Privacy Policy

1. Information we collect

We receive parent or guardian names and email addresses, and child profile information you provide, such as name, birth year, school year, target intake and school preferences. We also store child usernames, simulation answers, results, attempt history, family account relationships, and pass and transaction records. Our authentication system manages login credentials.

Information comes from you, your child’s activity in the application and confirmations from payment providers. Infrastructure providers may process technical information such as IP addresses, device types and security logs.

2. How we use information

Information is used to verify email addresses, create child accounts, activate passes after payment, run and score simulations, display learning progress, send account or result messages, resolve problems and prevent abuse.

A name and email address are required for parent registration. Required child fields are needed to provide child access. Without required information, the related functions cannot be provided. School preferences may be completed later.

3. Children’s data and guardian responsibility

Child accounts are created by a parent or guardian authorised to provide the child’s information. Children do not need their own email address. Parents or guardians linked to a child can access that child’s profile and results. Avoid entering sensitive information that is not requested.

4. Service providers and sharing

SkorPKSK uses Supabase for its database and authentication, Vercel for hosting, Resend for email delivery, and Stripe and your selected payment method for payments. These providers process information needed for their respective functions. Full payment details are handled through payment providers, rather than SkorPKSK application forms.

Information may also be disclosed where required by law or necessary to address fraud and protect users’ rights. Provider infrastructure may be located outside Malaysia; cross-border processing is subject to applicable safeguards and legal requirements.

5. Cookies and login sessions

We use cookies or session storage needed to keep you signed in and protect account access. Blocking or deleting them may require you to sign in again.

6. Security and retention

Data access is restricted by roles and family account relationships. Do not share verification codes or passwords, and sign out on shared devices. No online system is entirely free of risk.

Data is retained as needed to provide the service, maintain transaction records, resolve disputes and meet legal obligations. Pass expiry or archiving a profile does not automatically delete all data. Deletion requests will be assessed, including records that must lawfully be retained.

7. Your choices and requests

You may request access to or correction of your data, account deletion, or withdrawal of consent for processing based on consent, subject to applicable law. We may need to verify your identity and authority as a guardian before acting. Withdrawing consent for essential data may affect account or service availability. Use the contact channel below.

8. Deletion through account settings

Parents can request deletion through Account settings using a fresh email verification code. Access is blocked when the request is accepted, then accounts and learning data for children without another guardian are deleted. Child profiles still linked to another guardian are retained and your link is removed. Transaction and audit records remain with account identifiers and a replacement profile name. In-app deletion does not immediately erase payment provider records or backups.

9. Policy changes

We will update the date and version when this policy changes. Material changes will be communicated through the application or email, and fresh consent will be requested where necessary.

10. Contact us

For privacy questions, data access or correction, account deletion, consent withdrawal, or payment and service issues, contact Origin Fusion Sdn Bhd at:

help@skorpksk.originfusion.com.my

Include your account email and a brief description of your request. For payment issues, include the transaction reference. Do not send passwords, verification codes or full card details.