Privacy Policy

Summary

Accounts: a parent or guardian creates the account. Children never give us an email address or password.
What we collect: only what is needed to teach and report: your account details, your child's first name and level, and their learning activity. That includes answers, and photos of written work and voice recordings when your child uses those features.
No selling, no ads: we do not sell personal data or show advertising, and we do not use your child's data to market to them.
AI providers: some work is marked by AI. Only the work being marked is sent to our AI providers, and not to train their models.
Deletion: you can delete your account at any time. Deleting it removes your child's data, including photos and recordings.

Who we are

Ottiwise ("we", "us") is an online learning service for Singapore primary school students preparing for the PSLE. It is operated from Singapore.

For any privacy question or request, including those under Singapore's Personal Data Protection Act 2012 (PDPA), contact our Data Protection Officer at support@ottiwise.com.

Who this policy covers

Parents and guardians, who create an account and manage one or more child profiles.
Children, who use Ottiwise through their parent's account.

Ottiwise is intended for children with their parent's or guardian's consent and supervision. By adding a child, you confirm you are their parent or legal guardian, or have their parent's or guardian's permission, and that you consent to us processing your child's data as described here.

What we collect

About the parent or guardian

Name, email address, and a securely hashed password, or your Google account identifier if you choose Google sign-in.
Settings you choose, such as your child's daily time.
Messages you send us through the contact form or by email.

About the child

Profile: first name (or a nickname), school level (P3–P6) and chosen story theme.
Learning activity:
- questions attempted, answers given, marks and hints used;
- time spent and the mistake notebook;
- our estimates of skill mastery and of the PSLE Achievement Level range.
Typed work: written answers, compositions, and explanations given to Pip, the teach-back character.
Photos of handwritten work: only when your child chooses to photograph their working or a composition.
Voice recordings: only during read-aloud and speaking practice, and only after your device's microphone permission is granted. We also keep the text transcripts.
Rewards: pebbles earned and items chosen for Otti.

Technical information

IP address, browser and device type, and error logs, collected by our hosting provider to run and secure the service.

We do not ask for or need your child's full name, school, NRIC, photo of their face, or contact details. Please do not include such details in answers, photos or recordings.

How we use it

To run the service:
- build each day's plan and choose questions;
- mark answers and give feedback;
- track mistakes and progress.
To show parents the weekly report and to let you review and change marks.
To send account emails, such as email verification and password resets, and service notices.
To keep the service secure, prevent abuse (for example, daily limits on AI features), and fix problems.
To improve Ottiwise's questions and marking, using de-identified or aggregated information wherever possible.

We do not use your or your child's data for advertising, and we do not make decisions with legal or similarly significant effects based solely on automated processing.

AI marking and feedback

Some activities use artificial intelligence:

marking photos of working, open-ended Science answers, compositions, comprehension answers and speaking;
hints;
the Pip teach-back conversation.

For these, the relevant work is sent to our AI providers so it can be processed:

Typed text, photos and question details go to Anthropic (Claude).
Voice recordings are transcribed by Cloudflare Workers AI.

Our providers process this data on our behalf. Under their commercial terms, it is not used to train their models.

AI marking can be wrong. Parents can see every AI mark and change it. Marks the AI is unsure of are flagged for a parent to check.

We share personal data only with service providers who help us run Ottiwise, under contracts that require them to protect it:

Provider	What they do
Cloudflare, Inc.	Hosting, database, file storage (photos and recordings), speech-to-text, security and email delivery
Anthropic, PBC	AI marking, hints and teach-back conversations
Google LLC	Only if you choose to sign in with Google

We may also disclose information where required by law, or to protect the safety of a child or others. We never sell personal data.

Where data is stored

Ottiwise runs on Cloudflare's network and processes requests in Singapore. Some data may be stored or processed outside Singapore, including in the United States, by the providers above. When we transfer personal data overseas, we take steps to ensure it receives protection comparable to the PDPA, including through our providers' contractual commitments.

How long we keep it

We keep account and learning data while your account is active, because progress, the mistake notebook and reports depend on history.

Deleting your account permanently removes your child profiles, their learning activity, typed work, and stored photos and voice recordings.
Backups: copies held by our providers expire on their normal backup cycle.
Contact messages are kept only as long as needed to respond.

You can also ask us to delete specific photos or recordings without closing the account.

Your choices and rights

You can:

access your and your child's personal data, and ask how it has been used;
correct inaccurate data;
withdraw consent to the processing of your child's data at any time, which in practice means deleting the child's profile or your account;
delete your account in Settings, or ask us to delete it;
turn off microphone or camera permission in your browser. Speaking practice and photo marking then won't be available, and everything else keeps working.

Email support@ottiwise.com to make a request. We will respond within 30 days.

Security

We use encryption in transit (HTTPS), hashed passwords, access controls that tie every child's data to the parent account, and limits on AI features. No online service can be perfectly secure. If a data breach affects you or your child, we will notify you, and the Personal Data Protection Commission where required.