Privacy policy

Aptly is a tutor-matching marketplace for Singapore, operated by NexGen Concepts Pte Ltd, with its registered address at 11 Keng Cheow Street, Riverside Piazza, Singapore(“we”, “us”, “our”). We are the organisation responsible for the personal data described in this policy. This policy explains how we collect, use, disclose and protect personal data in accordance with Singapore's Personal Data Protection Act 2012 (“PDPA”).

This policy applies to personal data we handle through the Aptly website, applications and services. It does not apply to third-party websites or services that we do not control, even if linked from the Service.

• Account details: name, email address, mobile number, and password (stored hashed).
• Profile information you provide: for tutors — bio, qualifications, certificates, subjects, levels, rates and availability; for parents — student learning profiles and preferences.
• Messages you send to other users through the platform.
• Reviews and reputation data connected to tutoring relationships.
• Usage and device data: searches, profile views, pages visited, IP address, browser and device information, and cookies or similar technologies.
• Payment metadata for tutor subscriptions, processed by Stripe. We do not collect or store full card numbers.

We collect personal data directly from you when you register, build a profile, message, leave a review, or contact support; automatically as you use the Service (cookies and usage data); and from service providers such as our payment processor (transaction status, not card details).

We collect, use and disclose personal data for the following purposes:

• to create and manage your account and verify your identity, email and mobile number;
• to match parents and students with suitable tutors and operate messaging, reviews and the Aptly Score;
• to process tutor subscriptions and related billing;
• to maintain security, prevent fraud and abuse, and enforce our Terms;
• to provide customer support and send service-related communications;
• to analyse and improve the Service;
• to comply with legal and regulatory obligations.

We do not sell your personal data. We do not use your data for third-party advertising.

We rely on your consent (including deemed consent under the PDPA where you voluntarily provide data for an obvious purpose) and, where applicable, the PDPA's legitimate interests and other exceptions, to handle your data for the purposes above. You may withdraw consent for non-essential processing at any time by contacting us — note that withdrawing certain consents may mean we can no longer provide parts of the Service.

We share personal data only as needed to operate the Service: with service providers acting on our behalf (for example cloud hosting, email and SMS delivery, and Stripe for payments), and where required or permitted by law or to protect rights and safety. Tutor profiles you publish are visible to other users by design. We require our service providers to protect personal data and to use it only for the services they provide to us.

Some of our service providers may process data outside Singapore. Where personal data is transferred overseas, we take steps required under the PDPA to ensure it receives a standard of protection comparable to that under the PDPA.

Sensitive fields such as your full name and phone number are encrypted at rest. Access is restricted on a need-to-know basis, administrator actions are logged, and administrator accounts require two-factor authentication. Contact details are withheld in messaging until a booking is confirmed. While we take reasonable security measures, no method of transmission or storage is completely secure.

We retain personal data only as long as needed to fulfil the purposes above or to meet legal, accounting or reporting obligations, after which it is deleted or anonymised. Accounts that never complete verification are removed after 30 days.

Under the PDPA you may request access to, and correction of, the personal data we hold about you. From your account settings you can view and export your data, correct your profile, or delete your account at any time. Deleting your account anonymises associated reviews and removes your profile from search. To exercise your rights, contact us at [email protected]. We may need to verify your identity before acting on a request.

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand how it is used. You can control cookies through your browser settings; disabling some cookies may affect functionality.

The Service is intended for use by adults. Where a student under 18 uses the Service, it must be through a parent or legal guardian who provides any required consent. We do not knowingly collect personal data directly from children without such consent.

You can reach our Data Protection Officer at [email protected] or by post at 11 Keng Cheow Street, Riverside Piazza, Singapore. If you have a concern about how we handle your personal data, please contact us first so we can address it. You also have the right to lodge a complaint with Singapore's Personal Data Protection Commission (PDPC).

We may update this policy from time to time. We will update the “Last updated” date above and, for material changes, provide reasonable notice through the Service.

For privacy questions or to exercise your rights, email [email protected] or write to NexGen Concepts Pte Ltd, 11 Keng Cheow Street, Riverside Piazza, Singapore.