Privacy and Policy

Privacy & Policy

Effective Date: 15 Jun 2025
Company: EdTecQ Sdn Bhd

This Privacy Policy explains how EdTecQ Sdn Bhd (“EdTecQ,” “we,” “our,” or “us”) collects, uses, stores, and protects personal data through our educational platforms, mobile apps, websites, and integrated API/SDK services (collectively, “Services”).

By using our Services, you consent to the collection and use of information as described in this policy.

1. Scope and Applicability

This policy applies to:

Individual users (educators, parents, students)
Institutional users (schools, education departments, ministries)
Platform partners using EdTecQ’s API or SDK

We provide Services primarily for educational purposes and comply with international child and data privacy laws, including:

COPPA (Children’s Online Privacy Protection Act, USA)
GDPR (General Data Protection Regulation, EU)
PDPA (Personal Data Protection Act B.E. 2562, Thailand)

2. Data We Collect

We collect personal and usage data when you interact with our Services, including:

a) Personal Information

Name, email, phone number
Role (teacher, parent, student)
School, organization, or region
Guardian/parent contact details (if applicable)

b) Learning and Usage Data

Voice, typing, drawing, quiz inputs
Student interaction data (e.g., hesitations, retries, timing)
Feedback from educators or institutions
Device and browser information (IP address, type, OS, etc.)

c) API/SDK Integration Data

For third-party platforms using EdTecQ’s API:

Authorized platform ID
Session logs and timestamps
Student interaction data transferred through integration

We do not knowingly collect sensitive personal data unless explicitly required for educational interventions, and only with consent.

3. Children’s Data and Parental Consent

We take special precautions to protect children’s data:

Under COPPA, we collect data from children under 13 only with verifiable parental or institutional consent.
Under GDPR, consent is required for children under 16 (or country-specific age of consent).
Under Thailand PDPA, parental consent is required for users under 20.

Where Services are used by schools or ministries, consent must be obtained by the institution prior to using our tools or enrolling students.

4. How We Use Your Data

We use collected data to:

Deliver personalized learning experiences
Power analytics dashboards for educators
Track learning progress and engagement
Ensure platform functionality and security
Support educational research (only in anonymized or aggregated formats)

We do not use personal data for advertising or behavioral targeting.

5. Data Sharing and Disclosure

We do not sell or trade user data. We may share data under the following conditions:

a) Authorized Schools or Institutions

Purpose: To manage student learning and engagement

Safeguards: Contractual and technical access controls

b) Research Partners (e.g. UNICEF, universities)

Purpose : For anonymized educational research

Safeguards : Data is anonymized and ethics-approved

c) Technology Vendors (e.g. cloud providers)

Purpose : To support platform infrastructure

Safeguards : Bound by strict data processing agreements

d) Legal Authorities

urpose : When required by lawD

iSafeguards : Disclosure only under valid legal requests

6. Data Storage and Security

We implement strong industry-standard measures to protect your data, including:

SSL encryption and secure data transmission
Role-based access and admin controls
Regular audits, backups, and vulnerability testing
Hosting on certified (e.g., ISO 27001, SOC 2) cloud infrastructure

We monitor and update systems proactively to prevent unauthorized access or data breaches.

7. Data Retention

We retain data only as long as:

Necessary to provide our Services
Required by institutional agreements
Required by legal, research, or compliance obligations

When no longer needed, data will be deleted or anonymized using secure procedures.

8. Cross-Border Data Transfers

Your data may be processed or stored in countries outside your jurisdiction, including:

Malaysia (HQ operations)
Thailand (government platforms)
Singapore (cloud infrastructure)

We apply standard contractual clauses and compliance measures in accordance with GDPR, PDPA, and other relevant frameworks to ensure data is safeguarded during international transfers.

9. Contact Us

For privacy-related inquiries or questions, please contact our designated data team:

Email : Nick@edtecq.com