Privacy Policy
Last updated: March 2026
1. Introduction
Classhub.my (“we”, “our”, “us”) is committed to protecting the privacy of our users, especially children and their families. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our platform.
This policy is intended to support good privacy practices and, where applicable, Malaysia's Personal Data Protection Act 2010 (PDPA). It does not replace your rights under applicable law.
2. Information We Collect
We may collect the following categories of information:
- Account and profile information: name, email address, and other profile fields you provide. Within each class, users hold a class-level role (teacher, parent, or student) that governs what they can see and do.
- Third-party sign-in information: if you choose to sign in with a third-party provider (such as Google), we may receive basic account information from that provider (for example, your name, email address, and profile image), as permitted by your settings and the provider's policies.
- Class and education-related information: class names, timetables, homework, announcements, attendance records, quizzes, quiz questions, quiz answers, quiz scores, and other information created or uploaded by class administrators (typically teachers) and members.
- Messages and content: chat messages and other content you submit within the Service.
- Payment and transaction information: information associated with payments (such as amount, plan, payment status, and transaction references). Payments are processed by Stripe (including methods such as cards, FPX, and selected local e-wallets where available). We do not store your banking credentials.
- Usage, device, and log information: basic technical information such as IP address, device/browser information, and log/activity data generated when you use the Service (for example, for security, debugging, and abuse prevention).
- Cookie and similar technologies: we use cookies to keep you signed in (e.g., authentication cookies set by our auth provider, including cookies that may start with
sb-) and to remember certain preferences (such as language, via a cookie likeclasshub_lang). - School enquiry information: if you submit a School Pro enquiry, we collect the school name, contact name, email, phone number, estimated teacher count, and any message you include. This information is used solely to respond to your enquiry.
- Anti-abuse verification: when enabled, we use Cloudflare Turnstile to help prevent automated abuse. Turnstile may process technical signals (such as IP address and browser/device characteristics) to determine whether a request is legitimate.
3. How We Use Your Information
We use personal information to:
- Provide and maintain the Classhub.my platform
- Enable class communication between teachers, parents, and students
- Process subscription payments (Parent Pro, Class Pro) and school enquiries
- Respond to School Pro enquiries submitted through our enquiry form
- Secure the Service, prevent fraud/abuse, and troubleshoot issues
- Improve and develop our services and user experience
4. Sharing and Disclosure
We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We may share data with:
- Service providers / processors: such as Supabase (authentication and database hosting), Stripe (payment processing), and Cloudflare (Turnstile anti-abuse), to help us operate the Service.
- Within your classes: content you post (e.g., homework, announcements, chat messages) is visible to others in the relevant class, subject to role and access controls.
- Legal and safety reasons: where we believe disclosure is necessary to comply with law, enforce our terms, protect rights and safety, or respond to lawful requests.
5. International Transfers
Our service providers may store or process data in multiple countries. This means your personal data may be transferred outside Malaysia. Where required, we take reasonable steps to ensure appropriate safeguards for such transfers.
6. Data Security
We take reasonable administrative, technical, and organizational measures designed to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Children's Privacy
We take children's privacy seriously. Students participate in classes through class memberships managed by teachers and parents/guardians. We aim to minimize the collection of children's personal data and restrict access based on class roles and membership. Parents/guardians and class administrators play an important role in supervising student use of the Service. Where a child's account is operated by or registered on behalf of a parent/guardian, that adult bears responsibility for appropriate use.
8. Your Rights and Choices
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data
- Withdraw consent where we rely on consent (subject to legal and operational limits)
To exercise these rights, please contact us at hello@classhub.my.
9. Data Retention
We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data and the context in which it was collected. Where you request deletion, we will take reasonable steps to delete or de-identify personal data, subject to legal and operational limitations.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes via email or in-app notification.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at hello@classhub.my.