Privacy Policy
Last updated: for the current beta.
1. Who this applies to
Olibits is a learning platform for Singapore primary-school children (Primary 1–6), used by parents and their children together. This policy explains what we collect from a parent when they create an account, and what we collect about a child profile the parent sets up.
2. What we collect
From the parent (account holder): email address, a hashed password (we never store your actual password), and account activity (login times, settings).
About a child profile: a display name chosen by the parent (we explicitly do not ask for a child's legal first/last name), an avatar, grade level, and a hashed password or login code the child uses to access their own profile. School, date of birth, and gender are optional and only stored if a parent chooses to add them. We also store practice activity — questions answered, scores, streaks, badges earned — to power progress tracking and adaptive difficulty.
If a parent uses Training Mode, whatever goal or material they type or paste is sent to our AI provider (Anthropic) to generate practice questions, and the generated questions are stored against that child's profile.
3. What we don't collect
We don't collect a child's email address, phone number, home address, or legal full name. We don't run advertising, and we don't sell or share personal data with third parties for marketing purposes.
4. Why we collect it
To run the core product: authenticate accounts, track a child's progress and adjust difficulty, show leaderboards and badges, send account-related email (verification, password reset), and, where a parent opts in, generate tailored practice material.
5. Who can see a child's data
The parent who created the profile always can. Other children may see a child's chosen display name, avatar, and score on leaderboards and in challenges — scoped to their grade level, and further scoped to a school/class Group where the parent has joined one. No child's real name, school, date of birth, or gender is ever shown to another family.
6. Where data is stored
Data is stored in a managed PostgreSQL database hosted on Railway. Account-related emails are sent via Resend. Training Mode requests are sent to Anthropic's API to generate questions.
7. Your rights (Singapore PDPA)
You can access, correct, or delete your account and any child profile under it at any time from your dashboard settings. You can withdraw consent for optional data (school, date of birth, gender) by removing it from a child's profile. If you have questions about your data, contact us at the email listed on our contact page.
8. Data retention
We keep account and progress data for as long as the account exists. Deleting your account deletes every child profile under it and all associated activity data.