Privacy Notice

This notice explains how Lukesh A/L Sasikumar, trading as EduScope AI ("we"), handles personal data when you use our website and Android app (the "Service"). We are the data controller for personal data processed through the Service, and we follow Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Data we collect and why

• Account data (name, email, password or Google sign-in identifier): to create and secure your account. Basis: contract.
• Study profile (country, curriculum, school type, school year, chosen subjects, study language, exam goal): to show the right syllabus and content. Basis: contract.
• Learning activity (answers, scores, mock exam results, topic progress, XP, streaks, study plans, achievements earned): to provide practice, feedback, progress reports and the revision planner. Basis: contract.
• AI tutor messages: to generate answers, apply daily limits and keep your chat history. Messages are processed by our AI model provider for this purpose only. Basis: contract.
• Teacher and class data (class names, membership, class chat messages, teacher-written questions and attempts): only where a student joins a class with a teacher's code. Basis: contract.
• Technical data (IP address, device and browser type, logs): for security, fraud prevention and fixing problems. Basis: legitimate interests.
• Support messages: to answer your questions. Basis: legitimate interests.
• Product emails and notifications (such as syllabus update alerts and study reminders): only where you have turned them on. Basis: consent, which you can withdraw in Settings.

2. Student data and children

Many of our users are school students, and we take their privacy seriously:

• Students under 18 should use the Service with a parent's or guardian's consent. Paid subscriptions for minors must be bought by a parent or guardian.
• We collect only what is needed to teach: we do not ask students for phone numbers, home addresses, photos or precise location.
• A student's learning activity, scores and AI tutor messages are visible only to that student. Parents can view their child's progress only through a share link that the student (or parent) creates and can switch off at any time.
• Teachers see progress only for students who joined their class with a class code, and only for that class's activity.
• We never show advertising to students, never use student data for advertising, and never sell student data.
• Parents can contact us at any time to view, correct or delete their child's data (see section 8).

3. Payment details

We never see, collect or store your card number, bank details or e-wallet credentials. All payments are processed by Paddle.com, our Merchant of Record, on their secure checkout. Paddle handles payment processing, sales tax, invoicing, refunds and fraud checks, and acts as an independent controller for that data under Paddle's Privacy Policy.

We receive and store only what we need to run your subscription: your plan, billing interval, subscription status, renewal date and Paddle's customer and subscription reference numbers. This lets us unlock Premium features and confirm your subscription if you contact support.

4. Public reference data

The Service is built on curriculum reference data that is not personal and is readable by any visitor: the list of subscription plans and their features, the list of school years and forms, topic subtitle headings, learning objective headings, and the catalogue of achievement badges. These lists contain no student information — no names, answers, scores or activity. Your personal learning records (progress, attempts, exam results, plans, messages and profile) are protected by per-user access rules in our database and are never publicly readable.

5. Who we share data with

• Service providers who host our app and database, and the AI providers who run the AI tutor, planner and syllabus tools — only as needed to run the Service.
• Paddle.com, our Merchant of Record, for sales, subscription management, payments, tax compliance and invoicing.
• Professional advisers, such as legal and accounting advisers.
• Authorities, where the law requires it.

We do not sell your personal data, and we do not share it with advertisers. Some providers may process data outside Malaysia; where that happens we use providers that apply appropriate safeguards.

6. Retention

We keep your data while your account is active. If you delete your account, we delete or anonymise your personal data within 90 days, except for records we must keep by law (for example, payment and tax records held by Paddle).

7. Your rights

You can ask to access or correct your personal data, ask us to delete it, withdraw consent, or limit how we process it. Parents may exercise these rights on behalf of their child. Email hello@eduscope.ai and we will respond within 21 days.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-user data isolation in our database.

9. Cookies and local storage

We only use essential cookies and browser storage needed to keep you signed in, remember settings and run reminders. We do not use advertising or tracking cookies. You can clear them in your browser, but you will be signed out.

10. Changes to this notice

We may update this notice from time to time. The date at the top shows the latest version, and material changes will be announced in the app.

11. Contact

Lukesh A/L Sasikumar (EduScope AI) — hello@eduscope.ai