Acadence privacy policy

Version 2026-10-27. This policy is from BOOK IN CHAT PTE. LTD. (UEN 202646792Z), 60 Paya Lebar Road, #6-28, Paya Lebar Square, Singapore 409051 ("Book In Chat", "we", "us"), which provides the Acadence service. It explains how we handle personal data under Singapore's Personal Data Protection Act 2012 (PDPA).

1. Two different roles

• For tuition centres' students, parents and staff: each centre is responsible for its people's data under the PDPA. We run the software for the centre and use that data only on the centre's instructions, under a written Data Processing Agreement. The centre's own Privacy notice, shown when you sign in (a template is at Privacy notice for students and parents), explains what the centre does. Questions about it go to your centre. If you write to us, we pass your request to the centre.
• For everything else in this policy: we are responsible ourselves.

2. What we collect ourselves, and why

• This website. It sets no cookies and runs no analytics, tracking or advertising, and it has no forms. Our hosting and security provider, Cloudflare, records technical data (such as IP address, browser and the page asked for) to deliver the site and protect it from attacks. The site loads fonts from Google Fonts, which receives your IP address. Enquiry forms on a centre's own Acadence site belong to that centre; see that centre's Privacy notice.
• When you contact us by WhatsApp, email or phone: your name, number or address and your message, to reply to you and keep a record of what was agreed. WhatsApp is run by Meta under its own terms.
• Tuition centres we may work with. Business contact details (centre name, business phone, WhatsApp, email, website, outlet addresses and the name and role of a founder or manager where the centre publishes them) that centres make public on their own websites or business listings, to offer them our service. We contact a centre at most a few times; tell us to stop and we will. We do not send marketing messages to a Singapore telephone number listed on the Do Not Call Registry unless the law allows it. Every marketing message we send says who we are and how to stop further messages.
• Centres we work with, and their managers and staff. Names, roles, business emails and phone numbers, sign-in records and support history, to provide, support, secure and bill the service.
• Records of each centre's acceptance of our Centre Terms: the centre's registered name and UEN, the name and role of the person who accepted, their drawn signature, when, from which IP address, and the version accepted.
• Statistics that cannot identify anyone, made from the service (for example how often tutors accept AI suggestions, or how long marking takes), to run, secure, measure and improve it. Small groups are left out where they could make someone identifiable.
• Only with a separate, optional consent: copies of a student's work, with names removed, to test and improve our AI marking and learning materials (Help improve Acadence), and a student's work in our promotion (never with their name or face). For a student under 18, a parent or guardian gives this consent. Without it, students' work is never used for these.

3. Cookies

The acadence.net website uses no cookies. Each centre's Acadence site uses only cookies it needs to work: a session cookie that keeps you signed in, and a security cookie that protects forms. They are not used for advertising or tracking and end when you sign out or close the browser. Cloudflare may set a short-lived security cookie to filter attacks. See Cookies.

4. Who we share it with

The providers in our Provider list, only to run the service; our professional advisers (such as lawyers and accountants) under a duty of confidence; and anyone the law requires us to tell. We do not sell personal data. If the Acadence business moves to a new company, the data above moves with it, under this policy, and we will tell centres first.

5. Transfers outside Singapore

Some providers process data outside Singapore, as the Provider list says. Where we transfer personal data out of Singapore, we take steps so that the recipient protects it to a standard comparable to the PDPA, using the recipient's data-protection terms or other legally binding terms.

6. How we protect it

Each centre has its own site, database and storage on servers in Singapore; traffic is encrypted; servers can reach only the outside services they need; managers use two-step sign-in; changes to marks, settings and accounts are logged; backups are made daily. No system is perfectly secure: if a breach affects data we hold for ourselves and is likely to cause significant harm, we will tell you and the Personal Data Protection Commission as the PDPA requires. To report a security problem, see Security.

7. How long we keep it

Messages from people who contact us: 2 years after the last contact, unless they become a customer. Public contact details of centres we may work with: until the centre asks us to stop, or 2 years without a reply. Customer contact and relationship records: while we work with the centre and 6 years after. Acceptance records: 6 years after the agreement ends. Website records at Cloudflare: as Cloudflare's terms say. Copies kept under "Help improve Acadence": at most 3 years.

8. Your choices and rights

You may ask us for access to, or correction of, personal data we hold for ourselves, ask how it has been used or disclosed in the past year, or withdraw a consent you gave us. Write to our data protection officer (below). We reply within 30 days, or tell you when we can. We may charge a reasonable fee for an access request, and will tell you the amount first. If you withdraw a consent, we stop that use and tell you what that means. See Your data and how to ask about it.

9. Children

Acadence is used by students of all ages through their tuition centre. We do not knowingly collect personal data from children for ourselves, except under the optional consents above, which a parent or guardian gives for a student under 18. Students under 13 cannot give the optional consents themselves; a parent or guardian does, in the parent app or through the centre. Their own click on a centre's notice records that they were shown it; the centre must hold a parent's consent for their use of the site.

10. Copyright complaints

If you believe material on a centre's site infringes your copyright, send a take-down notice to our designated representative: Lee Cheng Han, Data Protection Officer, BOOK IN CHAT PTE. LTD., 60 Paya Lebar Road, #6-28, Paya Lebar Square, Singapore 409051, [email protected].

11. Changes to this policy

We may update this policy. The version date at the top changes, and we keep earlier versions on request. Where a change affects how we use data we already hold, we tell the people affected first.

12. Contact

Data Protection Officer: Lee Cheng Han, [email protected], BOOK IN CHAT PTE. LTD., 60 Paya Lebar Road, #6-28, Paya Lebar Square, Singapore 409051. If you are not satisfied with our answer, you can contact the Personal Data Protection Commission at www.pdpc.gov.sg.