Privacy Policy

1. Introduction and PDPA Compliance

Zairoo AI recognises and values the privacy of our users. This policy explains how Wild Dynasty Pte Ltd collects and processes personal information in compliance with the Personal Data Protection Act 2012 (PDPA) when users access or use our website, applications, content, learning tools, and related services (collectively, the “Services”).

If you use the Services on behalf of a school, district, employer, or other organisation, that organisation may also have policies or agreements that apply to your use of the Services.

We are a company based in Singapore, and this Privacy Policy is designed to work alongside our obligations under applicable Singapore law, including the Personal Data Protection Act 2012 of Singapore (PDPA).

Zairoo is a product brand operated by Wild Dynasty Pte Ltd, the organisation responsible for the personal data described in this policy.

Information collected through the Services

Depending on the features you use, this may include:

• Parent and child account information and the relationship between those accounts;
• Practice answers, assigned papers, learning progress and information about topics needing more practice;
• Chat messages and questions or images uploaded for step-by-step guidance;
• Subscription and transaction records relating to your plan;
• Website enquiry details: your name, email, enquiry type, optional organisation, message and the page from which you submitted it; and
• Technical and diagnostic information needed to operate and secure the Services.

Please avoid including unnecessary personal information about your child or other people in chats, question uploads or enquiry messages. Uploading completed work for marking is a planned feature and is not currently available.

This Privacy Policy applies to personal information we collect:

1. directly from users, parents, students, guardians, educators, administrators, and customers;
2. automatically through use of the Services; and
3. from schools, service providers, integrations, payment processors, identity providers, and other third parties.

2. Data Protection Officer

In accordance with the PDPA, we have appointed a DPO. For all privacy inquiries, contact:

• Email: dpo@zairoo.ai
• Address: Wild Dynasty Pte Ltd, 2 International Business Park, #05-26 The Strategy, Singapore 609930

3. Children's Personal Data

Parents or guardians must create the family account and set up access for their children. Children cannot register independently. During signup, the parent or guardian must tick the checkbox accepting our Privacy Policy before creating the account.

A parent or guardian manages their child's access and provides the information needed for the child's learning activities. Schools must obtain the necessary parental consent before providing student data to Zairoo.

4. Your Consent

When you sign up for and agree to the Services, you will be asked to provide personal information related to the Services. You may also be able to update certain profile information, manage notifications, or adjust certain preferences through your account settings.

If there is a need to process and use your personal information for any purposes other than those mentioned in this Privacy Policy, we will request for and obtain your consent prior or propose to you an option to not disclose or allow use of your personal information for those other purposes. We will not use your personal information for those other purposes before we have requested and obtained your consent prior.

To make a privacy request, contact us at dpo@zairoo.ai . We may need to verify your identity before fulfilling your request.

You can decline to provide any personal information to the Services, in which case Zairoo AI may not be able to provide these services to you.

Where an account is managed for a student by a parent, guardian, school, or other organisation, we may direct certain requests to that parent, guardian, school, or organisation where appropriate and permitted by law.

5. How We Use Information

We may process information solely for the purposes mentioned in the Privacy Policy to:

• provide, operate, maintain, and improve the Services;
• create, authenticate, manage, and secure accounts;
• deliver educational content, assignments, assessments, progress tracking, and related features;
• personalise user experience and learning workflows;
• communicate about product updates, support, administrative notices, and account activity;
• process purchases, subscriptions, invoices, and related transactions;
• monitor performance, debug issues, and security;
• comply with legal obligations and enforce our agreements; and
• create aggregated or de-identified insights where permitted by law.

We do not use student data for targeted advertising unless expressly disclosed and legally permitted.

Our AI features process chat messages and uploaded questions to provide step-by-step learning guidance. Zairoo does not currently use user data to train its own AI models. Our external AI providers do not use the data we send them for model training and do not retain it.

