Privacy Policy

Last updated: 6 June 2026

This Privacy Policy explains how Myko Education Centre Pte Ltd, a company incorporated in Singapore ("MYKO", "we", "us", or "our"), collects, uses, discloses, and protects personal data when you use MYKO (the "Service"). We handle personal data in accordance with Singapore's Personal Data Protection Act (the "PDPA") and other applicable laws.

By using the Service, you agree to the collection, use, and disclosure of your personal data as described here. If you are a parent or guardian agreeing on behalf of a student under 18, you consent on the student's behalf.

1. The personal data we collect

• Account data: your name, email address, and the password you set (stored only in hashed form by our authentication provider). For students, this may include your target curriculum, level, and exam date.
• Student work: photographs of your handwritten working that you upload, the answers and steps extracted from them, and your practice and diagnostic activity (attempts, marks, mastery, hints used).
• Parent or guardian contact details: where provided, a parent or guardian email and phone number, used for progress updates.
• Payment data: subscription and billing records. Card details are collected and processed directly by our payment provider; we do not store full card numbers.
• Technical data: IP address, device and browser information, approximate location (country), and cookies necessary to run the Service.
• Communications: messages you send us, such as support requests.

2. How we collect it

We collect personal data directly from you when you register, upload work, or contact us; automatically when you use the Service (technical data and activity); and from a parent or guardian where they register or consent on a student's behalf.

3. Why we use it

We use personal data to:

• provide and operate the Service, including reading and marking your work, running diagnostics, and recommending practice;
• create and manage your account and authenticate you;
• process subscriptions, trials, and payments through our payment provider;
• send service messages and, where you have provided parent or guardian contact details, progress updates;
• maintain the security and integrity of the Service and prevent misuse;
• improve the Service and our models using de-identified and aggregated data that does not identify you; and
• comply with our legal obligations.

We rely on your consent and on the performance of our contract with you as the bases for these uses, and we limit our use of personal data to these purposes.

4. Students and children

The Service may be used by students under 18. Where required, we rely on the consent of a parent or legal guardian, who is responsible for the student's use of the Service. A parent or guardian may contact us to access, correct, or request deletion of a minor's personal data, and may withdraw consent as described in clause 8.

5. Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contracts that require them to protect it and use it only for the purposes we specify. These currently include:

• Supabase — database, authentication, and storage of your account data and uploaded work (hosted in the Singapore region);
• Vercel — hosting and delivery of the web application;
• Anthropic — the AI provider whose models read and mark your uploaded working and generate hints and explanations;
• Stripe — payment processing; and
• Resend — sending transactional and notification emails.

We may also disclose personal data where required by law, to enforce our Terms, or to protect the rights, safety, or property of MYKO, our users, or others; and in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. International transfers

Some of our service providers may process personal data outside Singapore. Where we transfer personal data overseas, we take steps required by the PDPA to ensure the data continues to receive a standard of protection comparable to that under Singapore law, including through contractual safeguards.

7. How long we keep it, and how we protect it

We retain personal data for as long as your account is active and as needed to provide the Service, and afterwards only as required for legal, accounting, or legitimate business purposes, after which we delete or anonymise it. Photographs of your handwritten working are kept for up to 90 days so you can review past sessions, after which they are automatically deleted — the step-by-step marking extracted from them is retained. You can delete your account at any time from your account settings; deletion takes effect after any active subscription period and a 30-day recovery window, after which your account and associated data are permanently erased from our live systems (copies in routine backups age out on their normal cycle). We use reasonable administrative, technical, and physical safeguards, including encryption in transit and access controls, to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights under the PDPA

Subject to the PDPA, you may:

• access the personal data we hold about you and ask how it has been used or disclosed;
• request that we correct inaccurate or incomplete personal data; and
• withdraw your consent to our collection, use, or disclosure of your personal data, by giving us reasonable notice.

To exercise these rights, contact us at support@mykoeducation.com. We may need to verify your identity. If you withdraw consent, we may be unable to continue providing the Service to you, and withdrawing consent does not affect processing already carried out.

9. Cookies

We use cookies and similar technologies that are necessary to sign you in and run the Service. You can control cookies through your browser settings, but disabling necessary cookies may prevent the Service from working.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you. The "Last updated" date above shows when this Policy was last revised, and your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact us

If you have questions or requests about this Policy or your personal data, contact our Data Protection Officer at support@mykoeducation.com, or write to Myko Education Centre Pte Ltd, Singapore.

Version 2026-06-06 · Questions? support@mykoeducation.com · Terms