← SmartLeh

Privacy Policy

Effective Date: 1 May 2026
Last Updated: 1 May 2026

1. Who we are

SmartLeh ("we", "us", "our") is a tutor marketplace connecting students with tutors in Singapore. For privacy questions, contact: support@smartleh.com.

2. What information we collect

From all users: Name, email address, phone number (if provided), profile photo, account activity (bookings, messages, reviews), device information and app usage logs.

From tutors (additional): Educational qualifications and supporting documents (e.g. NRIC, certificates), bank/PayNow details for payouts, teaching subjects, rates, and availability.

Payment information: Card and PayNow details are collected and processed entirely by Stripe Inc. (our payment processor). We do not store your full card number on our servers. See Stripe's privacy policy at stripe.com/privacy.

3. Why we collect it

4. How we share your information

We share your information only with: Stripe (payment processing), Resend (transactional email), Supabase (cloud database/auth), other users on the platform (your name, photo, and tutor qualifications/rates), and authorities when required by Singapore law.

We do not sell your data to third parties for marketing.

5. How long we keep your information

TypeRetention
Account profile (active)While your account is active
Account profile (after deletion)Personal info retained for fraud prevention and dispute resolution; financial records kept 5 years per IRAS
Booking and payment records5 years (IRAS tax compliance)
Verification documents (tutor)While your tutor account is active
Notification logs12 months

6. Your rights under PDPA

Under Singapore's Personal Data Protection Act 2012, you have the right to access, correct, withdraw consent for non-essential uses, and request deletion of your account (some data retained per Section 5). To exercise these rights, email support@smartleh.com.

7. Account deletion

You can delete your account at any time via the app: Account → Delete Account. Upon deletion: you will be logged out and unable to log in again; your profile is hidden from public listings; your name remains visible to users with whom you had past bookings; financial and booking records are retained for 5 years per IRAS requirements; your email and phone are retained to prevent re-registration by banned users.

8. Security

We use industry-standard measures to protect your data: TLS encryption in transit, encrypted database at rest, role-based access controls. No system is 100% secure.

9. Children's data

SmartLeh is intended for users 13 years and older. Parents may book sessions on behalf of younger children. We do not knowingly collect data directly from children under 13.

10. Changes to this policy

We may update this policy. Material changes will be notified via email.

11. Governing law

This policy is governed by the laws of Singapore. Disputes will be resolved in the courts of Singapore.