Privacy Policy

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you use:

• vectorlearningapp.com
• app.vectorlearningapp.com
• api.vectorlearningapp.com
• the Vector mobile application
• and any related websites, products, services, features, communications, and support channels we provide (collectively, the “Services”).

By accessing or using our Services, you acknowledge that your personal data may be collected, used, disclosed, and otherwise processed as described in this Privacy Policy.

1. Who We Are

Vector is the provider of the Services.

For questions, requests, or complaints relating to this Privacy Policy or your personal data, please contact our Data Protection Officer:

Data Protection Officer
Vector
Email: privacy@vectorlearningapp.com

2. What Personal Data We Collect

Depending on how you use our Services, we may collect the following categories of personal data.

2.1 Account and profile information

We may collect:

• name
• email address
• username
• password and account credentials
• school level
• school
• subjects taken
• account preferences and settings

2.2 Payment and billing information

If you subscribe to paid features or services, payment and billing information may be collected and processed by our payment service provider, Stripe.

We may receive limited information from Stripe, such as:

• payment status
• subscription status
• billing-related identifiers
• transaction records

We do not necessarily store your full payment card details on our own systems.

2.3 Chatbot and user-submitted content

If you use our AI chatbot, we may collect:

• messages, prompts, questions, and content you submit
• chatbot responses
• related usage, diagnostic, and service data

Our chatbot uses third-party AI services, including OpenAI, to process and generate responses.

Please do not submit sensitive personal data through the chatbot. This includes identification numbers, passwords, payment card details, bank account details, medical information, or other highly confidential information. You are responsible for what you choose to send or ask through the chatbot. We do not control, pre-screen, or take responsibility for the personal data you choose to include in chatbot inputs.

2.4 Technical, device, and usage information

We may collect technical and usage information such as:

• IP address
• device identifiers
• device model
• operating system
• browser type
• app version
• log data
• crash and diagnostic data
• session data
• feature usage data
• account access history

We may use this information to:

• maintain account security
• keep users signed in
• detect unusual access
• reduce misuse
• help enforce account access controls

2.5 Push notification information

If you enable push notifications in the Vector mobile application, we may collect and use device push tokens and related notification settings.

We may use push notifications to support your use of the app, including for:

• Pomodoro timer reminders
• study-related reminders
• account or service notifications
• other app functionality and user experience improvements

You can usually manage push notification permissions through your device or app settings.

2.6 Cookies and similar technologies

We may use cookies, local storage, SDKs, and similar technologies to:

• keep you signed in
• remember your preferences
• improve performance
• understand product usage
• maintain security
• support analytics and troubleshooting

3. How We Collect Personal Data

We may collect personal data:

• directly from you when you create an account, use our Services, fill in forms, make payments, contact us, or interact with the chatbot
• automatically through your use of our website, app, API, and other Services
• from third-party service providers that support our Services, such as payment, hosting, analytics, notification, authentication, and AI providers
• from your device, browser, or operating system where permitted by law and your settings

4. Why We Collect, Use, and Disclose Personal Data

We may collect, use, and disclose your personal data for purposes such as:

• creating, managing, and securing your account
• providing access to our website, web app, API, and mobile app
• delivering notes, study tools, timers, exam tracking, analytics, and other platform features
• personalising your experience based on your school level, school, and subjects
• processing subscriptions, payments, refunds, and billing matters
• providing chatbot functionality and AI-generated responses
• sending push notifications, reminders, and service messages
• responding to enquiries, support requests, bug reports, and feedback
• improving our Services, features, design, stability, and user experience
• conducting analytics, testing, research, and troubleshooting
• detecting, preventing, and investigating fraud, misuse, unauthorised access, and security incidents
• enforcing our terms, policies, and account rules
• complying with legal and regulatory obligations
• protecting our rights, property, systems, and users

Where required by law, we will collect, use, or disclose your personal data only with valid consent or where another basis under applicable law permits us to do so.

