Privacy Policy

Information we collect

• Account information: name, email address, and phone number, provided when you sign up (directly or via Google Sign-In).
• Student information: a student's name, grade, and, optionally, a photo, provided by a parent/guardian when enrolling a child.
• Class and attendance records: which classes a student is enrolled in, and attendance logs recorded by mentors.
• Payment records: monthly fee amounts, due dates, and payment status. Actual card/bank details are handled directly by our payment processor, Billplz — we do not receive or store your card or bank account numbers.

How we use this information

We use this information solely to operate the academy's day-to-day administration: managing enrollments, generating monthly invoices, processing payments, recording attendance, and sending in-app notifications (e.g. overdue payment reminders). We do not sell your information to third parties or use it for advertising.

Third-party services

This site relies on a small number of third-party services to operate:

• Supabase — hosts our database, authentication, and file storage.
• Billplz — processes FPX/online payments; handles your payment details directly.
• Google Sign-In — an optional way to log in, if you choose to use it.
• Vercel — hosts this website.

Each of these providers has its own privacy policy governing how they handle data on our behalf.

Children's information

Student profiles are created and managed by a parent or guardian, not by the student directly. By enrolling a child, a parent/guardian consents to us processing that child's name, grade, attendance, and (if provided) photo, solely for academy administration purposes described above.

Data retention

We retain account and student records for as long as the account is active. If you'd like your account or your child's records deleted, contact us using the details below and we'll act on that request, subject to any records we're required to keep for legal/accounting purposes.

Your rights

You may request access to, correction of, or deletion of your personal data, or your child's, at any time by contacting us. Malaysian residents have rights under the Personal Data Protection Act 2010 (PDPA).

Contact us

Questions about this policy or your data? Contact Inovatek Academy through the phone number or email provided to you at enrollment, or speak to an administrator directly.