This notice explains how SPM AI ("we", "us") collects, uses and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By creating an account you consent to the practices below.
1. Data we collect
- Account details: your name, email address and form (Tingkatan 4/5).
- Your WhatsApp number, used to add you to the pilot feedback group.
- Learning activity: subjects, attempts, answers, scores, time spent and progress.
- Optional learning profile: if you answer the questionnaire after signing up, we store your answers (SPM goal, months to the exam, how and when you like to study, daily minutes, biggest struggle, confidence in each subject, study support, device, how you heard about SPM AI and an optional goal in your own words). We also store the subjects and chapters you pick, your daily reminder time and days, and the length of focus sessions you complete. Every question can be skipped.
- Content you submit, including screenshots you attach in the AI chat.
- Payment receipts: the screenshot you upload, which can show your name, bank and transfer details. We delete the image once the payment is confirmed, or after 30 days if a person had to review it. We keep the transaction reference, amount and date.
- If you apply as a referral partner: your name, contact details and, if you give them, the bank details we use to pay commission. A cookie remembers a partner's referral code for 30 days when you open a share link.
2. Why we use it
- To run your account and provide AI grading, tutoring and practice.
- To personalise your revision (weak topics, spaced repetition, recommendations), including the practice and Tutor plan favouring the subjects and chapters you picked, and to send the study reminder you set.
- To use your optional learning profile answers to personalise your revision and, if you ticked the optional consent box, to improve the service. Only SPM AI uses them and we do not sell them. You can ask to see or delete them. As in section 3, we may use de-identified, aggregated insights commercially.
- To analyse your learning, behaviour and performance, including learning analytics, usage patterns, and psychometric/aptitude analysis, to understand how students learn and to improve the service and our models.
- To produce aggregated and anonymised research, insights and statistics.
- To contact you with pilot updates and gather feedback via the WhatsApp group.
3. Ownership & intellectual property
All content on the platform (questions, notes, AI outputs, design and software) and all insights, analytics, models and data derived from your use of SPM AI are owned by SPM AI. All rights reserved. We may use de-identified/aggregated data indefinitely for research, product development and commercial purposes. You retain ownership of the personal data you provide and your rights under the PDPA (section 7).
4. Processing & third parties
Your data is stored on our hosting and database providers (e.g. Vercel and Supabase). AI features send your questions, answers and any images you attach to our AI providers (ILMU as the main provider, and Anthropic as a fallback for some features) to generate responses. Payment receipts are read by an AI vision model (ILMU). These providers process data on our behalf under their own security terms. We do not sell your personal data.
5. WhatsApp feedback group
With your consent, we use your WhatsApp number to add you to a pilot feedback group. Other members may see your number and name. You can leave the group at any time and ask us to remove your number.
6. Retention
We keep your data for the duration of the pilot and a reasonable period afterwards, then delete or anonymise it. You can delete your account and its data yourself under More, Delete account, or ask us to do it.
7. Your rights (PDPA)
You may access, correct, or withdraw consent to the processing of your personal data, and request deletion, by contacting us. Withdrawing consent may mean we can no longer provide the service.
8. Security
Passwords are stored hashed (never in plain text) and sessions use secure, http-only cookies. No system is perfectly secure, but we take reasonable steps to protect your data.
9. Contact
To exercise your rights or ask questions, contact SPM AI Support, Ts. Navien, on 0177878312, or the pilot WhatsApp group.