This policy explains what personal data KiddoSG ("we", "us", "our") collects, why, who sees it, and how you can control it. It covers the KiddoSG app and the website kiddosg.com. We follow Singapore's Personal Data Protection Act 2012 (PDPA). "Personal data" means what it means in the PDPA: any data about a person who can be identified from it, alone or together with other information we have.
In short:
- We collect only what we need to help families find tutors and help each other.
- Other members see your username and town, never your full name.
- Children's names, schools and addresses are never shown publicly.
- We never sell your data, and we show no ads from outside companies.
- Our main database is kept in Singapore.
- You can see, correct, download or delete your data at any time.
1. Who we are and how to contact us
- KiddoSG is a Singapore app and website for families, tutors, coaches, tuition centres and enrichment studios.
- KiddoSG is run by Goldmend Studio, a company registered in Singapore, UEN 53534524X. Goldmend Studio is the organisation responsible for your personal data under the PDPA.
- Data Protection Officer: privacy@kiddosg.com
- Child-safety reports: safety@kiddosg.com
- General help: help@kiddosg.com
2. What we collect
If you only look around (guests)
- You can browse public pages without an account. We don't ask who you are.
- We collect only the basic technical data any app or website needs to work and stay secure (see "Device and usage data" and "When you visit kiddosg.com" below).
When you sign up (everyone)
- Your Singapore (+65) mobile number (required) and email (optional).
- Your username and your town, picked from the official list.
- The version of the terms you agreed to, and when.
- An optional profile photo of yourself (head and shoulders). It's never required, must never be a child, and is checked before other members see it.
Your profiles
- If you have more than one profile (for example parent and tutor), we keep each profile's username, town, photo, chats, settings and money separately.
- We know they belong to one account, but other members never see that, and one profile's data is never shown in another.
Parents: about your children
- Each child's nickname or first name, age band, school level, subjects and learning needs, entered by you.
- We don't ask for your child's full name, school or NRIC, and you must not add them.
- Children under 13 never have their own account. Teens aged 13–17 can have a teen login linked to a parent.
Tutors, coaches and centres
- Your profile: teaching summary, experience, education, subjects, rates, areas, availability, photos and logo.
- If you link it, your Google Business Profile, so we can show your Google rating, labelled "Source: Google".
- Certificates you upload:
- We check them, record the result and the date, then delete the file.
- Other personal details on the certificate (NRIC, address, date of birth) are blurred before anyone looks at it.
- The optional video ID check:
- Our team looks at your photo ID on a live video.
- Nothing is recorded: no screenshots and no video, and your NRIC number is never written down.
- We store only "ID checked by our team" and the date.
- Centres: business name, UEN, MOE registration, branches and listing details, and your staff's names, mobile numbers, roles and branches.
- Classes and promotions: class sizes, seats, timetables, closed dates, promotions, ads and banner bids.
When you use the app
- Requests, applications, booking requests, seat holds, lesson records and reviews.
- Messages in chats and posts in Parents' Corner.
- Payment records: amounts, dates and status, including optional support payments. Card details are handled by our licensed payment provider; we never see your full card number.
- Reports and safety cases.
- Device and usage data needed to run the app safely: app version, device type, crash reports and sign-in times.
- Your sign-in: a secure sign-in key is stored on your phone so you stay signed in. It is removed when you log out.
Calendars (only if you turn them on)
- Sending lessons to your calendar: we create the lesson events. You choose what other apps see in the title, for example "Tuition" or "P5 Maths". If you use a private calendar link, anyone with the link can see those events, so keep it private. You can reset it at any time.
- Showing your busy times: KiddoSG reads your phone calendar on your phone only, to warn you about clashes. Your own events are never uploaded to us.
When you visit kiddosg.com
- Our website host (Cloudflare) processes basic technical data, such as your IP address and browser type, to deliver the page and protect it from attacks.
- The page loads its font from Google Fonts.
- Cookies: we don't use advertising or tracking cookies, and we don't build profiles of how you use the website. If we ever add analytics, we will use a privacy-friendly service, update this policy and, where needed, ask you first.
- In the app, we store a few things on your phone to make it work, such as your sign-in key and settings like your language. They stay on your phone and are removed when you log out or delete the app.
How we collect it
- From you, when you sign up, fill in your profile, book, chat, post or contact us.
- From other members, with their consent and for a clear reason. For example, a parent adds their child; a centre invites you as staff; a parent leaves a review of a lesson with you.
- From public sources you point us to, such as your Google Business Profile rating, or a centre's UEN in the ACRA register and its MOE registration.
- From your device, for the basic data needed to run the app (see "Device and usage data" above).
- From our providers, such as the payment partner confirming a payment, or the SMS provider confirming a code was sent.
Photos and recordings
- We never record lessons, video calls or ID checks.
- We never use your photos, or anything you post, in our marketing unless you give us separate permission for that.
- Our own guides and website use illustration photos, not photos of members or their children.
