🔒 Privacy Policy

1. Who We Are

BrightLab SG is an online primary school Mathematics learning platform for Singapore students from Primary 1 to Primary 6. We are operated by an individual entrepreneur based in Singapore.

2. What Personal Data We Collect

We collect the following types of personal data when you register or use BrightLab:

• Full name and email address of the parent or guardian who registers
• Child’s first name and Primary school level (e.g. Primary 2)
• Payment information — processed securely by Stripe. We do not store card details on our servers
• Usage data — lessons completed, quiz scores, time spent, badges earned
• Device and browser information for technical support purposes
• Communications you send to us via email or contact forms

We do not collect your child’s NRIC, school name, address, or any sensitive personal data beyond what is listed above.

3. How We Use Your Personal Data

We use your personal data only for the following purposes:

• To create and manage your account and your child’s student profile
• To deliver lessons, quizzes and course content on BrightLab
• To process subscription payments securely via Stripe
• To send you important account notifications — such as trial expiry reminders and payment receipts
• To send you educational tips, product updates and new course announcements (you may unsubscribe anytime)
• To track your child’s learning progress and display it on your parent dashboard
• To improve our platform based on how students use it
• To respond to your support enquiries

We will never sell your personal data to third parties. We will never use your data for advertising unrelated to BrightLab.

4. Data Relating to Children

BrightLab is designed for primary school children aged 6 to 12. We take the protection of children’s data very seriously.

• All accounts must be registered by a parent or guardian aged 18 or above
• We only collect the child’s first name and school level — no other identifying information about the child
• We do not allow children to communicate with other users on our platform
• We do not display advertising to children on BrightLab
• Parents may request deletion of their child’s data at any time by contacting us

5. Cookies and Tracking

BrightLab uses cookies to keep you logged in and to improve your experience. We use the following types of cookies:

• Essential cookies — required for the platform to function. Cannot be disabled.
• Analytics cookies — help us understand how visitors use our site. We use anonymised data only.
• Preference cookies — remember your settings such as language and display preferences.

You can disable non-essential cookies in your browser settings at any time. This will not affect your ability to use BrightLab.

6. Third-Party Services We Use

We use trusted third-party service providers to operate BrightLab. These providers only receive the minimum data necessary to perform their function and are not permitted to use your data for any other purpose.

• Payment Processor — handles all subscription payments securely. Your card details are never stored on our servers. Payment Processor Privacy Policy →
• Website Hosting Provider — stores and serves our website and platform securely
• Course Delivery Platform — delivers lessons, quizzes and tracks your child’s learning progress
• Email Service Provider — sends account notifications, receipts and educational updates
• Analytics Provider — provides anonymised website traffic data to help us improve our platform

7. How We Protect Your Data

We take data security seriously and have put the following measures in place:

• All data is transmitted over HTTPS (SSL encryption)
• Payment data is handled exclusively by Stripe — PCI DSS compliant
• Passwords are stored in encrypted form and never visible to us
• Access to personal data is restricted to authorised personnel only
• We regularly review our data security practices

8. Your Rights Under Singapore PDPA

Under Singapore’s Personal Data Protection Act, you have the right to:

• Access the personal data we hold about you and your child
• Correct any inaccurate personal data we hold
• Withdraw consent for us to use your personal data (note: this may affect your ability to use BrightLab)
• Request deletion of your account and associated personal data
• Opt out of marketing emails at any time using the unsubscribe link in any email we send

To exercise any of these rights, please email us at hello@brightlab.sg with the subject line “PDPA Data Request”. We will respond within 10 business days.

9. Data Retention

We retain your personal data for as long as your account is active. If you cancel your subscription and do not reactivate it within 12 months, we will delete your account data. You may also request immediate deletion at any time by contacting us.

Payment records are retained for 7 years as required by Singapore’s accounting regulations.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and update the “Last updated” date at the top of this page. Your continued use of BrightLab after any changes constitutes your acceptance of the updated policy.