Privacy Policy
Last updated: 24 June 2026
This Privacy Policy explains how the Collection application collects, uses, stores, and protects information when schools, administrators, staff, parents, guardians, payers, or students use the platform.
1. Information We Collect
We may collect account information, school profile details, student-related administrative records, collection setup data, payment records, uploaded supporting files, session and device data, and system activity logs required to operate the service.
2. How Information Is Used
Information is used to provide the collection workflow, manage user access, process payment tracking, generate receipts and reports, maintain service security, respond to data-subject requests, and support operational communication related to the platform.
3. Payment Information
The application records payment-related information needed for school collection management. Payments are handled through the school's own cash process or configured third-party payment gateway. The platform does not hold funds on behalf of users. Shared receipt links are temporary and should be handled as confidential personal-data links.
4. Data Sharing
We do not sell personal data. Information may be shared only with authorized users within the relevant school account, service providers required to operate the platform, or authorities where disclosure is required by law.
5. Data Retention
Information is retained only for as long as needed for operational, legal, security, and reporting purposes, or as required by the school account owner's administrative obligations. Platform baseline retention periods are published in the PDPA Notice and may be updated in system settings.
6. Security
Reasonable administrative and technical safeguards are applied to protect account data from unauthorized access, misuse, loss, or disclosure. Sensitive system and payment-gateway secrets are stored encrypted at rest. No internet-based service can guarantee absolute security.
7. User Rights
Users may request access, correction, or deletion of personal information where applicable and subject to legal, contractual, or administrative limitations. Requests can be submitted through the data-subject request form.
8. Updates
This policy may be updated from time to time. Continued use of the platform after updates take effect constitutes acceptance of the revised policy.