3. Why we use it
- To create and secure your account, and to check that members have a Singapore mobile number.
- To match families with tutors, centres and shared groups near them.
- To run booking requests, seat holds, lessons, payments, refunds and disputes.
- To check tutors' and centres' qualifications and registrations, and show honest badges.
- To let centres manage their staff and what each role can see.
- To keep children safe:
- our privacy filter removes phone numbers, addresses, NRIC, bank details and children's names from chats and posts;
- we review reports and act on them.
- To send you service messages, such as booking replies, lesson reminders and payment receipts.
- To improve the app, using data that is grouped and doesn't identify you.
We send marketing messages only if you say yes, and you can stop them at any time. We respect Singapore's Do Not Call rules.
If we ever want to use your personal data for a new purpose, we will tell you first and ask for your consent.
4. Sponsored content
- Verified tutors and centres can show "Sponsored" banners and ad pages for their own classes. We show no ads from outside companies.
- Banners are chosen only by area (all Singapore, or your region from your town), and ad pages by level and subject. We don't build profiles of you for advertising, and advertisers never receive your personal data.
- You can hide an ad or report it.
- Parents' Corner, chats, safety screens, payment screens and children's screens never show ads.
5. AI-assisted checking
- We use an AI service to help check certificates, profiles and ads, and to spot unsafe or personal content in posts and chats.
- People make the final decision on badges, safety reports and suspensions.
- We give the AI only what is needed for each check.
- We choose providers that don't use our data to train their models.
6. What other members see
- Everyone, including guests:
- your username and town;
- your helper level;
- for tutors and centres, your public profile and reviews.
- Never shown:
- your full name;
- children's names, schools or home addresses;
- who you invited;
- that two profiles belong to the same person.
- Contact details stay hidden until a match is accepted. Then the tutor or centre sees what's needed for lessons, for example your mobile number, and your block and street for home lessons.
- Parents of teens (13–17) can read their teen's chats with tutors, and tutors are told this.
- Centre staff see only what their role allows. For example, teachers may be locked out of finance and other teachers' classes.
- The app shows how many members are in each town. Towns with fewer than 10 members show only "fewer than 10".
7. Who we share it with
We never sell personal data. We share it only:
- with other members, as described above, after a match;
- with service providers who work for us, under contract and only for our purposes:
- our database, sign-in and file storage provider (Supabase, Singapore region);
- the licensed payment provider;
- the SMS provider for sign-in codes;
- the website host (Cloudflare);
- our email provider;
- our AI checking provider;
- with authorities, when Singapore law requires it, or when a child may be at risk.
8. Where your data is stored
- Our main database, sign-in and file storage are hosted in Singapore.
- Some providers may process data outside Singapore: for example the website host, email, SMS and AI checking, and our database provider's support and operations teams. When they do, we make sure your data gets protection comparable to the PDPA, for example through contract terms.
9. How long we keep it
- Certificate files: deleted right after the check. We keep only the result and the date.
- Your account data: kept while your account is open. When you delete your account, we delete or anonymise your personal data within 30 days.
- Records we must keep by law are kept for as long as the law requires, for example payment records for tax and accounting.
- Sign-in on your phone: until you log out, or after 12 months without using the app.
- Safety cases: the messages involved are kept securely for the investigation. Only the safety team can see them.
10. How we protect it
- Data is encrypted when it is sent and when it is stored.
- Access rules in our database let each member see only their own data and what others have chosen to share with them.
- Access by our team is limited to the people who need it.
- Safety evidence is kept separately.
- We regularly review which providers we use.
- If a data breach could harm you, we will tell you and the Personal Data Protection Commission (PDPC), as the PDPA requires.
11. Your choices and rights
You can:
- see and download your data (Settings → Your data);
- correct your details at any time in the app;
- withdraw consent for any use. We'll explain what can still work without it;
- turn off calendar connections and remove your photo at any time;
- delete a profile, your family's data or your whole account in Settings.
For anything else, email privacy@kiddosg.com. We reply within 30 days.
About these requests:
- Access requests are free. We may ask you to confirm who you are first, so no one else can get your data.
- If we can't do what you ask, for example because the law requires us to keep a payment record, or because the data is about another person, we will tell you why.
- If you withdraw consent or delete data, some parts of KiddoSG may stop working for you. For example, a tutor can't be matched without your child's level, and a booking can't go ahead without a mobile number. We'll tell you what changes before you confirm.
12. Children
- Only a parent or legal guardian may add a child, and they give consent for that child.
- If you think a child's data was added without a parent's consent, email privacy@kiddosg.com and we will remove it.
13. Changes to this policy
- We'll tell you in the app before important changes take effect.
- The version and date at the top show the latest version.
14. Complaints
Please contact our Data Protection Officer first, at privacy@kiddosg.com. If you're not satisfied, you can contact the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.
15. Law
This policy is governed by the laws of Singapore.