Privacy Policy
MacLife Solutions Pte Ltd operates KAHReady SG and is responsible for personal data handled through the service. This policy explains what we collect, why we use it, who may process it and how to exercise your rights.
1. Data we collect
| Category | Examples | Why it is needed |
|---|---|---|
| Account | Name, email, password hash, consent record | Create and secure learner access |
| Learning | Answers, scores, attempts, weak topics, progress | Score assessments and personalise study |
| Transactions | Order reference, product, amount, payment status | Verify payment, grant access and handle refunds |
| Support | Messages, issue details and resolution records | Respond to requests and maintain service quality |
| Usage and conversion | Short-lived anonymous session ID, pages and pricing viewed, plan selected, diagnostic start or completion, and limited campaign tags | Understand the preparation pathway and improve plan clarity without third-party advertising trackers |
| Security and technical | Session identifiers, hashed or truncated network information, device/browser data, audit events | Prevent abuse, investigate incidents and keep the service reliable |
2. Purposes and consent
We use data to deliver accounts, assessments, scoring, purchases, downloads, password recovery, support, security and legally required records. Where consent is the appropriate basis, we ask before collection and keep a consent record. Marketing consent is separate and optional. You may withdraw consent for future optional use, although essential processing may still be required to provide a purchased service or meet a legal obligation.
3. Service providers and disclosure
Authorised providers may process data only for contracted services, including Cloudflare for hosting and security, HitPay for payment processing, and the configured transactional-email provider for account messages. We may also disclose information where required by law, to protect users or investigate fraud, or as part of a business transfer subject to appropriate safeguards. We do not sell personal data.
4. Overseas transfers
Cloud services may process or store information outside Singapore. We use contractual and technical measures intended to provide protection comparable to Singapore’s Personal Data Protection Act and review provider safeguards before production use.
5. Retention
We keep data only for a documented operational, contractual or legal purpose. Current retention targets are: active account and learning records for the access period and up to 24 months afterwards; support records for up to 24 months after closure; expired sessions and reset tokens for no longer than reasonably required for security; and transaction or accounting records for the period required by applicable law. Legal holds, disputes or security investigations may require longer retention. Data is then deleted, anonymised or securely cycled out of backups.
6. Security
Controls include encrypted transport, salted password hashing, HTTP-only session cookies, CSRF protection, role separation, rate limits, restricted downloads, audit events and additional owner-access protection. No internet service is risk-free. If a breach is suspected, we contain and assess it, preserve evidence and make required notifications within applicable timelines.
7. Cookies, local storage and first-party measurement
Essential session cookies keep signed-in accounts secure. Local browser storage may remember anonymous progress, cart selection and study history. If first-party product measurement is activated after privacy review, session storage also holds a temporary random identifier used to count steps such as a page view, pricing view, plan selection and diagnostic completion. The conversion record does not store an email address, raw IP address, user agent or cross-site advertising identifier. These tools are used for service improvement rather than third-party advertising. You can clear them through browser settings, but some progress may be lost.
8. Access, correction and other requests
You may request access to or correction of personal data, withdraw optional consent, ask about retention, or request account deletion where no legal or contractual reason requires continued storage. We may verify identity and apply lawful exceptions. Contact the Data Protection contact at support@kahreadysg.com with “Privacy request” in the subject. We aim to acknowledge requests promptly and explain if more time is required.
9. Updates and contact
Material changes will be identified by a new version date and communicated where appropriate. Privacy questions or complaints can be sent to the Data Protection contact, MacLife Solutions Pte Ltd, at support@kahreadysg.com.