Privacy Policy

This Privacy Policy explains how Kelas Sekejap ("Kelas Sekejap", "we", "us", or "our") collects, uses, discloses, and protects your personal data when you use our mobile application, website, and related services (collectively, the "App" or "Services").

We are committed to protecting your privacy in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and other applicable laws of Malaysia.

By using Kelas Sekejap, you agree to the collection and use of your information in accordance with this Privacy Policy.

1. What This Policy Covers

This Privacy Policy applies to:

• Users of the Kelas Sekejap mobile app and website in Malaysia
• Any communication you have with us via email, social media, or other channels related to Kelas Sekejap

It does not apply to third-party websites, services, or apps that we do not control.

2. Information We Collect

2.1 Information you provide directly

• Account information: name or display name, email address or phone number, password or login credentials (encrypted)
• Profile details: preferred language(s), learning goals and preferences, demographic info you choose to share such as age range or occupation
• Payment information: limited payment details handled via third-party payment processors such as transaction ID, amount, status; we do not store your full card details on our servers
• Support & communication: messages you send to our support team, feedback, survey responses, bug reports

2.2 Information from your use of the App

• Usage data: features you use, session duration and timestamps, progress data such as completed lessons, streaks, and coins used/earned
• Device & technical data: device model, operating system, app version, IP address, approximate location at city/country level, crash logs, performance data

2.3 Voice & audio data

Because Kelas Sekejap focuses on speaking practice, we may process:

• Microphone audio: your spoken responses during speaking or "Learn by Talking" sessions
• Transcriptions: text generated from your spoken responses
• AI feedback data: scores, corrections, and suggestions generated from your voice or text

We use third-party speech and AI partners to process this data. Audio and transcripts may be used to provide real-time feedback, and to improve our models and features (where allowed, and typically in aggregated or anonymised form).

3. How We Use Your Information

We may use your personal data for the following purposes:

3.1 To provide and operate the App

• Create and manage your account
• Deliver lessons, speaking sessions, and exercises
• Track your progress, streaks, and coin balance

3.2 To personalise your learning experience

• Recommend lessons or topics based on your usage
• Tailor difficulty level and feedback

3.3 To communicate with you

• Send important updates about the App, terms, or policy changes
• Respond to your questions and support requests
• Send reminders, tips, and motivational messages (you can usually control notifications in settings)

3.4 To process payments

• Enable in-app purchases, subscriptions, or coin packs
• Handle billing, refunds, or payment disputes

3.5 To improve our product

• Analyse usage and performance
• Test new features and user flows
• Conduct research and analytics (often aggregated or anonymised)

3.6 To ensure safety, security, and compliance

• Detect and prevent fraud or misuse
• Comply with legal obligations under Malaysian law

4. Legal Basis for Processing (Malaysia / PDPA)

Under the PDPA, we primarily process your personal data based on:

• Your consent: for example when you sign up, grant microphone permission, or opt in to certain communications
• Contractual necessity: to provide the App and services you requested
• Legal obligations: to comply with laws and regulations
• Legitimate interests: such as improving our services, preventing abuse, and ensuring security, where such interests are not overridden by your rights

You may withdraw your consent at any time (see Section 11), but this may affect your ability to use some features.

5. Cookies and Similar Technologies

If you use our website or web-based features, we may use cookies, local storage, and similar technologies to enhance your experience and collect usage data.

6. How We Share Your Information

We do not sell your personal data.

We may share your personal data with:

6.1 Service Providers & Vendors

• Cloud hosting and infrastructure providers
• Analytics and crash reporting tools
• Payment processors
• AI, speech, and text-processing partners (to enable voice features and learning feedback)

6.2 Business partners

Only where necessary for providing specific features, collaborations, or promotions, and typically in aggregated or limited form.

6.3 Legal & regulatory authorities

When required to comply with laws, regulations, court orders, or law enforcement requests.

6.4 Business transfers

In connection with any merger, acquisition, restructuring, sale of assets, or financing, your data may be transferred as part of the transaction, subject to appropriate confidentiality and data protection safeguards.

Where possible, we share information in aggregated or anonymised form that does not directly identify you.

7. International Transfers of Data

Our servers, service providers, or partners may be located outside Malaysia. This means your personal data may be transferred to and processed in countries that may have different data protection laws.

Where we transfer personal data outside Malaysia, we will take reasonable steps to ensure that your data is protected in a manner consistent with this Privacy Policy and the PDPA, such as through contractual protections or other safeguards.

8. Data Retention

We retain your personal data only for as long as necessary to:

• Provide the Services
• Fulfil the purposes described in this Privacy Policy
• Comply with legal, accounting, or reporting requirements

When data is no longer needed, we will delete it or anonymise it so that it can no longer be linked to you.

9. How We Protect Your Data

We use reasonable technical and organisational measures to protect your personal data, including:

• Encryption in transit (e.g. HTTPS)
• Access controls and authentication
• Regular review of our security practices

However, no method of transmission or storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

10. Children's Privacy

Kelas Sekejap is not intended for children under 13 years old without parental consent.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us. We will take reasonable steps to delete such data where required by law.

11. Your Rights and Choices (Malaysia / PDPA)

Subject to certain conditions under the PDPA, you may have the right to:

• Access your personal data that we hold
• Correct inaccurate, incomplete, or outdated personal data
• Withdraw consent to our processing of your personal data
• Object to certain types of processing (where applicable)
• Restrict or limit processing (where applicable)

To exercise your rights or make a request, please contact us using the details in Section 13. We may need to verify your identity before fulfilling your request and may charge a reasonable fee for access requests as allowed under the PDPA.

You can also:

• Adjust notification settings in the App or your device
• Disable microphone permissions (which will limit speaking features)
• Delete your account by contacting us or using the in-app option (if available)

12. Third-Party Links and Services

Our App may contain links to third-party websites, content, or services that are not operated by us.

We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies separately.

13. How to Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us at:

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be posted in the App or on our website with a new "Last updated" date. For material changes, we may provide additional notice (e.g. in-app notification or email).

Your continued use of Kelas Sekejap after the updated Privacy Policy is posted means that you accept the changes.