1 Introduction
SparkMyClass ("the Platform") is operated by Pickmy AI Limited ("we", "us"). We are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect the information you provide when using the Platform.
This policy applies to all users of SparkMyClass, including teachers and students.
2 Information We Collect
2.1 Teacher Accounts
- Name and email address
- Login credentials (passwords are stored encrypted; we cannot view your original password)
- Classroom data (class names, settings)
- Teaching content (quiz questions, test materials)
2.2 Student Data
- Student names (entered by teachers)
- Student login passwords (set by students, stored encrypted)
- Behavior point records
- Game participation records and scores
- Pet evolution status
We do not collect students' email addresses, phone numbers, home addresses, or other personal contact information.
2.3 Automatically Collected Data
- Browser type and version
- Device type and operating system
- IP address (used for security monitoring)
- Usage timestamps and page views
2.4 Payment Information
Paid plan payments are processed through PayPal. The Platform does not collect, view, or store any credit card numbers, bank account details, or other payment card information. All payment data is handled directly by PayPal. Please refer to PayPal's privacy policy for details.
For our own records, we only store the PayPal order ID and payer email address associated with each transaction. No other payment information is retained.
We Don't Sell Your Data
Your data is never sold or used for advertising. We only use it to provide and improve the Platform.
3 How We Use Your Data
We use the collected data solely for the following purposes:
- Providing and maintaining the Platform's services
- Creating and managing user accounts
- Processing and recording classroom activities
- Improving user experience and platform features
- Sending service-related notifications (e.g., account security, subscription status)
- Ensuring platform security and preventing misuse
We do not use your data for advertising or marketing purposes.
4 Data Sharing
We do not sell your personal data. We may share data in the following circumstances:
- PayPal: To process payments for paid plans.
- Cloud Service Providers: We use Supabase (database hosting) and Cloudflare (content delivery and security). These providers are contractually bound to process data only as instructed by us.
- Legal Requirements: We may disclose data if required by law or to protect user safety.
5 Data Security
We implement reasonable technical and organisational measures to protect your data:
- All passwords stored using bcrypt one-way encryption
- HTTPS encrypted transmission across the entire site
- Database access controls and Row Level Security (RLS) policies
- Regular security audits and vulnerability scanning
6 Data Storage Location
Your data is stored on Supabase cloud servers located in Singapore. The application server is hosted and managed via Laravel Forge. All data transmission is encrypted.
7 Data Retention
We retain your data for as long as you use the Platform. We will delete data in the following circumstances:
- You delete your account — we will remove all personal data within 30 days
- Your account is inactive for more than 24 months — we will send a notification, and if there is no response, we will delete the account
Anonymised statistical data (such as platform usage metrics) may be retained to improve the service.
8 Children's Privacy
The student features of the Platform are used under teacher supervision. Student accounts are created and managed by teachers, and students are not required to provide email or other personal contact information.
We do not directly collect personal data from children under 13. Teachers are responsible for ensuring appropriate parental or guardian consent has been obtained. If you believe a child has provided personal data without proper consent, please contact us immediately.
9 Cookies
The Platform uses cookies and similar technologies to:
- Remember your login status (essential cookies)
- Store your language preferences (functional cookies)
- Analyse platform usage to improve the service (analytics cookies)
We do not use advertising tracking cookies. You can manage cookies through your browser settings, but disabling essential cookies may affect login functionality.
10 Your Rights
Under the Personal Data (Privacy) Ordinance (Cap. 486, Laws of Hong Kong), you have the right to:
- Access — request to view the personal data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your account and all related data
- Export — request your data in a common format
To exercise these rights, please email [email protected]. We will respond within 30 days.
11 Policy Updates
We may update this Privacy Policy from time to time. Significant changes will be notified via email and platform notification. Continued use of the Platform constitutes acceptance of the updated policy. Historical versions are available upon request via email.
12 Contact Us
If you have any questions about this Privacy Policy, please contact us.
Email us at
[email protected]