This notice explains how SPM AI ("we", "us") collects, uses and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By creating an account you consent to the practices below.
1. Data we collect
- Account details: your name, email address and form (Tingkatan 4/5).
- Your WhatsApp number, used to add you to the pilot feedback group.
- Learning activity: subjects, attempts, answers, scores, time spent and progress.
- Content you submit, including screenshots you attach in the AI chat.
2. Why we use it
- To run your account and provide AI grading, tutoring and practice.
- To personalise your revision (weak topics, spaced repetition, recommendations).
- To analyse your learning, behaviour and performance, including learning analytics, usage patterns, and psychometric/aptitude analysis, to understand how students learn and to improve the service and our models.
- To produce aggregated and anonymised research, insights and statistics.
- To contact you with pilot updates and gather feedback via the WhatsApp group.
3. Ownership & intellectual property
All content on the platform (questions, notes, AI outputs, design and software) and all insights, analytics, models and data derived from your use of SPM AI are owned by SPM AI. All rights reserved. We may use de-identified/aggregated data indefinitely for research, product development and commercial purposes. You retain ownership of the personal data you provide and your rights under the PDPA (section 7).
4. Processing & third parties
Your data is stored on our hosting and database providers (e.g. Vercel and Supabase). AI features send your questions/answers/images to our AI provider (Anthropic) to generate responses. These providers process data on our behalf under their own security terms. We do not sell your personal data.
5. WhatsApp feedback group
With your consent, we use your WhatsApp number to add you to a pilot feedback group. Other members may see your number and name. You can leave the group at any time and ask us to remove your number.
6. Retention
We keep your data for the duration of the pilot and a reasonable period afterwards, then delete or anonymise it. You may request deletion of your account and data at any time.
7. Your rights (PDPA)
You may access, correct, or withdraw consent to the processing of your personal data, and request deletion, by contacting us. Withdrawing consent may mean we can no longer provide the service.
8. Security
Passwords are stored hashed (never in plain text) and sessions use secure, http-only cookies. No system is perfectly secure, but we take reasonable steps to protect your data.
9. Contact
To exercise your rights or ask questions, contact the SPM AI team via the pilot WhatsApp group or your administrator.