Skip to content
EduCorrect

Privacy policy

Last updated

This policy explains what personal data EduCorrect collects, why, who processes it for us, how long we keep it and the rights you have. The short version: we use your material only to make your study packs, we keep your uploads for 30 days, and you can export or delete everything at any time.

1. Who we are

EduCorrect ("we", "us") runs the EduCorrect website and app, which turns students' own study material into practice quizzes, flashcards and notes. We follow Singapore's Personal Data Protection Act 2012 (PDPA).

For any question or request about your personal data, email educorrectadmin@gmail.com. That address also reaches the person responsible for data protection at EduCorrect (our Data Protection Officer).

2. What we collect

  • Account details: your email address and how you sign in. Passwords are stored only as secure hashes by our sign-in provider. If you use Google sign-in, Google shares your name, email address and profile picture with us; we only use the email address.
  • Your study material: files you upload, text you paste, and the text we extract from them.
  • What we make for you: topics, quiz questions, flashcards and notes, plus your quiz answers and results.
  • Billing (paid plans only): Stripe handles payments and card details; we never see or store your card number. We keep your Stripe customer ID, plan, subscription status and billing dates.
  • Technical data: the cookies that keep you signed in, and server logs and error reports (such as IP address, browser and the page requested) that keep EduCorrect secure and working.
  • Cost records: for each AI request, the model used, the amount of text processed and its cost.

3. How we use it

  • To make your study packs, mark your answers and show your weak topics.
  • To run your account, keep it secure and apply plan limits fairly.
  • To take payments and manage your subscription if you choose a paid plan. Paid plans are paid in advance and payments are non-refundable (see the terms).
  • To send emails about your account: a welcome email, payment problems and account deletion. We don't send marketing emails.
  • To fix problems and keep our costs and the service under control.

We don't sell your data, and we don't use your study material to train AI models.

4. How AI processes your material

To make a pack, the text of your material is sent to OpenAI's API, which writes the topics, questions, flashcards and notes. Only the text needed for that pack is sent. OpenAI's API terms say it does not use data sent through the API to train its models by default, and that it may keep it for up to 30 days to detect abuse before deleting it. The files you upload stay in our private storage and are not sent anywhere else.

5. Who processes your data for us

We use these service providers, only to run EduCorrect and under their data protection terms:

  • Supabase: database, sign-in and private file storage.
  • OpenAI: writing your study packs from the text of your material.
  • Vercel: hosting the website and its servers, and counting page views without cookies (Vercel Analytics).
  • Sentry: error reports, so we can fix problems. They never include your material, what we generate from it, cookies or your email address.
  • Inngest: running background jobs. It receives pack and account IDs, not your material or what we generate from it.
  • Stripe: payments, for Pro and Extreme subscribers.
  • Resend: delivering our emails (your email address and the message).
  • Google: only if you choose to sign in with Google.

We may also disclose data where the law requires it.

6. Where your data is processed

Some of these providers process data outside Singapore, including in the United States. When personal data is transferred overseas, we make sure it is protected to a standard comparable to the PDPA, through the providers' contractual commitments.

7. How long we keep it

  • Uploaded files and extracted text: deleted automatically 30 days after upload.
  • Packs, generated content and quiz answers: kept until you delete your account.
  • Deleted accounts: can be restored for 7 days. After that the account and everything in it are permanently deleted.
  • Cost records: kept for our accounts, with no link to you once your account is deleted.
  • Payment records: Stripe keeps these as tax and accounting laws require.

8. Cookies and your browser

We only use the cookies needed to keep you signed in. We don't use advertising or tracking cookies, and our page-view counting uses no cookies at all. If you pick a file on one of our public pages before you have an account, it is kept in your own browser (not sent to us) for up to an hour so it's ready after you sign up.

9. Security

Data is encrypted in transit, files are kept in private storage, and the database only lets each account read its own data. No system is perfectly secure; if a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commission as the PDPA requires.

10. Your rights

  • Access: download everything we store about you from your account page (Export my data), or ask us.
  • Correction: email us if anything we hold about you is wrong.
  • Withdrawing consent and deletion: delete your account from your account page at any time.
  • Complaints: contact us first at educorrectadmin@gmail.com; we aim to reply within 30 days. You can also contact the Personal Data Protection Commission at pdpc.gov.sg.

11. Age

EduCorrect is for students aged 13 and over. If you are under 18, please make sure a parent or guardian is happy for you to use it.

12. Changes to this policy

When we change this policy we update the date at the top. If a change is significant, we'll also tell you by email or in the app before it applies.