Privacy Policy
Effective 29 August 2026 · Last updated 10 September 2026
DC Math Tutor uses the information needed to provide mathematics tutoring, assignments, marking, teacher collaboration and account credits. New document uploads are designed to stay in the connected user's Google Drive wherever the feature supports Drive storage.
1. Who this policy covers
This policy applies to DC Math Tutor's websites, installed web app and related student, teacher and administrator features. “DC Math Tutor”, “we”, “us” and “our” refer to the operator of dcmath.sg and app.dcmath.sg.
Questions or requests can be sent to dcmathtutor.sg@gmail.com.
2. Information we handle
| Information | Examples and purpose |
|---|---|
| Account information | Name, email address, profile image and Google, Apple or e-mail sign-in identifiers used to create and secure an account. E-mail sign-in uses short-lived, single-use codes; the app stores keyed code hashes and request/attempt counters to verify codes and limit abuse. Where password sign-in is enabled, users verify their e-mail before creating or resetting an app-specific password. We store a salted password verifier, not a readable password. Password processing takes place on our server, separately from Google or Apple passwords. Password resets revoke older app sessions, and account deletion removes the password verifier. Apple authorisation tokens are held securely by the service to support account deletion and revocation; they are not included in the app bundle. |
| Learning content | Questions, conversations, canvas work, assignment attempts, marks, feedback and teacher revisions used to provide tutoring and assessment features. |
| Documents and attachments | Images and PDFs submitted for tutoring, Question Bank, assignments or marking. New uploads are generally stored in the connected student's or teacher's Google Drive when that workflow supports Drive storage. |
| Teacher collaboration | Teacher access status, teacher-student pairings, invitations, approvals, shared conversation history and assigned work. |
| Credits and transactions | Credit balance, feature-specific usage, referral activity, grants and purchase records. Payment providers or app stores process payment credentials; DC Math Tutor does not need to store full card details. |
| Technical and support data | Browser/device information, error and performance records, support IDs and correspondence used to operate, secure and improve the service. |
School-email sign-in and email delivery
When you request a sign-in code for your students.edu.sg address, we send your email address and the message containing the code to Resend for delivery from login@dcmath.sg. Resend and your email provider process the message and delivery metadata, potentially outside Singapore. These messages are for authentication, not marketing. Codes expire after ten minutes; never share them. Resend does not receive your tutoring conversations or uploaded work through this email flow.
This option does not authorise Google Drive or Classroom access. Those integrations require separate Google permission and may be unavailable to school accounts or new email-only accounts. Use the same school-email sign-in method to return to an email-only account.
3. How information is used
- Provide AI tutoring, mathematics explanations, tests, marking and revision insights.
- Save and reopen conversations, assignments and marked reviews.
- Enable approved teachers to teach, annotate, revise marks and view authorised student work.
- Maintain credits, purchases, referral rewards and fraud-prevention records.
- Diagnose reliability, security and performance problems.
- Respond to support requests and comply with legal obligations.
4. Google services and Drive storage
Google sign-in supplies the basic profile information required for authentication. Drive access is requested separately for features that save documents to the user's Drive. DC Math Tutor is designed to request only the permissions needed for those functions.
Deleting or moving a Drive file may make the corresponding app record, marked review or attachment unavailable. Some conversations, scores, credit records, file identifiers and operational metadata remain in DC Math Tutor's private service records so the relevant feature can work. Legacy files created before user-owned Drive storage was enabled may follow an older storage arrangement until removed or migrated.
5. AI processing and service providers
With your permission, DC Math Tutor sends submitted questions, recent conversation context, images, PDFs and handwritten work to Google Gemini for tutoring, test generation, marking and explanations. This can include personal information contained in the content you submit. When you choose answer verification, question text may also be sent to Wolfram Alpha. Avoid including student names or other identifying information where it is not needed.
The app asks for explicit permission before the first AI request. You can decline or withdraw permission in Privacy & account and continue using features that do not require AI. Withdrawal blocks new requests; it does not recall data already processed. Teachers must be authorised to submit student work.
Google supplies authentication, Drive and Apps Script storage services; Vercel hosts the website and API routes; Stripe handles web payments; Apple and RevenueCat support iOS purchases. These providers may process relevant information outside Singapore under their applicable safeguards and terms. We retain payment and transaction records where needed for accounting, fraud prevention or legal obligations.
6. Teacher access and student consent
A teacher may access an individual student's shared tutoring history only after the relevant access request is approved. Administrators may review and revoke teacher-student pairings. Teachers must use student information only for legitimate teaching purposes and must comply with their school policies and applicable law.
Students who are not legally able to consent on their own should use the service with the permission of a parent, guardian or school where required.
7. Retention and deletion
Use Privacy & account → Delete my account to request account deletion without emailing support. After you confirm, access is blocked and background cleanup removes your profile, conversations, app-held learning records and access permissions. Remaining credits are lost. Cleanup starts after a short delay to allow existing requests to finish; larger accounts and provider outages may take longer. The app provides a deletion receipt and progress status.
Apple-linked accounts may require a fresh Sign in with Apple in the updated iOS app so we can revoke Apple's tokens. Google Drive and Classroom connections stored by DC Math Tutor are removed. Documents you own in Google Drive remain under your control; you may delete them there. Independent school records and copies held by other users remain with their owners. App-owned documents removed during cleanup are held in restricted Google Drive Trash for up to 30 days before final removal.
Some transaction, security and legal records may be retained for accounting, fraud prevention and legal obligations. A protected identifier and session-revocation timestamp prevent deleted sessions from regaining access. Deletion status receipts expire after 30 days. For access, correction or questions about retained records, contact us below.
8. Security
We use access controls, account authentication and restricted service records intended to protect personal information. No internet service can guarantee absolute security. Users should protect their Google account, avoid sharing access links publicly and report suspected unauthorised access promptly.
9. Changes to this policy
We may update this policy as the product, providers or legal requirements change. The effective date at the top identifies the current version. Material changes will be communicated in the app or on the website where appropriate.
Contact
For privacy questions or data requests, email dcmathtutor.sg@gmail.com. Include the Google account email concerned and do not send passwords or payment-card details.