Privacy Policy
Last updated: May 2026
1. Organisation and Data Protection Contact
SurePass Education Pte Ltd is responsible for personal data collected through confirmpass.sg. For data protection matters, contact us at team@confirmpass.sg.
2. Data We Collect
Account and authentication data: your name, email address, and secure account credentials. Study and platform activity: quiz scores, mock exam answers, progress tracking, performance metrics, and study history. Subscription and billing status: trial status, account tier, and subscription validity. We do not store credit card details on our servers. Support communications: emails, feedback, and support queries. Technical usage data: IP address, browser type, device information, log data, cookies, and local tokens.
3. How We Use Your Data
To provide the service, personalise your study experience, manage subscriptions, maintain security, improve the platform, and communicate with you. We may send promotional emails where permitted by law. You may opt out of marketing communications at any time.
4. Storage, Infrastructure, and Service Providers
Our platform is hosted on Microsoft Azure. Payments are handled by Stripe. Authentication is provided by Google, Microsoft, and Facebook OAuth services. Analytics are processed by PostHog. Where service providers process personal data outside Singapore, we take reasonable steps to ensure protection comparable to the PDPA standard.
5. Data Retention
We retain account data and study history while your account is active. Accounts inactive for 24 continuous months may be deleted or anonymised. You may request deletion of your account and study progress at any time. We may retain limited data where required for legal, accounting, security, or dispute resolution purposes. In the event of a merger, acquisition, or business transfer, user data may transfer to the relevant successor entity or be securely deleted.
6. Data Security
We take reasonable steps to protect your personal data against unauthorised access, including access controls, secure hosting, authentication safeguards, and reputable infrastructure providers. No online service can be guaranteed completely secure. You are responsible for keeping your login credentials confidential.
7. Data Breaches
If we become aware of a data breach, we will assess the incident and, where required under the PDPA, notify the Personal Data Protection Commission and affected individuals.
8. Your Rights
Under the Singapore PDPA, you may request access to, correction of, or deletion of your personal data, and withdraw consent to our collection or use of your data. To exercise your rights, contact team@confirmpass.sg. We aim to respond to verified requests within 30 days.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the Last Updated date at the top of this page. For significant changes, we may notify you through the platform or by email.