We respect your privacy and are committed to protecting your personal information. This Privacy Policy outlines how AI Teacher Sdn. Bhd. (collectively “AI Teacher”, “we” or “us”) collect, use, disclose, and safeguard your personal data when you use our website and services. It also explains your rights and choices regarding your personal information.
Please read this Privacy Policy carefully. By visiting our website, using any of our services, signing up for AI Teacher’s products or services, or giving us any information, you agree to the terms of this Privacy Policy.
Our company is responsible for collecting and processing personal information on this website. This Privacy Policy applies to the personal information collected through our website and governs our privacy practices. It also covers interactions and services provided on the website. Please note that it does not apply to third-party websites. By using our website and our apps, you acknowledge and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.
By using our website, you acknowledge and consent to the collection, processing, and storage of your personal information as described in this Privacy Policy. We may collect various types of personal information from users of our website in Malaysia. The types of information we collect may include:
We collect this information when you voluntarily provide it to us, such as when you fill out forms on our website, follow us and interact on social media, subscribe to our newsletters, or interact with our website’s features and functionalities through our provided services. We may also collect information automatically through cookies and similar technologies.
We collect personal information on our website for the following purposes including, but not limited to:
The legal basis for processing personal information on our website includes the following:
Consent: We may rely on your explicit consent for certain processing activities, and you have the right to withdraw your consent at any time.
Contractual necessity: When you create an account, start a trial, subscribe, or make a purchase, you enter into an agreement with us — we collect and process the personal information needed to deliver those services and fulfill our obligations to you.
Legal obligations: We may process personal information to comply with applicable laws and legal requirements.
Legitimate interests: In some cases, we may process personal information based on our legitimate interests, such as improving our website, ensuring security, preventing fraud, and conducting analytics.
By using our website and applications and providing your personal information, you consent to the collection, processing, and storage of your information as described in this Privacy Policy. Your participation and submission of personal information are voluntary, and you have the right to choose whether to provide it. We may request explicit consent for certain categories of personal information as required by applicable laws. You can withdraw your consent at any time by contacting us. Please note that revoking consent may affect the services we can provide. If you are under 18, we encourage you to review this policy with a parent or guardian. Children under 13 may only use Tupai after a parent or guardian has given consent — see the Children’s Privacy section below. When providing personal information of others, ensure you have their consent and inform them of the processing purposes.
We retain your personal information as long as necessary or required by law. Retention periods vary based on the type and purpose of information. If legally obligated or for legitimate reasons, we may retain it longer. If you request deletion, we’ll make reasonable efforts to comply, unless legally obligated or for valid reasons. Anonymized or aggregated data derived from your information may be used for statistical or research purposes. For details of how to request deletion and what is retained afterwards, see our Account Deletion page.
We prioritize the security and confidentiality of your personal information. Appropriate measures are in place to prevent unauthorized access, alteration, or disclosure. Only authorized individuals with a legitimate need can access your information. We have internal policies and procedures to handle personal data properly and prevent data breaches. When transferring data to third-party providers, we ensure they have safeguards in place. In the event of a data breach, we will mitigate it and notify you and relevant authorities as required. While we take precautions, it’s important for you to protect your information and use strong passwords. We regularly review and improve our security practices. However, no method of data transmission or storage is entirely secure. By providing information online, you acknowledge and accept the associated risks.
As an individual whose personal information is collected and processed on our website, you have certain rights regarding your personal information. These rights include:
To exercise your rights, please contact us using the provided contact information. We will respond to your request in accordance with applicable data protection laws. Please note that there may be limitations and exceptions to these rights.
Our website may also include links to third-party websites and services. We have no control over their privacy practices or content. It’s important to review the privacy policies of any third-party websites or services you visit.
When you click on a third-party link or use their service, you’ll be redirected to their own website or platform with its own privacy policy. We’re not responsible for their actions, privacy practices, or content. Third-party services integrated into our website have their own privacy policies and terms.
Take time to understand how they handle your personal information. Remember, when interacting with third-party websites or services, you’re subject to their policies. Exercise caution and review the privacy practices of third parties before sharing personal information or using their services.
Upon subscribing to our services, you will be receiving marketing and/or promotional emails or calls from us, which includes promotions we may be having and upcoming events. Parents, teachers, and guardians may also receive reports from our system regarding their children, pupils or ward’s progress. If you do not wish to receive such emails, please click un-subscribe at the bottom of the email to be excluded from such communications. Alternatively, communication preferences can be updated in user profiles in the system.
Tupai is a maths learning app used by school students, including children under 13. This section explains what we collect from children, why, and the rights parents have. It is operated by AI Teacher Sdn. Bhd. (Company Registration No. 202301029300 (1523223-M)), A-3-3, Plaza Bukit Jalil (Aurora Place), No. 1, Persiaran Jalil 1, Bandar Bukit Jalil, 57000 Kuala Lumpur, W.P., reachable at hello@tupai.ai.
Parental consent comes first
Until a parent or guardian has approved, a child under 13 cannot create a Tupai account or give us any personal information. Before we ask a child for anything about themselves, the app shows an approval code and a QR code. The parent completes the approval either on our consent page at studentapp.tupai.ai/parent — opened by scanning the QR code or by following the link the child shares — or in the Tupai Parent app. In both cases, the parent is shown what Tupai collects from their child and must explicitly confirm that they are the child’s parent or guardian and consent to Tupai collecting and using their child’s information as described in this Privacy Policy. We record when this consent was given. Only after approval does the child’s signup continue.
Except for a child’s declared age band, the name, phone number, or contact information is not stored. If a parent does not approve, this record is deleted within 60 days through routine deletion processes.
What we collect from a child:
We do not collect precise location or contacts. The camera is used only with permission, for two things: scanning Tupai worksheet QR codes, which are read on the device, and photographing a maths question to ask for help — that image is sent securely to our servers, used only to generate the explanation, and never stored.
What we do not do
Tupai does not show ads of any kind to anyone and we do not sell personal information for marketing or as part of our business.
Parents’ rights
A parent or guardian can, at any time:
Data retention
When an account is deleted, the child’s personal information is deleted with it, within 90 days of a confirmed request (see our Account Deletion policy). As an exception, for up to one year after deletion, we retain a limited, de-identified record derived from the account’s phone number, solely to prevent misuse of our free trial. Billing records required for tax and accounting obligations are retained under the parent’s account and not the child’s. Where a child’s access was provided through a sponsoring organisation, anonymised practice and exam records may be retained for up to 3 years to meet reporting obligations to that sponsor.
Who processes this data
We use a small number of trusted service providers to run Tupai, each only for a stated purpose: delivering SMS sign-in codes (this provider receives the phone number), hosting our servers and database, app usage analytics, AI processing that generates the explanations (this provider receives the question content, including any photo and the conversation but never the child’s name or phone number), and subscription billing (used by the parent’s account as children cannot make purchases in Tupai). Each provider receives only the information needed for its purpose and may not use it for anything else. A current list of our service providers is available on request at hello@tupai.ai.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. The revised version will be posted on our website and will be effective immediately. It is recommended you review the Privacy Policy periodically to stay informed about how we handle your personal information. By continuing to use our website, you accept the updated Privacy Policy. If there are significant changes that affect your rights, we may provide additional notice or obtain your consent as required by law.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us at hello@tupai.ai. We will respond to your inquiries as required by applicable data protection laws.
Please ensure that your inquiries or requests are clear and include sufficient detail to help us respond effectively.