5. Disclosure of Personal Data

We may disclose your personal data to:

• our employees, contractors, and authorised personnel who need the information to perform their work
• payment providers, including Stripe
• AI and technology providers, including OpenAI
• cloud hosting, infrastructure, storage, analytics, messaging, notification, customer support, and security providers
• professional advisers such as lawyers, auditors, consultants, and insurers
• regulators, public authorities, law enforcement agencies, or courts where required or permitted by law
• parties involved in a merger, acquisition, restructuring, financing, or sale of assets
• other persons where you have given consent or where disclosure is otherwise permitted by law

Where we engage third-party service providers to process personal data on our behalf, we take reasonable steps to require appropriate protection of that data.

6. Overseas Transfers

Some of our service providers may store or process personal data outside Singapore.

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the transferred personal data receives a standard of protection comparable to that required under the PDPA.

7. Account Security and Device Access

We may use device, session, and access-related information to protect accounts and maintain service integrity.

To support account security and reduce misuse, one account may be limited to one device at a time. Account sharing is not encouraged. We may use technical measures to detect, prevent, or restrict unauthorised or abusive account access.

8. Accuracy of Personal Data

We generally rely on the personal data you provide to us. You should ensure that the information you provide is accurate, complete, and kept up to date.

If your personal data changes, please update it through your account settings where available or contact us.

9. Protection of Personal Data

We take reasonable security measures to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks.

These measures may include:

• authentication and access controls
• encryption in transit where appropriate
• logging and monitoring
• role-based internal access restrictions
• vendor and infrastructure controls
• security testing and operational safeguards

However, no method of transmission over the internet and no method of electronic storage is completely secure. We therefore cannot guarantee absolute security.

10. Retention of Personal Data

We retain personal data only for as long as it is reasonably necessary for legal or business purposes, or as otherwise required or permitted by law.

When personal data is no longer needed, we will take reasonable steps to delete, destroy, anonymise, or securely dispose of it.

11. Your Rights

Subject to applicable law, you may request:

• access to personal data we hold about you
• correction of inaccurate or incomplete personal data
• information about how your personal data has been used or disclosed by us within the period required by law
• withdrawal of consent to our collection, use, or disclosure of your personal data, where consent is the basis relied upon

If you wish to make such a request, please contact our Data Protection Officer at privacy@vectorlearningapp.com.

We may need to verify your identity before processing a request. We may also decline or limit a request where permitted or required by applicable law.

If you withdraw consent, we may not be able to continue providing some or all parts of the Services to you.

12. Children and Students

Vector is designed for students.

If we have reason to believe that a user is a child who does not have sufficient understanding to provide valid consent, we may require consent from a parent or guardian. Where a child is below 13 years of age, consent from the child’s parent or guardian may be required.

If you are a parent or guardian and believe that a child has provided personal data to us inappropriately, please contact us at privacy@vectorlearningapp.com.

13. Data Breaches

If a data breach occurs, we will assess it and take appropriate steps to contain, investigate, and remediate the issue.

Where required by applicable law, we will notify the Personal Data Protection Commission of Singapore and affected individuals. Under PDPC guidance, a notifiable breach must be reported to the PDPC as soon as practicable and no later than 3 calendar days after the organisation determines that the breach is notifiable, and affected individuals must be notified as soon as practicable.

14. Third-Party Services and Links

Our Services may link to or integrate with third-party websites, tools, or services. Those third parties operate under their own terms and privacy policies, and we are not responsible for their privacy practices.

You should review the privacy policies of relevant third parties, including providers such as Stripe and OpenAI, before using those parts of the Services.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updated version will be posted on our website or app with a revised Last Updated date. Your continued use of the Services after an update takes effect will be subject to the revised Privacy Policy to the extent permitted by law.

16. Contact Us

If you have any questions, requests, or complaints about this Privacy Policy or our handling of personal data, please contact:

Data Protection Officer
Vector
Email: privacy@vectorlearningapp.com