Privacy Policy

Last updated: July 10, 2026

TutorDesk ("we", "our", or "us") is committed to protecting the privacy and personal data of freelance private tutors, students, and parents in Singapore. This Privacy Policy details how we collect, use, and secure your personal data in accordance with the Singapore Personal Data Protection Act (PDPA).

1. Information We Collect

To provide our scheduling, attendance, and PayNow verification services, we collect minimal and necessary information:

  • Tutor Account Info: Full name, email address, password, optional bank name, and PayNow phone number/UEN.
  • Student & Parent Information: Student names, school levels, parent contact details (phone number and email address).
  • Lesson & Attendance Data: Scheduling details, attendance logs, and worksheet share-links.
  • Payment Records: Billing summaries, payment amounts, due dates, PayNow transfer transaction screenshots, and reference IDs submitted by parents for payment confirmation.

2. How We Use Your Data

Your data is solely used to deliver the core features of TutorDesk, including:

  • Managing tutor schedules and lesson status tracking.
  • Generating parent payment portals and hosting PDF receipt/invoice downloads.
  • Verifying submitted PayNow payment proofs against pending balances.
  • Allowing parents to submit reschedule requests and letting tutors approve or decline them.

We never sell, rent, or monetize personal data or share it with third-party advertisers. All data remains confidential.

3. PDPA & Consent

Under the PDPA, freelance private tutors acting as sole proprietors are responsible for obtaining appropriate consent from parents before inputting their details (such as names, phone numbers, and school details) into TutorDesk.

TutorDesk acts as a data intermediary for the tutor. We process and store this data strictly on behalf of the tutor and in accordance with their dashboard configurations.

4. Data Retention & Security

We retain personal data only for as long as your account remains active or as required to fulfill legal obligations. You can delete students or your entire account at any time from the settings dashboard, which will permanently purge all corresponding records from our active database.

We secure data using SSL/TLS encryption for all network traffic, Supabase PostgreSQL Row Level Security (RLS) policies to prevent unauthorized data access, and secure tokenized portals for parents.

5. Your Rights & Contacts

Tutors, parents, and students have the right to request access to, correction of, or deletion of their personal data. For inquiries regarding data protection, please contact our Data Protection Officer at dpo@tutordesk.sg.