Privacy Policy
Last updated: 2026-04-28
KiaSchool.sg ("we", "us") helps Singapore parents research primary schools and Phase 2B/2C registration probability. This policy explains what data we collect, how we use it, and your rights under Singapore's Personal Data Protection Act (PDPA).
What we collect
- Account info. If you sign in with Google, we receive your email address and basic profile (name, avatar). If you sign up with email + password, we store the email address only — passwords are hashed by Supabase Auth and never visible to us.
- Profile preferences. Citizenship (Singapore Citizen / Permanent Resident / non-resident), home postal code or coordinates (used to compute distance from school perimeters), affiliations (alumni, clan, religious — used to determine your registration phase), budget. All optional. You can edit or delete these at any time from your profile.
- Starred schools. The schools you've marked as favourites.
- Usage analytics. Page views, feature interactions (e.g., toggling Homes Nearby), and basic device info — collected via Vercel Web Analytics. No cross-site tracking; no third-party advertising cookies.
How we use it
- To provide the core service (school search, P1 distance calculations, personalised summaries).
- To generate AI-personalised summaries of your registration odds. Your profile fields (citizenship, home distance, affiliations) are sent to Anthropic's API to generate the summary text. We do not store the data with Anthropic; it is sent per-request.
- To improve the product (which features are used, where users get stuck).
- We do not sell your data, share it with advertisers, or use it for any purpose outside the operation of KiaSchool.sg.
Where it's stored
All personal data is stored in our Supabase database hosted in the Singapore (ap-southeast-1) region. The website itself is served by Vercel; Vercel may temporarily process your IP address and request metadata in the course of delivering the site (standard CDN behaviour).
Third-party services we rely on
- Supabase — database and authentication (Singapore region).
- Google OAuth — if you sign in with Google.
- Anthropic — AI generation of personalised summaries (per-request, no retention agreement).
- Vercel — hosting and analytics.
- Google Maps — map tiles. Google may collect usage data per their own policy.
- OneMap (Singapore Land Authority) — geocoding and school land boundary data. Public API, no personal data shared.
Cookies
We use only essential cookies — for authentication sessions (so you stay signed in) and CSRF protection. We do not use advertising cookies. Vercel Analytics uses a first-party identifier to distinguish unique visitors but does not track you across other sites.
Your rights under PDPA
You can, at any time:
- Request a copy of the personal data we hold about you.
- Correct any inaccurate data.
- Request deletion of your account and all associated data.
- Withdraw consent for any optional processing (e.g., AI summaries).
To exercise any of these rights, email hello@triplerev.com. We'll respond within 30 days as required by PDPA.
Data retention
Account and profile data are retained for as long as your account is active. If you delete your account, we permanently remove your record from our database within 7 days. Anonymous usage analytics may be retained longer for trend analysis but cannot be tied back to you.
Children's data
KiaSchool.sg is intended for adult parents researching primary school enrolment. We do not knowingly collect personal data from anyone under 18. If you believe we have, contact us and we'll delete it.
Changes to this policy
We may update this policy occasionally (e.g., when adding a new third-party service). The "Last updated" date at the top will reflect the most recent revision. Material changes will be highlighted on the home page for at least 14 days.
Contact
Questions, concerns, or PDPA requests: hello@triplerev.com.