Privacy Policy

Dreamscape One is operated by Guru Kids Pro, UEN 53232375X, of Blk 4 Queen's Road, #02-127, Singapore (“Guru Kids Pro”, “Dreamscape”, “we”, “us” or “our”).

This Policy covers personal data relating to:

• public Dreamscape students and account holders;
• Guru Kids Pro students, parents and guardians;
• teachers, curriculum personnel and organisation administrators;
• Affiliate applicants and approved Affiliate partners;
• Education Licence applicants, customers and linked students;
• website visitors, support contacts and business enquiries; and
• other persons who interact with Dreamscape or Guru Kids Pro.

This Policy should be read with any applicable programme terms, order form, consent notice and Acceptable Use Policy.

Account and profile information

• student or user name;
• email address and authentication identifiers;
• age group or year of birth;
• primary school level or learning level;
• country;
• parent or guardian name and email for younger users;
• account role, organisation link and access permissions; and
• profile preferences or avatar choices where provided.

Learning, progress and platform activity

• missions, subjects, topics and quizzes selected or completed;
• questions attempted, submitted answers and answer history;
• correct and incorrect answers, scores, accuracy and completion time;
• progress by subject, topic, mission, level and activity;
• teacher assignments, recorded attempts and dashboard information;
• Dream Tokens, Dream Gems, achievements and platform rewards;
• rover, equipment or feature upgrades;
• Business Builder, Milo Exchange and simulation activity;
• login, session, security and general usage records; and
• support requests, bug reports and communications.

Parent, teacher and organisation information

• name, email, mobile number and organisation details;
• student-account relationships and assignment records;
• teacher or administrator permissions;
• licence package, invoice, renewal and onboarding records; and
• consent, terms acceptance and support history.

Affiliate and business-partner information

• legal and display name, email, mobile number and country;
• business name, UEN or registration number and website;
• social-media profiles, audience size, audience description and locations;
• promotion channels, proposed activities and expected referrals;
• application, approval, review and internal administration records;
• referral code, referral attribution, commission and payout records;
• PayNow mobile number or UEN, payee name and payout verification records; and
• programme and policy acceptance records.

Technical and device data

• IP address, device and browser information;
• login timestamps, request logs and security events;
• cookie, session and authentication information;
• referral source and affiliate attribution data; and
• diagnostic information required to protect and operate the platform.

We may collect personal data:

• directly from a user, parent, guardian, teacher, Affiliate or business contact;
• when an account, application, checkout, order or support request is submitted;
• automatically when Dreamscape is accessed or used;
• from a linked organisation, teacher or parent authorised to provide it;
• through Google sign-in or another selected authentication provider;
• through Shopify and its payment providers for purchase and order status; and
• from referral links, codes and approved marketing channels.

Where another person provides personal data to us, that person must have authority to do so and must provide any legally required notice or consent.

1. Users below 13 must have a parent or guardian create, approve or supervise their Dreamscape account. Either the child or parent may complete the account-creation steps, but the parent or guardian must remain responsible for approval and supervision.
2. A paid subscription, purchase or payment for any user below 18 must be made or authorised by a parent or guardian.
3. We aim to use age-appropriate notices, minimise unnecessary collection and give parents or guardians suitable ways to review or manage data.
4. Parents and guardians should ensure account information is accurate and contact us if an account was created without appropriate authority.
5. Teachers and Education Licence Organisations must obtain required parent or guardian consent before directing a child to create an account or sending us information for student assignment.

We may use personal data to:

• create, authenticate, secure and administer accounts;
• provide Learning Missions, quizzes, simulations and other features;
• save progress, answers, rewards, achievements and profile assets;
• show relevant parent, teacher and organisation dashboards;
• assign students, roles, permissions and Education Licence access;
• process orders, subscriptions, renewals, invoices and payment status;
• review Affiliate and licence applications;
• attribute referrals, calculate commission and administer payouts;
• provide technical, account, onboarding and customer support;
• send essential account, payment, security and programme messages;
• send promotional email where consent or another permitted basis applies;
• improve content, usability, reliability, safety and performance;
• detect fraud, abuse, account sharing, security threats and policy violations;
• keep records, resolve disputes and enforce agreements; and
• comply with legal, tax, accounting and regulatory obligations.

We do not send promotional SMS or WhatsApp messages. Essential service or support communications may be sent through a channel the user or business has chosen, including WhatsApp where relevant to a support relationship.

1. Dreamscape purchases and Student Access payments are handled through Shopify and its payment providers.
2. We may receive order details, payment status, subscription status, billing contact information, transaction references and refund records.
3. We do not normally receive or store complete payment-card details, which are handled by the relevant payment provider.
4. Affiliate PayNow details are restricted to an approved mobile number or UEN and are stored in encrypted form with access limited to authorised personnel.

We may disclose personal data to:

• Supabase for authentication, database, storage and backend services;
• Vercel for website hosting and server processing;
• Resend for transactional and approved marketing email;
• Google where Google sign-in is selected;
• Shopify and its payment providers for checkout, orders, subscriptions and payment processing;
• professional advisers, auditors, insurers and service contractors;
• teachers, parents, guardians or organisations with appropriate authority;
• regulators, courts, law-enforcement bodies or other persons where required or permitted by law; and
• a purchaser, successor or adviser in connection with a genuine business reorganisation, financing, transfer or sale.

Service providers receive only the data reasonably needed for their role and are expected to handle it under appropriate contractual, security and privacy safeguards.

Some providers may store or process information outside Singapore. Where personal data is transferred outside Singapore, we take reasonable steps to ensure it receives protection comparable to that required under Singapore's Personal Data Protection Act 2012, including through appropriate provider terms and safeguards.

• Essential cookies support login, authentication, security and sessions.
• Preference cookies may remember user choices and settings.
• If non-essential analytics or advertising technologies are enabled, we will provide suitable notice and obtain consent where required.
• Blocking essential cookies may prevent parts of Dreamscape from working correctly.

We use reasonable administrative, technical and organisational measures to protect personal data, including access controls, role restrictions, authentication, encrypted transmission, encryption for Affiliate payout details, logging, backups and vendor safeguards where appropriate.

No online service can guarantee absolute security. Users must protect their login credentials, avoid sharing accounts and notify us promptly of suspected unauthorised access.

We retain personal data only for as long as reasonably needed for the purposes described, to protect users and the platform, to resolve disputes, and to meet legal, tax, accounting and contractual obligations. Our general schedule is:

A record may be kept longer where required by law, necessary for an active dispute or investigation, or reasonably needed to protect users, rights or platform security.

A person may contact us to request:

• access to personal data we hold about them, subject to applicable exceptions;
• correction of inaccurate or incomplete data;
• withdrawal of consent for future collection, use or disclosure;
• account closure or deletion where appropriate;
• information about how personal data has been used or disclosed; or
• review of a privacy concern or complaint.

We may need to verify identity and authority before acting. Withdrawing consent may prevent us from continuing some services, processing payouts, maintaining an account or meeting contractual obligations. We may retain information where required or permitted by law.

1. Promotional communications are currently sent by email only, where consent or another permitted basis applies.
2. A recipient may unsubscribe using the link in a marketing email or by contacting us.
3. Unsubscribing from marketing does not stop essential account, payment, security, application, support or programme messages.

We may update this Policy to reflect legal, technical, programme or operational changes. The current version and effective date will be published on this page. Where a change is material, we may also notify affected users through email, the platform or another reasonable channel.