1. Introduction
Teemmate ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mentoring platform, website, and services.
Special Protection for Students: As our primary users are minors, we implement enhanced privacy protections and comply with applicable children's privacy laws.
2. Information We Collect
Personal Information:
For Students:
- Name, age, school, grade level
- Email address and phone number
- Academic interests and goals
- Areas where mentoring is sought
- Parent/guardian contact information
For Mentors:
- Name, age, educational background
- Contact information
- Areas of expertise
- Professional/academic experience
- References and background check results
Automatically Collected Information:
- Device and browser information
- IP address and location data (general region only)
- Platform usage patterns and preferences
- Session attendance and duration
- Platform interaction data
Session Information:
- Session recordings (audio/video)
- Session notes and summaries
- Feedback and ratings
- Communication within the platform
3. How We Use Your Information
Primary Uses:
- Matching: Connect students with appropriate mentor
- Safety: Monitor sessions and ensure user safety
- Communication: Send platform updates and notifications
- Improvement: Enhance platform features and user experience
- Support: Provide customer service and technical support
Enhanced Student Protections:
- Student data is never used for marketing
- Parents can access and control their child's data
- Student profiles are not searchable by mentors
4. Information Sharing and Disclosure
We Never Sell Your Information
Limited Sharing Occurs Only For:
Safety and Legal Compliance:
- Law enforcement when required by law
- Child protection agencies if safety concerns arise
- Emergency services if immediate danger is suspected
Service Operations:
- Trusted service providers (with strict data protection agreements)
- Platform maintenance and security providers
- Customer support services
Parent/Guardian Access:
- Parents/guardians have access to their child's account data
- Parents can request account deletion or data modification
5. Data Security
Technical Safeguards:
- End-to-end encryption for all communications
- Secure data centers with 24/7 monitoring
- Regular security audits and penetration testing
- Automated threat detection systems
Operational Safeguards:
- Employee background checks and privacy training
- Strict data access controls (need-to-know basis)
- Regular privacy compliance audits
- Incident response procedures
6. Student Privacy Rights
Enhanced Protections:
- Limited data collection (only what's necessary for mentoring)
- Parents can request account deletion at any time
Rights Include:
- Access to all personal data
- Correction of inaccurate information
- Deletion of account and data
- Restriction of data processing
- Data portability (receive your data in a standard format)
7. International Data Transfers
If you're outside Malaysia:
- Your data may be transferred to our servers in Singapore/Malaysia
- We ensure adequate protection through approved mechanisms
- You have the same privacy rights regardless of location
8. Cookies and Tracking
Essential Cookies:
- Login and session management
- Security and fraud prevention
- Platform functionality
Optional Cookies:
- Analytics to improve user experience (anonymized)
- Preference settings and customization
You can control cookie settings through your browser.
9. Third-Party Services
We use carefully vetted third-party services:
- Supabase: Secure database hosting
- Vercel: Website hosting and performance
- Cuemeet/Vexa/Recall.ai: Video calling infrastructure
- Email Services: Platform notifications
All third-party providers sign strict data protection agreements.
10. Data Retention
Students:
- Account data: Until account deletion
- Session recordings: 1 year (or until account deletion)
- Safety reports: 3 years or as required by law
Mentors:
- Account data: Until account deletion or 2 years of inactivity
- Background checks: 7 years as required by law
- Session data: 1 year after last session
11. Your Privacy Rights
All Users Can:
- Access their personal data
- Correct inaccurate information
- Delete their account and data
- Restrict data processing
- Object to certain data uses
Students and Parents Can Also:
- Receive detailed privacy notices
- Opt out of any non-essential data processing
- Request immediate account deletion
- Access all data through parent/guardian accounts
12. Changes to Privacy Policy
We will notify you of privacy policy changes:
- 30 days advance notice via email
- Prominent platform notifications
- Special notices for material changes affecting student data
- Option to delete account if you disagree with changes
13. Regional Privacy Laws
We comply with applicable privacy laws including:
- GDPR (European Union)
- CCPA (California)
- PIPEDA (Canada)
- PDPA (Singapore/Malaysia)