pte. Ltd. ("we", "us", "our") operates Aqaday, an online learning platform used by students, teachers, and staff at educational institutions in Singapore.
If you have any questions about how we handle personal data, you can contact our Data Protection Officer:
Data Protection Officer: Lily Tang (Email: aqaday@impactpoint.sg)
2. What personal data we collect
When you use Aqaday, we may collect:
Account information, obtained when you sign in with your Google account: your name, email address, and Google profile photo (if available).
Learning activity data: your progress, scores, answers, time spent on activities, and other records generated as you use the platform.
Technical information: device type, browser type, and general usage logs, collected automatically to keep the platform running properly.
Institution-provided information: where your school or institution enrols you on the platform, they may provide us with your name, class, and student/staff ID.
We do not collect more than we need to run and improve the platform, and we do not collect sensitive information (such as health or financial data) unless it is directly required for a specific learning feature, in which case we will tell you separately.
3. Why we collect it
We use personal data to:
Create and manage your account
Let you log in securely via Google Sign-In
Track and display your learning progress
Provide reports to your institution, teachers, or (where applicable) parents/guardians
Maintain the security and proper functioning of the platform
Improve our platform based on how it is used (in aggregated or anonymised form wherever possible)
We do not use personal data for advertising, and we do not sell personal data to third parties.
4. Consent, and a note for parents and guardians
By creating an account and using Aqaday, you consent to the collection, use, and disclosure of your personal data as described in this notice.
If you are a parent or guardian of a student under [13/your chosen age threshold]: we require your consent before your child's account is created. You will be asked to review and agree to this notice as part of the signup process arranged through your child's institution. You may withdraw this consent at any time by contacting us at [dpo@yourplatform.com] or through your institution, though this may mean your child can no longer use the platform.
5. Where your data is stored
Your data is stored using Google Firebase, hosted in Google's Singapore data centre region (asia-southeast1). This means your data is kept within Singapore.
Google Cloud/Firebase acts as our data storage provider (a "data intermediary") and processes data only according to our instructions and under contractual data protection obligations. We do not otherwise transfer your personal data outside Singapore.
6. Who we share your data with
We share personal data only with:
Your educational institution — for the purpose of tracking learning progress and supporting your education
Google Firebase/Google Cloud — solely as our infrastructure provider, to host and secure the platform
We do not share personal data with any other third party without your consent, unless required by law.
7. How long we keep your data
We keep personal data for as long as your account is active and for 12 months after your account is closed or you leave your institution, to allow for any transfer of academic records. After this period, your data is deleted or anonymised, unless we are required by law or by your institution's own record-keeping requirements to retain it for longer.
8. Keeping your data secure
We take reasonable technical and organisational steps to protect your personal data, including:
Access controls so only authorised staff can view platform data
Secure authentication via Google Sign-In (we do not store your Google password)
Regularly reviewed access rules that restrict what data each user can see
Encryption of data in transit and at rest (provided by Google Cloud/Firebase infrastructure)
While we take these precautions seriously, no system can guarantee complete security. If we become aware of a data breach that is likely to cause you harm, we will notify the Personal Data Protection Commission (PDPC) and affected individuals as required under the PDPA, generally within 3 calendar days of assessing the breach as notifiable.
9. Your rights
You (or, for students under [13], your parent/guardian) may:
Access the personal data we hold about you
Correct inaccurate personal data
Withdraw consent for us to continue collecting, using, or disclosing your personal data (subject to any legal or contractual requirements this may affect, such as continued use of the platform)
To exercise any of these rights, contact our Data Protection Officer at aqaday@impactpoint.sg. We will respond within a reasonable time, generally within 7 days.
10. Changes to this notice
We may update this notice from time to time, for example if we add new features or change how we handle data. We will post the updated version here with a new "Last updated" date, and where changes are significant, we will notify you directly or through your institution.
11. Contact us
If you have questions, concerns, or complaints about how we handle your personal data, please contact:
Data Protection Officer: Lily Tang (Email: aqaday@impactpoint.sg)
You may also lodge a complaint with Singapore's Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg if you believe your concerns have not been adequately addressed.