1. Information We Collect

We collect personal information necessary to deliver educational and assessment services:
Account Information: Name, email address, password for account creation and authentication.
Usage Data: Platform interactions such as searches, uploads, grading, and progress tracking.
Assessment Data: Test responses, grades, AI-generated feedback, and progress analytics.
Device Information: IP address, device type, operating system, and browser version.
Child Users: If your child uses our platform, we collect their information only with explicit parental consent.

2. How We Use Your Information

We use personal data for:
Providing Services: Deliver grading, feedback, and learning recommendations.
Improving Platform Functionality: Analyze usage to enhance AI performance and platform experience.
Tracking Progress: Provide personalized learning insights for students and parents.
Support: Respond to inquiries or technical issues.
Marketing & Communication: Send newsletters, updates, or promotional materials with your consent.
Purpose Limitation: Data is used solely for educational assessment and AI-driven feedback.

3. Parental Consent & Children’s Privacy

Parental Consent: Required for users under 13.
“By registering your child, you explicitly consent to the collection and use of their personal data for educational and assessment purposes.”
Child-Friendly Language: Explanations are simple and clear for children and parents.
No Dark Patterns: Gamification avoids manipulative designs (e.g., streak pressure, loot boxes).
Privacy-Protective Defaults: Gamification and data sharing controls are restricted by default.
Data Access & Correction: Parents can view, update, or delete their child’s data via the account dashboard.
No Monetization: Children are never required to pay or unlock premium features through gamification points.

4. Data Protection & Security

We implement robust measures to protect your personal data:
Encryption: Data is encrypted in transit and at rest.
Role-Based Access: Access is separated for parents, children, educators, and admins.
Cybersecurity Compliance: Follows CSA Cybersecurity Code of Practice; AWS Singapore cloud hosting; regular vulnerability assessments.
Breach Response: A response plan is in place; PDPC and affected users will be notified promptly if significant harm occurs or over 500 users are affected.

5. Data Retention & Accuracy

Data is reviewed regularly for accuracy and securely deleted when no longer needed.
Retention periods comply with PDPA, Singapore regulations, and contractual obligations with schools or partners.
Data collected is limited to what is necessary for educational and assessment purposes (data minimisation principle).

6. AI Transparency & Accountability

AI generates personalized feedback, learning insights, and assessment scores.
Human Oversight: Users may request a human review or appeal AI-generated results within 14 days.
Fairness & Bias Mitigation: AI models are regularly monitored for accuracy, fairness, and equitable grading.
Explainability: Feedback is provided in simple terms; scores are indicators of learning, not final judgments.
Accountability: PickyTic takes full responsibility for AI system outcomes and adheres to Singapore’s Model AI Governance Framework.

7. Sharing Your Information

We do not sell or rent your personal information. Data may be shared only:
With Consent: Explicit user approval.
With Service Providers: Trusted vendors assisting platform operation (e.g., cloud providers).
Legal Requirements: If required by law, court order, or government request.
Children’s data is never shared for marketing or behavioral profiling.

8. Cookies & Tracking Technologies

We use cookies to:
Enhance user experience
Analyze platform usage
Personalize content
You can control cookie preferences via your browser settings. Disabling cookies may limit some platform features.

9. Your Rights

Depending on applicable laws, you can:
Access: Request your personal data.
Correction: Correct inaccurate information.
Deletion: Request deletion of personal data (subject to legal or contractual limitations).
Opt-Out of Marketing: Withdraw consent for promotional messages.
To exercise these rights: Contact [email protected].

10. Legal & Regulatory Compliance

Complies with PDPA, PDPC guidelines for children’s data, and IMDA online safety principles.
Applies to all organizations in Singapore handling data via our platform.
Aligns with advisory guidelines to uphold best practices in protecting children’s personal data.

11. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in practices, technology, or legal requirements. Updates are effective immediately upon posting. Users are encouraged to review this page periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:
Email: [email protected]