If we introduce model training using user data in the future, we will explain the proposed use and obtain any necessary consent before it begins.

6. Consent and Other Permitted Grounds

We collect, use and disclose personal data with consent where required under the PDPA, or where an applicable exception or other permitted ground allows us to do so. We do not treat every service purpose as an automatic exemption from the consent and notification obligations.

Where consent is required for a new purpose, we will explain that purpose and seek the necessary consent before using the data for it.

7. Sharing Information

We share data with:

• service providers that help us operate the Services, such as cloud hosting, AI guidance, support, communication, authentication, payment, and security vendors;
• schools, tutors, teachers, parents, or administrators, depending on account structure and user permissions;
• integration partners when you choose to connect third-party tools;
• legal, financial, and professional advisors;
• law enforcement, regulators, courts, or other parties where required by law or necessary to protect rights, safety, or the Services; and
• a buyer, investor, successor, or affiliate as part of a merger, financing, acquisition, reorganisation, or sale of assets.

All third parties must comply with PDPA-equivalent standards.

8. Cookies and Similar Technologies

The Services may use essential cookies or similar technologies to keep users signed in, remember settings and support account security and core functionality. We also use campaign links and first-party attribution storage to understand which pages and channels lead to completed parent registrations. Campaign touches are kept in browser storage for up to 30 days. Short-lived signup measurement markers expire after 15 minutes.

9. Product Analytics and Session Replay

We record the landing-page label, campaign tags and advertising click references against a new parent account when registration completes. This helps us measure signups by channel without counting button clicks, returning-user logins or repeat visits as new accounts. This record is deleted when the account is closed. We may also process technical and diagnostic information to operate, troubleshoot and secure the Services.

Where enabled, advertising measurement uses OpenAI, TikTok, Meta (Facebook and Instagram) and LinkedIn tags. These providers may receive browser, page and event information under their own privacy policies. Our signup measurement events do not include children's questions, answers or uploads, passwords, names or email addresses. Browser or privacy settings may limit measurement. We do not use session replay as part of this signup measurement.

10. International Data Transfer

External advertising measurement providers may process browser and event information outside Singapore. Before enabling a provider, we review its processing arrangements and the safeguards required under the PDPA. This advertising measurement is separate from children's learning content sent for AI guidance.

11. Data Retention

The following periods apply to data stored by Zairoo:

• Questions and uploaded files are retained for one year.
• Chat messages are retained for 30 days.
• When an account is closed, its account and learning data, including questions, uploaded files and chats, are deleted immediately from our storage and backups.

Our external AI providers do not retain the data sent to them for guidance. Records that must be kept to meet applicable legal obligations, such as required transaction records, are retained only for those obligations. School-managed data is also subject to the applicable school agreement.

12. Information Security

We use reasonable administrative, technical, and organisational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

No security measure is perfect, and we cannot guarantee absolute security.

13. Your Rights and Privacy Requests

Subject to applicable PDPA requirements and exceptions, you may request access to your personal data and information about its use or disclosure, request corrections, or withdraw consent for particular uses. A parent or guardian may make an appropriate request concerning their child's data.

Contact dpo@zairoo.ai to make a privacy request. We may verify your identity and authority before providing data or acting on a request. We will respond to access and correction requests as soon as reasonably possible. If we cannot complete the response within 30 days, we will inform you in writing within that period when we expect to respond.

We will explain the likely consequences of withdrawing consent, including any services we can no longer provide, before processing the withdrawal. Account deletion requests may also be sent to our DPO. Account closure and any legally required record retention are described in Section 11.

Any statutory data-portability obligation applies only when it is in force and applicable. This policy does not promise an unconditional machine-readable export of all account data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will display any updated changes on this page. Your continued use of the Services after the effective date of the updated Privacy Policy means the updated version will apply, to the extent permitted by law.

If you have any enquiries regarding this Privacy Policy, please do contact us at the following address or via email.