TutoPals.com ("TutoPals", "we", "us") operates an online tutoring platform for children in Malaysia. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using TutoPals, you agree to this policy.
1. Who we are
TutoPals.com
No. 18, Jalan Anggerik Mokara 31/46, Kota Kemuning, Seksyen 31, 40460 Shah Alam, Selangor, Malaysia
Contact: info@tutopals.com · +60 16-828 6328
2. Information we collect
Information you provide
Account details such as name, email address, role (student, parent, tutor, centre or admin), profile information, and — for children's accounts — information provided by a parent or guardian. Tutors may provide teaching qualifications and payout details. Students and parents may provide class bookings, homework submissions and messages.
Information from Google Sign-In
When you sign in with Google, we receive your basic Google profile: your name, email address and profile picture. We use this to create and secure your account.
Information created on the platform
Class attendance, reward points, homework and quiz activity, wallet and top-up records, chat messages, and general usage and device information used to keep the service secure and working.
3. Google user data & Google Calendar
TutoPals offers an optional integration with Google Calendar so that class schedules can be added to your own calendar. When you connect Google Calendar, you are asked to grant permission, and you can decline or disconnect at any time.
What we access
With your permission, we access your Google Calendar to create, view and update events that relate to your TutoPals classes. We access your Google profile (name, email, picture) for sign-in.
How we use it
Google Calendar data is used only to show your class schedule and to add or update TutoPals class events on your calendar at your request. Google profile data is used only to identify your account.
Limited Use commitment
TutoPals' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell it, we do not transfer it to others except as needed to provide or improve this feature, to comply with law, or as part of a merger with your notice, and we do not allow humans to read your Google data unless we have your consent, it is needed for security or to comply with law, or the data is aggregated and anonymised.
4. How we use your information
We use information to: create and secure accounts; deliver live classes, quests, homework and rewards; sync class schedules with your calendar; process wallet top-ups and tutor payouts; communicate with you about your classes and account; and keep the platform safe and improve it.
5. Children's privacy
TutoPals is designed for children, and children use it under the supervision of a parent, guardian or participating tuition centre. We rely on parents, guardians and centres to consent to and manage a child's account. We collect only the information needed to provide tutoring services, and we do not use children's data for advertising. Parents may review or request deletion of their child's information by contacting us.
6. How we share information
We share information only as needed to run the service: with tutors and centres involved in a student's classes; with service providers that host and power the platform (for example our application platform Base44, and payment and communication providers) under confidentiality obligations; and where required by law. We do not sell your personal information.
7. Data retention
We keep information for as long as your account is active or as needed to provide the service and meet legal, accounting or reporting requirements. You can ask us to delete your account and associated data, subject to records we must keep by law.
8. Security
We use reasonable technical and organisational measures to protect your information, including access controls and encryption in transit. No system is perfectly secure, but we work to protect your data and respond promptly to any issues.
9. Your rights and choices
You may access, correct or delete your information, disconnect Google Calendar at any time from your account settings or via your Google Account permissions, and contact us with any privacy request. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version here with a revised "Last updated" date, and significant changes will be communicated where appropriate.