Tupai is a maths learning app used by school students, including children under 13. This section explains what we collect from children, why, and the rights parents have. It is operated by AI Teacher Sdn. Bhd. (Company Registration No. 202301029300 (1523223-M)), A-3-3, Plaza Bukit Jalil (Aurora Place), No. 1, Persiaran Jalil 1, Bandar Bukit Jalil, 57000 Kuala Lumpur, W.P., reachable at [email protected].
Parental consent comes first
Until a parent or guardian has approved, a child under 13 cannot create a Tupai account or give us any personal information. Before we ask a child for anything about themselves, the app shows an approval code and a QR code. The parent completes the approval either on our consent page (by scanning the QR code or entering the code at tupai.ai/parent) or in the Tupai Parent app. In both cases, the parent is shown what Tupai collects from their child and must explicitly confirm that they are the child’s parent or guardian and consent to Tupai collecting and using their child’s information as described in this Privacy Policy. We record when this consent was given. Only after approval does the child’s signup continue.
Except for a child’s declared age band, the name, phone number, or contact information is not stored. If a parent does not approve, this record is deleted within 60 days through routine deletion processes.
What we collect from a child:
- Phone number — account sign-in (one-time SMS codes)
- Age (recorded as a date of birth) — to decide whether parental consent is required, and to show age-appropriate plans
- Nickname / display name — shown in the app, on leaderboards, and to the linked parent
- School name and school year — to pick the right syllabus and level of maths
- Learning activity (questions answered, scores, streaks, rewards) — to run the learning service: progress, practice, and the reports the linked parent sees
- App usage analytics (screens used, feature interactions, device type) — to understand how the app is used and improve it. Analytics are tied to an internal account identifier, not to the child’s name or phone number.
We do not collect precise location, contacts or photos. The camera is used only, with permission, to scan Tupai worksheet QR codes — images are processed on the device and never uploaded.
What we do not do
Tupai does not show ads of any kind to anyone and we do not sell personal information for marketing or as part of our business.
Parents’ rights
A linked parent can, at any time:
- Review their child’s information and learning activity in the Tupai Parent app, or by contacting us at [email protected];
- Revoke consent by unlinking from the child in the Tupai Parent app, by requesting deletion, or by contacting us at [email protected] — revoking consent ends the child’s access to Tupai.
Data retention
When an account is deleted, the child’s personal information is deleted with it, within 90 days of a confirmed request (see our Account Deletion policy). As an exception, for up to one year after deletion, we retain a limited, de-identified record derived from the account’s phone number, solely to prevent misuse of our free trial. Billing records required for tax and accounting obligations are retained under the parent’s account and not the child’s. Where a child’s access was provided through a sponsoring organisation, anonymised practice and exam records may be retained for up to 3 years to meet reporting obligations to that sponsor.
Who processes this data
We use a small number of trusted service providers to run Tupai, each only for a stated purpose: delivering SMS sign-in codes (this provider receives the phone number), hosting our servers and database, app usage analytics and subscription billing (used by the parent’s account as children cannot make purchases in Tupai). Each provider receives only the information needed for its purpose and may not use it for anything else. A current list of our service providers is available on request at [email protected].
