SMARTLEH PTE. LTD. (UEN 202633168M), a company incorporated in Singapore — “SmartLeh”, “we”, “us”, “our” — operates a tutor marketplace connecting students with tutors in Singapore. We are the organisation responsible for the personal data described in this policy. For privacy questions, contact: support@smartleh.com.
From all users: Name, email address, phone number (if provided), profile photo, account activity (bookings, messages, reviews), device information and app usage logs.
From tutors (additional): Educational qualifications and supporting documents (e.g. NRIC, certificates), bank/PayNow details for payouts, teaching subjects, rates, and availability.
Lesson materials: Files either party attaches to a booking (for example worksheets, pre-reading or homework). These are visible only to the tutor and student on that booking, and to us where we need to investigate a report or comply with the law. They are deleted automatically about one month after the class date — see Section 5.
Payment information: Card and PayNow details are collected and processed entirely by Stripe Inc. (our payment processor). We do not store your full card number on our servers. See Stripe's privacy policy at stripe.com/privacy.
We share your information only with: Stripe (payment processing), Resend (transactional email), Supabase (cloud database/auth), other users on the platform (your name, photo, and tutor qualifications/rates), and authorities when required by Singapore law.
We do not sell your data to third parties for marketing.
| Type | Retention |
|---|---|
| Account profile (active) | While your account is active |
| Account profile (after deletion) | Personal info retained for fraud prevention and dispute resolution; financial records kept 5 years per IRAS |
| Booking and payment records | 5 years (IRAS tax compliance) |
| Verification documents (tutor) | While your tutor account is active |
| Notification logs | 12 months |
| Lesson materials attached to a booking | Deleted automatically about one month after the class date |
Under Singapore's Personal Data Protection Act 2012, you have the right to access, correct, withdraw consent for non-essential uses, and request deletion of your account (some data retained per Section 5). To exercise these rights, email support@smartleh.com.
You can delete your account at any time via the app: Account → Delete Account. Upon deletion: you will be logged out and unable to log in again; your profile is hidden from public listings; your name remains visible to users with whom you had past bookings; financial and booking records are retained for 5 years per IRAS requirements; your email and phone are retained to prevent re-registration by banned users.
We use industry-standard measures to protect your data: TLS encryption in transit, encrypted database at rest, role-based access controls. No system is 100% secure.
SmartLeh is intended for users 13 years and older. Parents may book sessions on behalf of younger children. We do not knowingly collect data directly from children under 13.
We may update this policy from time to time. The current version is always published at smartleh.com/privacy, and the Last Updated date at the top of this page shows when it last changed. Please review it periodically.
This policy is governed by the laws of Singapore. Disputes will be resolved in the courts of Singapore.