Privacy Policy

Last updated: 20 August 2026 · Applies to the ThinkerTots app

ThinkerTots is committed to protecting your privacy under Singapore's Personal Data Protection Act (PDPA). This policy explains what data we collect, how we use it, and your rights.

1. Who We Are

ThinkerTots is a Singapore-based mobile application designed to help students practise PSLE Primary Science open-ended questions. For privacy enquiries, contact us at support@tinkertots.ai.

2. Data We Collect

You must sign in with Apple or Google before using ThinkerTots. We do not offer email/password accounts. When you sign in and use the app, we collect:

Email address from your Apple or Google account (including Apple private relay addresses where applicable)
Authentication identifiers from Apple or Google (used to sign you in securely; we do not collect or store passwords)
Sign-in provider (Apple or Google), shown on your Account screen; we do not ask for or store your name or your child's name
Grading history: the text of the question and your answer as extracted by the AI, along with your score and AI feedback
Purchase records: package name, amount paid, and transaction reference from Apple or RevenueCat
Usage data: number of free and paid grading attempts used

3. Data We Do NOT Collect

We take your privacy seriously, especially for a children's education product:

We do NOT store the original photos or images you submit for grading. Images are transmitted directly to OpenAI for processing and are not retained on our servers. Before grading, uploads are automatically screened for prohibited content (e.g. sexual or violent material); this screening does not store the image either. Only the screening result (a category flag, not the image itself) is logged for policy enforcement.
We do NOT collect your child's name, your name, school, age, or any other personally identifiable information beyond your account email and sign-in provider.
We do NOT offer guest or anonymous accounts; all usage is tied to a signed-in Apple or Google identity.
We do NOT sell your data to third parties.

4. How We Use Your Data

To provide the grading service and display your results
To track your remaining free and paid tries
To process and verify your in-app purchases
To respond to support enquiries
To investigate reported grading errors and improve the AI

5. Third-Party Services

We use the following trusted third-party services to operate ThinkerTots:

Supabase (Singapore/EU region): database and user authentication
OpenAI: AI processing of answer images to produce grading results. Images are sent to OpenAI's API and are subject to OpenAI's data usage policy.
RevenueCat: in-app purchase management and subscription tracking
Apple: App Store payments and Sign in with Apple authentication
Google: Sign in with Google authentication

Each provider is subject to their own privacy policy. We encourage you to review them if you have concerns.

6. Data Retention

Your account data (email, sign-in provider, grading history, tries, and purchases) is retained for as long as your account is active.
Grading history is kept for up to 2 years to enable the history and progress tracking features.
You may request deletion of your account and all associated data at any time by emailing support@tinkertots.ai. We will action this within 30 days.

7. Children's Privacy

ThinkerTots is designed for use by school-age children (typically Primary 5–6, ages 11–12) under parental supervision. We recommend that parents or guardians create and manage the account on behalf of their child. We do not knowingly collect data from children under 13 without parental consent.

8. Your Rights (PDPA)

Under Singapore's PDPA, you have the right to:

Access the personal data we hold about you
Correct inaccurate personal data
Withdraw consent for the collection, use, or disclosure of your personal data
Request deletion of your account and associated data

To exercise any of these rights, email support@tinkertots.ai. We will respond within a reasonable timeframe, and in any case within 30 days.

9. Security

We use industry-standard measures, including encryption in transit and at rest via our infrastructure providers, to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notification and reflected here with an updated date.

11. Contact Us

For any privacy questions or requests, contact us at:

support@tinkertots.ai

We aim to respond to all enquiries within 1–3 business days (Mon–Fri, Singapore Time).