Privacy Policy
Last Updated: October 2026 • Effective Date: October 1, 2026
Key Privacy Commitments
- Singapore PDPA Aligned: Full adherence to the Singapore Personal Data Protection Act.
- Zero Ad Tracking: We never sell personal data or display third-party advertisements.
- No Public AI Training: Student revision interactions are never used to train public AI models.
- Encrypted & Isolated: All data is encrypted in transit and at rest with strict Row-Level Security.
1. Introduction & Scope
Revisionbots ("we", "us", or "our") operates the Revisionbots educational platform accessible at revisionbots.com. We are committed to safeguarding the personal data of students, parents, guardians, and educators who use our Socratic AI revision tutors and learning tools.
This Privacy Policy explains how we collect, use, disclose, and protect personal data in compliance with the Singapore Personal Data Protection Act 2012 (PDPA) and relevant international data privacy standards.
2. Information We Collect
We collect only the minimum personal data necessary to provide high-quality, personalized academic revision:
- Account & Profile Information: Name, email address, password hash, and selected grade level (e.g., Primary 5/6 or Secondary 1-4).
- Academic Revision & Learning Data: Messages and questions exchanged with Revisionbots, quiz responses, generated flashcards, worksheet topics practiced, and diagnostic mastery records.
- Payment & Billing Data: Payment card details and transactions are processed directly and securely by our PCI-DSS certified payment processor (Stripe). Revisionbots does not store full credit card numbers or security codes on our servers.
- Technical & Log Data: IP address, browser type, operating system, and session timestamps used solely for system security, fraud prevention, and performance monitoring.
3. How We Use Your Information
We process personal data strictly for legitimate educational and operational purposes:
- To power the interactive Socratic revision dialogues tailored to Singapore MOE syllabus criteria.
- To compute individual topic diagnostic feedback, misconception alerts, and mastery metrics in your Revisionbot Dashboard.
- To generate downloadable revision flashcard sets and worksheet exercises.
- To manage your account, active subscriptions, and 30-day risk-free trial access.
- To respond to customer support inquiries and provide essential service notifications.
4. Artificial Intelligence & Learning Data Protection
Revisionbots uses secure large language models and vector database retrieval strictly within an academic framework:
Data Isolation: Student academic queries and chat dialogues are transmitted via encrypted enterprise API connections. They are not incorporated into public datasets or used to train foundational AI models.
Academic Guardrails: Revisionbots are strictly constrained to MOE-approved syllabuses (O-Level Geography, Chemistry, Additional Mathematics, PSLE Math, and PSLE Science).
5. Children's Privacy & Minors
Our platform provides revision tools for students preparing for PSLE (typically ages 10 to 12) and O-Level examinations (typically ages 13 to 17).
For students under the age of 13, registration and subscription must be performed by or with the verifiable consent of a parent or legal guardian. We do not knowingly collect personal data from children without parental awareness and consent. Parents or guardians may review, update, or request the deletion of their child's account at any time.
6. Data Storage & Security Measures
We implement comprehensive technical, administrative, and physical safeguards:
- Transport Encryption: All data transmitted between your browser and our servers is encrypted using modern TLS 1.3 / HTTPS.
- At-Rest Encryption: Database records and backups are encrypted at rest using industry-standard AES-256.
- Database Row-Level Security (RLS): Granular PostgreSQL Row-Level Security guarantees that each student or parent can only access their own revision history and learning data.
7. Your Rights under the Singapore PDPA
Under the Singapore Personal Data Protection Act, you possess clear rights regarding your personal data:
- Right to Access: You may request a copy of the personal data we hold about you.
- Right to Correction: You may request the correction of inaccurate or incomplete personal data.
- Right to Withdraw Consent / Data Deletion: You may withdraw your consent for data processing or request the permanent deletion of your account and revision history.
Requests are processed promptly within 30 calendar days upon identity verification.
8. Third-Party Service Providers
We partner only with vetted, enterprise-grade cloud infrastructure providers bound by strict confidentiality and data protection obligations:
- Supabase: Secure cloud database storage with enterprise SOC 2 compliance.
- Stripe: Payment processing with Level 1 PCI-DSS compliance.
- Vercel: Secure global web hosting and CDN infrastructure.
9. Changes to this Policy
We may update this Privacy Policy from time to time to reflect improvements to our platform or legal requirements. Material updates will be highlighted on our website or communicated directly to registered account holders via email.
10. Contact Our Data Protection Officer (DPO)
If you have any questions, feedback, or requests concerning your personal data and privacy, please contact our Data Protection Officer: