Privacy Policy

1. Who We Are

DuckMath is an online mathematics practice platform operated by TinkTech Sdn Bhd, a company registered in Malaysia. Our registered contact email is support@tinktech.com.my.

This Privacy Policy explains how we collect, use, store, and protect personal information when you use DuckMath — including the web application at our Streamlit URL and this landing website.

2. Information We Collect

2.1 Information you provide directly

• Email address (used for account creation and login)
• Display name or nickname
• Role type (student or teacher)
• Subject preferences (e.g. SPM Mathematics, UEC Mathematics)
• Answers and working submitted during practice sessions

2.2 Information collected automatically

• Log data (timestamps of logins and answer submissions)
• Practice statistics (correct/incorrect answers, tokens earned, level)
• Browser type and device type (via standard web server logs)
• Cookies used to maintain your login session (see Section 6)

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your DuckMath account
• Provide AI-powered grading and feedback on your answers
• Calculate and display your score, level, and leaderboard ranking
• Send you transactional emails (e.g. password reset) — we do not send marketing emails without your consent
• Detect and prevent abuse or anomalous activity
• Improve the platform through aggregated, anonymised analytics
• Display contextual advertising via Google AdSense (see Section 5)

4. How We Share Your Information

We do not sell your personal data. We share data only in the following limited circumstances:

• Supabase — our database and authentication provider. Data is stored on Supabase servers under their data processing agreement.
• Google Gemini API — your submitted answers are sent to Google's Gemini AI model for grading. Answers are processed but not stored by Google for training purposes under our API agreement.
• Google AdSense — if you visit pages that display advertisements, Google AdSense may set cookies and collect data as described in Section 5.
• Legal requirements — we may disclose information if required to do so by law or valid legal process.

5. Advertising (Google AdSense)

We use Google AdSense to display advertisements on this website. Google AdSense uses cookies to serve ads based on your prior visits to this or other websites. You can opt out of personalised advertising by visiting Google Ads Settings.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our website or other websites on the internet. The use of advertising cookies enables Google and its partners to serve ads based on your visit to our site and/or other sites on the internet.

For more information about how Google uses data, please visit: How Google uses data when you use our partners' sites or apps.

6. Cookies

We use the following types of cookies:

• Session cookies — to keep you logged in during your visit. These expire when you close your browser.
• Persistent authentication cookies — if you choose "remember me", a cookie is stored for up to 30 days to keep you logged in.
• Third-party advertising cookies — set by Google AdSense to deliver relevant advertisements (see Section 5).

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the login system.

7. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal information within 30 days, except where retention is required by law.

Aggregated, anonymised practice statistics (e.g. question difficulty metrics) may be retained indefinitely as they cannot be linked back to individual users.

8. Children's Privacy

DuckMath is intended for use by secondary school students (typically aged 13 and above). We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child under 13 has provided us with personal information, please contact us at account@tinktech.com.my and we will delete the information promptly.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Opt out of personalised advertising (see Section 5)

To exercise any of these rights, contact us at account@tinktech.com.my.

10. Security

We take reasonable technical and organisational measures to protect your data, including encrypted database storage via Supabase, HTTPS-only access, and hashed password storage. No system is completely secure; if you have concerns about a potential breach, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of DuckMath after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact: