Privacy Policy
Last updated: 26 March 2026
1. Introduction
Okcan Software Pte Ltd ("we", "us", "our") operates MCQ.SG. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our platform.
This policy should be read together with our Terms of Service.
We comply with the Personal Data Protection Act 2012 (PDPA) of Singapore.
2. Data We Collect
Account Data
- Parent or guardian email address
- Child's display name
- Selected school level (P3–P6)
Practice Data
- Question responses and scores
- Topic performance metrics
- Practice session history
AI Interaction Data
- Conversations with the AI tutor
- Explanation requests
- Coaching interactions
Technical Data
- Device type and browser type
- IP address
- Pages visited (standard web server logs)
Payment Data
Payment processing is managed by Stripe. We do not store credit card numbers on our servers. We receive billing status and subscription details from Stripe.
3. How We Use Your Data
We use the data we collect for the following purposes:
- To provide and operate the learning platform
- To generate personalised practice recommendations
- To produce progress reports
- To send transactional emails (login codes, important account notifications)
- To improve and develop our services
- To respond to your enquiries and support requests
4. AI Data Handling
We do not use your child's data to train AI models.
AI queries — including tutor chats and explanation requests — are processed through Anthropic (Claude), Google (Gemini), and OpenAI (GPT) via Cloudflare AI Gateway.
These providers process data to generate responses but do not retain student data for their own model training.
AI interaction logs are stored on our platform to provide conversation history and improve service quality.
For full details on how these providers handle data, please refer to Anthropic's Usage Policy , Google's Privacy Policy, and OpenAI's Privacy Policy.
5. Third-Party Service Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| Anthropic | AI processing (Claude) | Practice questions, tutor conversations |
| AI processing (Gemini) | Practice questions, tutor conversations | |
| OpenAI | AI processing (GPT) | Practice questions, tutor conversations |
| Cloudflare | Infrastructure, AI Gateway, database hosting | All platform data (as infrastructure provider) |
| Stripe | Payment processing | Email, subscription details |
| Postmark | Transactional email | Email address, email content |
All third-party providers are bound by their respective data processing agreements and privacy policies.
6. Advertising and Tracking
We do not display advertising within the student learning experience.
A Meta (Facebook) tracking pixel is present on our public marketing pages only (landing page, blog, topic resource pages). This pixel is not active within the authenticated student experience.
No student practice data, AI interactions, or personal information is shared with Meta.
7. Children's Data and PDPA Compliance
Our users include children aged 9–12 (Primary 3 to Primary 6). Under Singapore's PDPA, parental consent is required for the collection, use, and disclosure of a child's personal data.
Account creation is performed by a parent or guardian, who provides consent by agreeing to these terms.
- We collect only the minimum data necessary to provide the service.
- We do not display advertising to students.
- We do not sell personal data.
- We do not use children's data for profiling or automated decision-making beyond personalising their learning experience.
8. Data Storage and Security
Data is stored on Cloudflare's infrastructure (D1 databases, R2 storage) with data centres globally. All data is encrypted in transit via HTTPS.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.
9. Data Retention
Practice data and AI interaction logs are retained while your account is active.
If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law.
Anonymised, aggregated data may be retained for analytics and service improvement.
10. Your Rights Under the PDPA
You have the right to:
- Access your personal data
- Correct inaccurate data
- Withdraw consent for data collection (which may affect your ability to use the service)
- Request deletion of your account and associated data
To exercise these rights, contact us at hello@mcq.sg. We will respond within 30 days.
11. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will notify you by email. The "Last updated" date at the top of this page indicates when this policy was last revised.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: hello@mcq.sg
See also our Terms of Service.