This Privacy Policy explains how Informative Technologies Private Limited, a company registered in Singapore (UEN 202603891C) with its registered office at 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051 (Informative, we, us), collects and uses personal data when you visit or use Informative Academy.
Acknowledging this notice confirms that it was shown to you. It is not blanket consent. Where processing is optional or consent is the appropriate basis, we ask separately for a specific choice that can be withdrawn.
1. Who this policy covers
This policy covers visitors, learners, parents and guardians, tutors and facilitators, organisation users, customers, and people who contact us. Learner accounts receive additional protection. Read the Children's Privacy Notice, Parent Privacy Notice, and Parent Rights Guide for the child-specific rules and consent process. Those owners control where a general summary differs from a child-specific requirement.
2. Personal data we collect
Depending on how you use the Platform, we collect:
- identity and account data, such as name, display name, email, role, country, username, and account identifiers;
- age and relationship data needed for learner eligibility, parental consent, family links, and programme delivery, including date of birth for learner accounts;
- education and product data, such as lesson progress, answers, achievements, simulations, saved work, reflections, reports, programme participation, tutor records, and learner-controlled sharing choices;
- communications and preference data, including support messages, notification settings, newsletter choices, consent or acknowledgement records, and suppression records;
- billing and transaction metadata for adult purchasers; payment-card details are handled by the payment provider;
- security and technical data, such as timestamps, device and browser information, session and request identifiers, security events, and limited IP-derived security information; and
- content you choose to submit, which may include personal information in free text or uploaded material.
We do not sell personal data. We do not use learner or signed-in account activity for behavioural advertising. We do not ask learners for payment-card data, precise geolocation, or biometric data.
3. How and why we use personal data
We use personal data to:
- create, authenticate, secure, and support accounts;
- provide lessons, practice, programmes, progress, learner workspaces, linked-adult support, and requested reports;
- check age, relationship, entitlement, and parental-consent requirements;
- personalise education within the child-specific safeguards, without using educational signals to make legal or similarly significant decisions;
- operate optional features only where their separate choice or other stated lawful basis permits;
- process adult payments and administer subscriptions;
- send service messages and, only where permitted, optional updates;
- prevent abuse, moderate content, investigate reports, protect children, and respond to incidents;
- diagnose and improve the Platform using minimised data and consent-gated public-site analytics; and
- comply with law, enforce agreements, and establish or defend legal claims.
Our lawful basis depends on the activity and jurisdiction. It may be performance of a contract, steps requested before a contract, legitimate interests in providing and securing an educational service, legal obligation, protection of vital interests, or specific consent. Consent is not used where the activity is required to provide the core service on another lawful basis. Optional consent can be refused or withdrawn without withdrawing acknowledgement of this notice.
4. Children and linked adults
The Platform's child-data rules, age bands, parental-consent methods, learner agency, profiling limits, and linked-parent or assigned-tutor visibility are owned by the Children's Privacy Policy and the public child and parent notices. Visibility is relationship- and purpose-limited. A subscription, organisation contract, or policy acknowledgement is not permission for unrestricted access to a learner's information.
5. Sharing and service providers
We disclose personal data only as needed to operate the Platform, meet an authorised programme or family relationship, comply with law, or protect a person. Providers may include Firebase/Google for authentication, database and storage; Vercel for hosting; MailerSend for service email; Stripe for adult payments; and approved AI providers for bounded educational features. Providers act under the applicable service and data-processing terms. We may also disclose data to an organisation delivering an authorised programme, a linked adult within the Platform's visibility rules, professional advisers, a regulator, court, law-enforcement body, or safeguarding authority where permitted or required.
We do not sell or rent personal data and do not give third parties learner data for their own advertising or model training.
6. International transfers
Our company is in Singapore and providers may process data in other countries. Where transfer law requires safeguards, we use the provider's applicable contractual or statutory transfer mechanism and assess the processing route. Some transfer assurance remains an active compliance control; contact us if you need information about the safeguard relevant to your data.
7. Retention
We keep data only for the documented purpose and retention period, then delete, anonymise, or minimise it unless a legal, safeguarding, security, dispute, or investigation hold applies. Periods vary by record. Examples include security events for 90 days, email events for 180 days, consent audit records for 365 days, certain generated learner reports for 24 months, and account/education records until verified deletion or the applicable lifecycle rule. A minimal suppression record may be kept to ensure we honour an objection or unsubscribe. Verified deletion may occur earlier where no hold or overriding obligation applies.
8. Your choices and rights
Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to processing, and to withdraw consent. You can change optional communications and analytics choices through the relevant settings. Parents and guardians use the linked-account rights routes described in the Parent Rights Guide. We may need to verify identity and authority before acting and may retain the minimum evidence needed to show how the request was handled.
To exercise a right, email privacy@informative.academy. You may also complain to the data-protection authority that applies where you live; in Singapore this is the Personal Data Protection Commission.
9. Cookies and analytics
Essential storage supports sign-in, security, consent and preferences. Optional public-site analytics and advertising measurement remain off until the required browser-level choice is recorded. See the Cookie Notice and change your choice in Settings.
10. Security
We use role-based access, server-side authorisation, App Check, encryption in transit, restricted administrative access, audit records, retention controls, and incident procedures. No system is perfectly secure. Tell us promptly if you suspect unauthorised access.
11. Changes to this policy
We publish the version, effective date, and revision date. If a material change affects protected use, the Platform requires a new Terms acceptance or Privacy Policy acknowledgement as applicable. A Privacy Policy acknowledgement remains separate from any optional-processing consent.
12. Contact
The Data Protection Officer function is performed internally. Email privacy@informative.academy for privacy questions, rights requests, or complaints. For general support, use the Platform support routes or email support@informative.academy.