Security

Version 2026-10-27. How BOOK IN CHAT PTE. LTD. protects Acadence, and how to report a problem.

How Acadence is protected

• Each tuition centre has its own site, database, file storage and internal network. One centre cannot reach another's data, and this is covered by automated tests.
• Servers are in Singapore. All traffic is encrypted (HTTPS) and passes through Cloudflare's protection. The servers accept web traffic only from Cloudflare.
• The centre sites cannot reach the internet except a short list of services they need (for example the email service and phone-notification services).
• Centre managers must use two-step sign-in. Accounts lock after repeated wrong passwords. First passwords must be changed at first sign-in, and each person resets their own password by email.
• Changes to marks, settings, accounts and policy acceptances are logged. Error logs never contain students' work.
• Names and account details are never sent to AI services.
• Daily backups, kept for 7 days. Only Book In Chat's administrators can reach the servers.

Reporting a security problem

If you think you have found a security weakness in Acadence, email [email protected] with the subject "Security", what you found, and how to reproduce it. We will reply within 5 business days.

Please:

• do not look at, change, keep or share anyone else's data, and stop as soon as you see any;
• do not disrupt the service (no denial-of-service, spam or automated scanning that loads the servers);
• use only your own account, or a test account we give you;
• give us reasonable time to fix the problem before telling anyone else.

We will not take legal action against anyone who reports a problem to us in good faith and follows these rules. This does not permit anything the law forbids, and it does not cover anyone who accesses data they were not entitled to. We do not offer paid rewards. Reports about a centre's data are passed to that centre, as the PDPA requires.