Privacy Policy

brainflex ("brainflex", "we", "us") provides live small-group online tuition for primary school students in Singapore. This policy explains how we handle personal data in accordance with the Personal Data Protection Act 2012 of Singapore (PDPA).

• Parent details: name, email address, mobile number, billing information processed by our payment provider.
• Child details: first name or preferred name, primary level, subject, attendance records, assessment and quiz responses, teacher notes and progress scorecards.
• Class data: session attendance from our video conferencing provider, and lesson recordings where a session is recorded.
• Technical data: log data and basic device information needed to keep the platform secure and working.

To deliver lessons, schedule and run classes, assess and report on your child's progress, communicate with you about your child's learning, process payments, and send service messages such as session reminders. With your consent, we also send marketing communications about brainflex programmes. You may withdraw consent for marketing at any time.

Accounts are created and controlled by a parent or legal guardian. Children access a restricted student view with a code and PIN. We do not allow student-to-student messaging, public commenting, or any public display of a child's work or results.

We share data only with service providers necessary to run brainflex — our payment processor, video conferencing provider, email delivery provider, and cloud hosting and database provider — and with the teacher assigned to your child. We do not sell personal data. We may disclose data where required by Singapore law.

We keep learning records for as long as your child is enrolled and for a reasonable period afterwards so that progress history remains available should you return. Financial records are kept for the period required by Singapore law. You may request deletion of data we are not legally required to keep.

Access to parent and student records is restricted by role, protected by authentication, and enforced at the database level. PINs and passwords are stored in hashed form only. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

Under the PDPA you may request access to the personal data we hold about you or your child, request correction of inaccurate data, and withdraw consent for marketing communications. We will respond to written requests within a reasonable time.

For any privacy question or request, including data access or deletion, contact our Data Protection Officer via WhatsApp at +65 8406 1215 or through the contact form on this site.