Privacy Policy

Zairoo AI recognises and values the privacy of our users. This policy explains how Wild Dynasty Pte Ltd collects and processes personal information in compliance with the Personal Data Protection Act 2012 (PDPA) when users access or use our website, applications, content, learning tools, and related services (collectively, the “Services”).

If you use the Services on behalf of a school, district, employer, or other organisation, that organisation may also have policies or agreements that apply to your use of the Services.

We are a company based in Singapore, and this Privacy Policy is designed to work alongside our obligations under applicable Singapore law, including the Personal Data Protection Act 2012 of Singapore (PDPA).

This Privacy Policy applies to personal information we collect:

1. directly from users, parents, students, guardians, educators, administrators, and customers;
2. automatically through use of the Services; and
3. from schools, service providers, integrations, payment processors, identity providers, and other third parties.

In accordance with the PDPA, we have appointed a DPO. For all privacy inquiries, contact:

• Email: dpo@zairoo.ai
• Address: Wild Dynasty Pte Ltd, 2 International Business Park, #05-26 The Strategy, Singapore 609930

In accordance to Personal Data Protection Commission (PDPC) Guidelines:

• We do not knowingly collect data from children under 13 without Verifiable Parental Consent (VPC).
• Schools must certify they have obtained necessary parental consents before providing student data to Zairoo AI.

When you sign up for and agree to the Services, you will be asked to provide personal information related to the Services. You may also be able to update certain profile information, manage notifications, or adjust certain preferences through your account settings.

If there is a need to process and use your personal information for any purposes other than those mentioned in this Privacy Policy, we will request for and obtain your consent prior or propose to you an option to not disclose or allow use of your personal information for those other purposes. We will not use your personal information for those other purposes before we have requested and obtained your consent prior.

To make a privacy request, contact us at dpo@zairoo.ai. We may need to verify your identity before fulfilling your request.

You can decline to provide any personal information to the Services, in which case Zairoo AI may not be able to provide these services to you.

Where an account is managed for a student by a parent, guardian, school, or other organisation, we may direct certain requests to that parent, guardian, school, or organisation where appropriate and permitted by law.

We may process information solely for the purposes mentioned in the Privacy Policy to:

• provide, operate, maintain, and improve the Services;
• create, authenticate, manage, and secure accounts;
• deliver educational content, assignments, assessments, progress tracking, and related features;
• personalise user experience and learning workflows;
• communicate about product updates, support, administrative notices, and account activity;
• process purchases, subscriptions, invoices, and related transactions;
• monitor performance, debug issues, and security;
• comply with legal obligations and enforce our agreements; and
• create aggregated or de-identified insights where permitted by law.

We do not use student data for targeted advertising unless expressly disclosed and legally permitted.

If the Services include AI or automated features, we may also use information to generate tutoring, feedback, summaries, recommendations, or similar outputs, subject to applicable law and contractual restrictions.

If required under applicable law, we rely only on:

• performance of contract;
• legitimate interests;
• consent;
• compliance with legal obligations; and
• protection of vital interests.

We share data with:

• service providers that help us operate the Services, such as cloud hosting, analytics, support, communication, authentication, payment, and security vendors;
• schools, tutors, teachers, parents, or administrators, depending on account structure and user permissions;
• integration partners when you choose to connect third-party tools;
• legal, financial, and professional advisors;
• law enforcement, regulators, courts, or other parties where required by law or necessary to protect rights, safety, or the Services; and
• a buyer, investor, successor, or affiliate as part of a merger, financing, acquisition, reorganisation, or sale of assets.

All third parties must comply with PDPA-equivalent standards.

We use cookies and similar technologies to:

• keep users signed in;
• remember preferences and settings;
• understand product performance and usage;
• maintain security and detect misuse; and
• support core product functionality.

We may use product analytics and similar technologies to understand how users interact with the Services, improve product flows, troubleshoot bugs, monitor performance, maintain security, and improve educational features. This may include pages viewed, clicks, scrolls, navigation paths, feature interactions, timestamps, browser and device information, referral information, and similar usage or diagnostic data.

Where we use session replay or similar recording tools, we may collect masked session replay recordings showing user interactions with the Services. We use technical controls such as input masking, text masking, blocking selectors, and restricted access to limit capture or exposure of sensitive content. We do not use student data for targeted advertising unless expressly disclosed and legally permitted.

Session replay is disabled by default for student or child accounts. If session replay is enabled for support, debugging, product safety, or quality assurance, we use additional controls such as limited access, masking, sampling, retention limits, and consent or authorisation where required by law or customer agreement.

Analytics and session replay service providers may process this data on our behalf as service providers under Section 7 and may involve international transfer under Section 10.

If we transfer data outside Singapore, we ensure the recipient provides a standard of protection comparable to the PDPA through Standard Contractual Clauses or equivalent legal safeguards.

We use technical and organisational measures to protect data. Data is retained only as long as necessary to:

• provide the Services;
• maintain business and educational records;
• educational or legal obligations;
• investigate incidents and resolve disputes; and
• enforce our agreements.

Retention periods vary depending on the type of information, account settings, customer instructions, and whether data is governed by a separate agreement with a school or organisation.

We use reasonable administrative, technical, and organisational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

No security measure is perfect, and we cannot guarantee absolute security.

In accordance with the PDPA, users (or parents) have the right to:

• Access and Correct their personal data;
• Withdraw Consent for specific data uses; and
• Request a copy of their data in a structured, machine-readable format. Requests will be processed by our DPO within 30 days.

We may update this Privacy Policy from time to time. We will display any updated changes on this page. Your continued use of the Services after the effective date of the updated Privacy Policy means the updated version will apply, to the extent permitted by law.

If you have any enquiries regarding this Privacy Policy, please do contact us at the following address or via email.