Classhub.my

Privacy Policy

Last updated: February 2026

1. Introduction

Classhub.my (“we”, “our”, “us”) is committed to protecting the privacy of our users, especially children and their families. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our platform.

This policy is intended to support good privacy practices and, where applicable, Malaysia's Personal Data Protection Act 2010 (PDPA). It does not replace your rights under applicable law.

2. Information We Collect

We may collect the following categories of information:

  • Account and profile information: name, email address, role (e.g., teacher/parent/student), and other profile fields you provide.
  • Third-party sign-in information: if you choose to sign in with a third-party provider (such as Google), we may receive basic account information from that provider (for example, your name, email address, and profile image), as permitted by your settings and the provider's policies.
  • Class and education-related information: class names, timetables, homework, announcements, attendance records, and other information created or uploaded by class administrators (typically teachers) and members.
  • Messages and content: chat messages and other content you submit within the Service.
  • Payment and transaction information: information associated with payments (such as amount, plan, payment status, and transaction references). Payments are processed by Billplz (FPX). We do not store your online banking credentials.
  • Usage, device, and log information: basic technical information such as IP address, device/browser information, and log/activity data generated when you use the Service (for example, for security, debugging, and abuse prevention).
  • Cookie and similar technologies: we use cookies to keep you signed in (e.g., authentication cookies set by our auth provider, including cookies that may start with sb-) and to remember certain preferences (such as language, via a cookie like busut_lang).
  • Anti-abuse verification: when enabled, we use Cloudflare Turnstile to help prevent automated abuse. Turnstile may process technical signals (such as IP address and browser/device characteristics) to determine whether a request is legitimate.

3. How We Use Your Information

We use personal information to:

  • Provide and maintain the Classhub.my platform
  • Enable class communication between teachers, parents, and students
  • Send homework reminders and attendance alerts (Pro subscribers)
  • Process subscription payments
  • Secure the Service, prevent fraud/abuse, and troubleshoot issues
  • Improve and develop our services and user experience

4. Sharing and Disclosure

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We may share data with:

  • Service providers / processors: such as Supabase (authentication and database hosting), Billplz (payment processing), and Cloudflare (Turnstile anti-abuse), to help us operate the Service.
  • Within your classes: content you post (e.g., homework, announcements, chat messages) is visible to others in the relevant class, subject to role and access controls.
  • Legal and safety reasons: where we believe disclosure is necessary to comply with law, enforce our terms, protect rights and safety, or respond to lawful requests.

5. International Transfers

Our service providers may store or process data in multiple countries. This means your personal data may be transferred outside Malaysia. Where required, we take reasonable steps to ensure appropriate safeguards for such transfers.

6. Data Security

We take reasonable administrative, technical, and organizational measures designed to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children's Privacy

We take children's privacy seriously. Student accounts are created through their school classes and have limited functionality. We aim to minimize the collection of children's personal data and restrict access based on roles and class membership. Parents/guardians and teachers/class administrators play an important role in supervising student use of the Service.

8. Your Rights and Choices

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data
  • Withdraw consent where we rely on consent (subject to legal and operational limits)

To exercise these rights, please contact us at hello@classhub.my.

9. Data Retention

We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data and the context in which it was collected. Where you request deletion, we will take reasonable steps to delete or de-identify personal data, subject to legal and operational limitations.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes via email or in-app notification.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at hello@classhub.my.