StudentLogic Privacy Policy

This Privacy Policy explains how NextLogic Pte Ltd (“NextLogic”, “we”, “us”) handles personal data in connection with the StudentLogic platform. It applies to:

• the StudentLogic school management platform, including its web application, APIs and online registration forms (the “Platform”);
• the StudentLogic Parents App for iOS and Android (the “Parents App”);
• messaging features offered through the Platform, including WhatsApp and email notifications (the “Messaging Services”).

Together these are the “Services”. This policy does not cover the NextLogic corporate website, which has its own privacy policy at www.nextlogic.biz/page-privacy.html.

If you are a parent or student, the school you deal with decides how your personal data is used. This policy explains our role as the school’s service provider. Please contact your school for questions about its own practices.

1. Who we are and our role

NextLogic Pte Ltd is a company incorporated in Singapore.

Registered address: 50 East Coast Road #02-127, Roxy Square, Singapore 428769.

Contact: see section 13.

Our role as a technology provider

NextLogic provides the StudentLogic software platform, web applications, and related technical infrastructure (the “Platform”) as a service to schools, educational centres, and institutions (“Schools”).

• Schools control their own data: Schools independently collect, enter, manage and use all student, parent and staff data within the Platform. We do not use school data for our own purposes. The respective School is solely responsible for determining how its data is collected, used and managed.
• Our limited technical role: We operate strictly as a technology and software infrastructure provider. Our access to data is limited to maintaining system security, providing technical support at a School’s request, ensuring system reliability, and managing platform administrator accounts and billing.

We comply with the Singapore Personal Data Protection Act 2012 (PDPA) regarding any administrative data we collect in our capacity as a software provider. For all data entered into the Platform, please contact your respective School directly for enquiries regarding their privacy practices.

2. Personal data we handle

2.1 Data Schools enter into the Platform

Schools determine what information is recorded within their accounts to manage operations. Typically, this includes:

• Student and family records: Basic profile, enrolment and administrative details (such as names, contact information, attendance records and educational progress metrics) provided to facilitate school administration.
• Staff records: Administrative and professional contact details required for operational management and scheduling.
• Financial and transaction records: Transactional details necessary for invoicing, fee processing and financial reconciliation. Payment processes use secure external payment mechanisms; banking or card credentials are never collected or stored by the Platform.
• Registrations and submissions: Information submitted via school forms, including administrative agreements and consent records.
• Communications: Records of messages and notifications exchanged between schools, parents and students through the Platform, along with delivery metadata.

2.2 Data from the Parents App

When using the mobile application, we handle information necessary for account operation and app functionality, including:

• Account and authentication data: Identifiers used to verify your identity and link your account securely to your school records.
• Device preferences: Technical tokens required to deliver optional features, such as push notifications.
• User-submitted content: Information, profile images or documents you choose to upload or submit through the app interface.
• Service interactions: Requests, enquiries or forms submitted through the app and the corresponding responses from the school.

2.3 Data from the Messaging Services

When a School connects a third-party messaging service (such as the WhatsApp Business Platform) to the Platform, the Platform stores the connection credentials and configuration for that service, and the records of communication between the School and parents or students: the recipient’s phone number, message content, any attachments, and delivery, read and failure status. The School decides what is sent and who receives it.

2.4 Technical data

Server logs containing IP address, browser or device type, pages or API endpoints requested, timestamps and error information. We use this to operate, secure and troubleshoot the Services.

2.5 Children’s data

Students are often under 18 and may be very young. Their data is entered by the School or by a parent or guardian, never collected from the child directly by us. The Parents App is intended for parents and guardians, not for children.

3. How data is used

School operations:
Schools use the Platform and its messaging features to manage their own institutional operations, such as administration, scheduling, financial tracking and communicating with parents or students. Schools independently determine what messages, notifications or updates are sent through the platform tools, including any automatic notifications they choose to enable. NextLogic does not control, initiate or dictate how schools use these features.

