Privacy & PDPA
How we handle personal data in Singapore
This notice describes how uBelong collects, uses and protects personal data for users in Singapore, in line with the Personal Data Protection Act 2012 (PDPA). [FOUNDER-REVIEW: this page is a structured draft for legal review — not final legal language.]
What we collect
Account details (a parent's or school contact's name and email); a child's first name, date of birth and learning profile; documents a family chooses to upload (such as prior assessments); the child's work inside sessions (answers, handwriting, spoken responses where the microphone is used); and behaviour or progress notes entered by families, schools or our specialists.
Cross-border processing
Data is stored on Amazon Web Services infrastructure in Tokyo, Japan. AI processing (lesson generation and safety checking) and voice synthesis are performed by processors in the United States under contractual safeguards consistent with the PDPA's Transfer Limitation Obligation. [FOUNDER-REVIEW: confirm final processor list and contract references before publishing to schools.]
Children's data
A child's data is processed only with the consent of their parent or guardian, only for the purposes consented to, and is never used in advertising. Nothing about a child is visible to a school until that child's parent consents. Anything a child says that raises a safeguarding concern is routed to a human.
Consent and withdrawal
Consent is captured per purpose, with a record of when and how it was given. You may withdraw consent, request access to, or request correction or deletion of personal data at any time by contacting us; withdrawal stops the related processing from the next activity onward.
Contact
For any question, request or complaint relating to personal data, contact the person responsible for our data-protection function at hello@ubelong.ai. [FOUNDER-REVIEW: confirm the named DPO-function contact.]
