Privacy Policy

Introduction

This Privacy Policy explains how ASTAAD VENTURES PTE. LTD. ("Word Wizards", "we", "our", or "us") collects, uses, discloses, and protects personal data when you access or use our Platform, comprising our website at Wordwizards.sg and our mobile applications available on the Apple App Store and Google Play Store (collectively, the "Platform").

We are committed to complying with the Personal Data Protection Act 2012 (PDPA) of Singapore and the advisory guidelines on children's data issued by the Personal Data Protection Commission (PDPC) in March 2024.

By registering for or using the Platform, you (as a parent or legal guardian) consent to the practices described in this Policy on behalf of yourself and your child.

1. Who We Are

Word Wizards is an educational technology platform providing AI-powered English composition coaching for Primary 1 to Primary 6 students.

Contact us at: contact@wordwizards.sg

2. Information We Collect

2.1 Information Provided During Account Registration

• Email address (parent's or guardian's email, for account recovery, communication, and parental supervision)
• Username and password (encrypted)
• Child's grade level (P1–P6)
• School name (optional)

2.2 Information Provided by or About the Child

• Composition drafts and writing submissions
• Responses to skill-builder exercises
• Progress data and performance metrics generated by the Platform

2.3 Information We Do NOT Collect

We do not collect:

• Device information (hardware type, OS, device identifiers)
• Location data or IP addresses
• Cookies for tracking or behavioral analysis
• Biometric data (camera, microphone, fingerprint)
• Information unrelated to educational purposes

3. How We Use Personal Data

We use the information collected for the following purposes:

• To provide, operate, and improve the Platform and its features
• To generate AI-powered writing feedback, model rewrites, and skill-building exercises tailored to the child's level
• To communicate with you about your account and updates
• To conduct research and analytics to improve our product and content
• To comply with legal obligations

We do not use children's data for:

• Advertising or commercial profiling
• Marketing purposes
• Any purpose unrelated to their education on the Platform

4. Use of Artificial Intelligence

The Platform uses AI technology to analyse student writing submissions and generate feedback, model compositions, and exercise recommendations. This processing is automated and is an integral part of the service.

Important Disclaimer

5. Children's Data — Special Protections

We recognise that our primary users are children and take additional steps to protect their personal data in accordance with the PDPC's March 2024 advisory guidelines on children's personal data:

Age-Based Consent

For children under 13: A parent or legal guardian must provide consent before the child uses Word Wizards. Account registration is completed by the parent/guardian, not the child.

Account Registration & Consent

At account registration, the parent or legal guardian must confirm the following:

"I confirm that I am a parent or guardian and I am registering this account for my child. I have read and agree to the Terms of Service and Privacy Policy."

We require the registering adult to:

• Confirm they are the parent or legal guardian of the child user
• Attest that they have read and agree to the Privacy Policy and Terms of Service
• Provide valid parental consent for the child's use of the Platform. This consent is required in accordance with the PDPC's March 2024 Advisory Guidelines on Children's Personal Data, which mandate parental consent for all children under 13 and encourage organizations to maintain parent/guardian contact details to enable them to take steps to mitigate risks and harms.
• Provide the parent's or guardian's email address for account recovery, communication, and parental supervision

We rely on this attestation in good faith. All account communications, password reset links, billing notifications, and important service alerts will be sent to the parent's/guardian's email address. This ensures the parent can manage account access and stay informed about the child's use of the Platform.

Data Minimization

• We collect only the minimum personal data necessary for the Platform to function
• We do not knowingly allow children to create accounts independently
• We do not serve targeted advertisements to children
• We do not sell or share children's data with third parties for marketing purposes

6. Disclosure of Personal Data

We do not sell personal data. We may share data with:

• Service providers who support our operations (e.g. cloud hosting, analytics) — bound by confidentiality and data protection obligations
• AI: Your child's compositions are sent to AI-powered feedback generation only. No email address is shared.
• Payment processors (Stripe): For payment processing only. The parent's/guardian's email address and subscription information are shared with Stripe to process payments and send payment receipts. Stripe does not store credit card details (this is handled securely by Stripe's own infrastructure).
• Professional advisers (e.g. lawyers, auditors) under strict confidentiality
• Regulatory or law enforcement authorities, where required by law

Data Protection for International Transfers

Some of our service providers may process personal data outside Singapore. Where personal data is transferred outside Singapore, we ensure that the receiving party is bound by legally enforceable obligations to provide a standard of protection comparable to that under the PDPA, in accordance with Section 26 of the PDPA and the Personal Data Protection Regulations 2021.

Corporate Transactions

If Word Wizards becomes involved in a merger, acquisition, or any form of sale of some or all of its assets, we will ensure the confidentiality of any personal information involved in such transactions.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, or as required by law:

• Limited aggregate metrics: over last 1 month
• Parent email & account information: Retained while account is active
• Writing submissions: We do not retain your submissions and AI-generated feedback (we recommend copying and saving your work as needed)
• Deleted accounts: All associated personal data will be removed or anonymised, except where retention is required by applicable law

8. Data Security

We implement reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction:

• Encryption of data in transit (TLS/HTTPS)
• Encrypted storage of passwords (bcrypt/Argon2)
• Access controls and authentication
• Regular security reviews and monitoring
• Daily automated backups
• No storage of credit card information (Stripe handles this securely)

Data Breach Notification

However, no method of transmission over the internet is completely secure. In the event of a data breach that is likely to cause significant harm:

• We will notify parents/guardians
• We will notify the PDPC within 3 days of assessment

9. Cookies and Tracking

The Platform uses essential cookies to maintain your session and ensure the Platform functions correctly. These are necessary for the Platform to work.

We do not use:

• Cookies for tracking user behavior
• Analytics cookies that track users across the internet
• Cookies for advertising or marketing purposes

You can control cookie preferences through your browser settings, though disabling essential cookies may affect Platform functionality.

10. Your Rights

As a parent or guardian, you have the right to:

• Access: Request the personal data we hold about you and your child
• Correction: Request correction of inaccurate or incomplete data
• Withdraw Consent: Withdraw consent for certain uses of personal data (note: this may affect your ability to use the Platform)

To exercise any of these rights, please contact us at contact@wordwizards.sg. We will respond within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or a prominent notice on the Platform. For significant changes affecting children's data, we will obtain renewed parental consent.

Continued use of the Platform after changes means you accept the updated policy.

12. Contact Us

Last Updated: May 9, 2026