Our operational purposes:
As a technology and infrastructure provider, we use administrative and technical data strictly to:

• Create and secure platform administrator accounts, including authentication;
• Provide technical infrastructure, ensure system stability, monitor performance and investigate security incidents;
• Respond to technical support requests from schools;
• Meet our own legal, billing and accounting obligations;
• Maintain, protect and improve the reliability of the Services using aggregated or de-identified technical data where appropriate.

We do not use school-managed data or communications content for advertising or commercial profiling, and we do not sell data.

4. Who we share personal data with

We share personal data only with the infrastructure, hosting and communication service providers needed to deliver the Services, under contractual data protection obligations. For Schools that connect WhatsApp, this includes Meta Platforms, which delivers the messages and processes phone numbers and message content under its own terms.

5. International transfers

Our servers are located in Singapore. Some of these providers process data outside Singapore. Where that happens we rely on the recipient’s contractual commitments to protect the data to a standard comparable to the PDPA, including the standard data protection terms the provider publishes.

6. How we protect personal data

We apply technical and organisational measures appropriate to the sensitivity of the data, including encryption of data in transit, access controls that limit production access to authorised staff, logical separation of each School’s data, and regular backups. We review these measures periodically.

No system is perfectly secure. In the event of a security incident affecting our technical infrastructure, we will notify affected Schools promptly and provide reasonable assistance so they can fulfil any statutory notification requirements under applicable law.

7. How long we keep personal data

We retain personal data only as long as necessary to fulfil the purposes outlined in this policy, comply with legal and accounting obligations (such as statutory financial retention periods) and resolve disputes. Once no longer required, data is securely deleted or anonymised in accordance with our data retention schedule.

8. Your rights

Under the PDPA you may ask for access to the personal data we hold about you, and for correction of inaccurate data. You may also withdraw consent to uses that rely on consent, such as marketing messages, and request deletion.

Because Schools own the student and parent data in the Platform, we will usually refer requests about that data to the relevant School and support the School in responding. Requests about data we hold in our own right, such as a Parents App account, are handled by us directly.

To exercise a right, email us at support [at] nextlogic [dot] biz or write to us at the address in section 13. We respond within 30 days. We may need to verify your identity before acting.

9. Data deletion instructions

This section also serves as the data deletion instructions for the StudentLogic app registered with Meta.

Parents and students: to have your personal data deleted, contact the School you dealt with. The School can delete your records in the Platform. If you cannot reach the School, or want your Parents App account deleted, email a deletion request to support [at] nextlogic [dot] biz, giving the phone number or email you registered with. We will confirm the deletion within 30 days. Deleting a Parents App account removes your sign-in, device tokens and uploaded images; records that the School must keep for legal or accounting reasons are retained by the School.

Schools: to delete your School’s data, including the WhatsApp Business Account connection and all stored messages, disconnect WhatsApp in the Platform settings and ask your account manager, or email us at the address in section 13, to close the account. Platform data is securely purged or anonymised following account closure, subject to statutory legal and financial retention requirements.

Data held by Meta or other providers: disconnecting WhatsApp removes our access to the School’s WhatsApp Business Account but does not delete data held by Meta. Schools can manage that data in Meta Business Manager and WhatsApp Manager.

10. Messaging consent and opt-out

Schools are responsible for obtaining any consent needed to message parents and students, and for honouring opt-out requests. The Platform lets Schools record opt-outs so that no further notifications are sent through that channel. WhatsApp messages sent outside an active conversation use templates approved by Meta.

11. Cookies and similar technologies

The Platform uses a session cookie to keep you signed in. The Parents App stores a sign-in token on your device. We do not use advertising cookies in the Services.

12. Changes to this policy

We may update this policy when the Services or the law change. The effective date at the top shows the current version. Material changes will be announced to Schools through the Platform and, for the Parents App, in the app.

13. Contact us

NextLogic Pte Ltd
50 East Coast Road #02-127, Roxy Square, Singapore 428769

Personal data requests and questions about this policy: support [at] nextlogic [dot] biz. Our Data Protection Officer handles all requests sent to this address and can also be reached by post at the address above. Requests are attended to during Singapore business hours.

If you are not satisfied with our response, you may complain to the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg.