FayParentConnect 家长守护门户 — 隐私政策
生效日期：2026 年 9 月 11 日 | 最后更新：2026 年 9 月 11 日
「FayParentConnect 家长守护门户」（下称「本应用」）是提供给家长查看子女在教育中心学习情况的资讯查阅工具，由子女就读的教育中心统一安排使用。本政策说明我们如何处理个人资料。
核心承诺：本应用不含任何第三方广告 SDK、不做行为追踪、不向任何第三方出售或分享个人资料作营销用途。本应用不面向公众自由注册——账号一律由教育中心为在籍学员的家长建立。
一、账号如何建立（重要）
本应用没有公开注册功能。家长账号由子女就读教育中心的教师，在中心的教务系统中建立（以家长登记的电话号码作为登录账号），并在家长报名时已同意的前提下开通。使用者无法在应用内自行注册。
二、我们处理的资料
| 资料类别 | 由谁提供 | 用途 |
|---|
| 家长姓名、联络电话 | 教育中心录入 | 账号登录、辨识家长与子女的对应关系 |
| 家长电子邮箱（选填） | 教育中心录入 | 寄送账单与收据 |
| 子女姓名（中/英文）、学号、班级 | 教育中心录入 | 显示子女的学习资讯 |
| 子女出生日期、身份证号码（敏感）、就读学校、性别 | 教育中心录入 | 仅作唯读显示；原始用途为官方赛事报名的身份核对与证书签发 |
| 出勤记录、补课与请假记录 | 教师点名时产生 | 向家长显示子女出勤情况 |
| 珠心算考级等级与成绩 | 教师录入 | 向家长显示子女考级结果 |
| 学费账单与缴费记录 | 教育中心开单时产生 | 向家长显示应缴／已缴款项，并提供收据 |
| 设备推送令牌（FCM token） | 设备在开启通知后生成 | 仅用于向该设备送达出勤、账单与中心公告通知；不用于广告、不用于跨应用追踪 |
本应用对上述资料一律只作读取显示，家长无法在应用内修改子女的身份资料。唯一由家长在应用内主动提交的是「请假／补课申请」的日期与原因，以及（教师兼家长身份时）课堂点名记录。
三、设备权限说明
- 网络（INTERNET）：读取子女的出勤、成绩与账单资料。
- 通知（POST_NOTIFICATIONS）：用于接收缺席提醒、新账单、放假与中心公告。需您主动同意才会开启，可随时在系统设置中关闭，不影响其他功能。开启后设备会生成一个推送令牌（FCM token）并与当前登录家长绑定，仅用于送达通知。
- 震动（VIBRATE）：通知到达时的提示震动。
本应用不请求摄像头、相册、通讯录、定位或麦克风权限。
四、未成年人隐私保护
本应用的使用者是家长／法定监护人，而非未成年学员本人；但应用内显示的是未成年子女的资料。我们遵循 Google Play 相关政策及适用之个人资料保护法规（含马来西亚《2010 年个人资料保护法令》PDPA）：
- 账号由教育中心在家长报名并同意后建立，无法自行注册。
- 仅处理提供服务所必需的最小范围资料。
- 不投放任何广告，不进行任何形式的行为分析或跨应用追踪。
- 家长仅能查看与其电话号码相对应的子女的资料；此限制在数据库层以行级安全策略（RLS）强制执行。
五、资料储存、保留与安全
- 储存位置：资料储存于 Supabase 云端数据库（新加坡区域机房，ap-southeast-1）。
- 传输加密：所有网络传输一律使用 TLS/HTTPS 加密。
- 访问控制：采用数据库层级的行级安全策略（RLS），家长仅能访问自己子女的资料。
- 收据档案：收据以私有储存桶保存，仅透过限时签名链接提供给对应家长下载。
- 保留期限：子女在籍期间持续保留；退学或结业后满 24 个月，个人识别资料将被删除或匿名化，仅保留不可回溯至个人的统计数据。家长亦可随时提前要求删除。
六、资料共享
除下列情形外，我们不会向任何第三方提供您的个人资料：
- 云端服务供应商：Supabase（数据库托管）、Cloudflare（网页托管与内容分发）、Google Firebase Cloud Messaging（推送通知送达）。这些服务商仅代为储存与传输，不得为自身目的使用您的资料。
- 法律要求：依法律法规或司法机关的强制性命令。
我们不会为营销目的出售、出租或交换个人资料。
七、您的权利（查阅・更正・删除）
- 透过应用内的档案页查阅自己与子女的相关资料。
- 如需更正资料，可联络所属教育中心的教师，或来信本政策所载邮箱。
- 如需删除账号及个人资料，请见账号删除说明页，或来信 [email protected]，并注明家长姓名、联络电话与所属中心。我们将于收到请求后 14 个工作日内完成处理并回复确认。
八、政策更新
本政策如有修订，将于本页面公布并更新「最后更新」日期。涉及重大变更时，我们将透过教育中心另行通知家长。
九、联络我们
FayParentConnect — Privacy Policy
Effective date: 11 September 2026 | Last updated: 11 September 2026
“FayParentConnect” (the “App”) is an information-access tool for parents to view their child’s progress at the education centre in which the child is enrolled. This policy explains how personal data is handled.
Our commitments: The App contains no third-party advertising SDKs, performs no behavioural tracking, and never sells or shares personal data for marketing. The App is not open to public sign-up — all accounts are created by the education centre for parents of enrolled students.
1. How accounts are created (important)
The App has no public registration. Parent accounts are created by teachers within the centre’s administrative system, using the parent’s registered phone number as the sign-in identifier, and only after consent was given at enrolment. Users cannot self-register inside the App.
2. Data we process
| Category | Source | Purpose |
|---|
| Parent name and contact phone | Entered by the centre | Account sign-in; linking parent to child |
| Parent email (optional) | Entered by the centre | Sending invoices and receipts |
| Child’s name, student ID, class | Entered by the centre | Displaying the child’s information |
| Child’s date of birth, identity-card number (sensitive), school, gender | Entered by the centre | Display only; originally collected for identity verification in official competition entries and certificates |
| Attendance, make-up and leave records | Generated when teachers take attendance | Showing parents their child’s attendance |
| Abacus/mental-arithmetic exam grades and scores | Entered by teachers | Showing parents the child’s exam results |
| Tuition invoices and payment records | Generated when the centre issues invoices | Showing amounts due/paid and providing receipts |
| Device push token (FCM token) | Generated by the device once notifications are enabled | Solely to deliver attendance, billing and centre announcements to that device; never used for advertising or cross-app tracking |
The App only reads and displays the data above; parents cannot modify a child’s identity data inside the App. The only data parents actively submit are the date and reason for leave/make-up requests, and — for users who are both teacher and parent — classroom attendance entries.
3. Device permissions
- INTERNET — to retrieve the child’s attendance, results and billing data.
- POST_NOTIFICATIONS — to receive absence alerts, new invoices, holiday notices and centre announcements. This requires your explicit consent and can be turned off at any time in system settings without affecting other features. Once enabled, the device generates a push token (FCM token) bound to the signed-in parent, used solely to deliver these notifications.
- VIBRATE — haptic feedback when a notification arrives.
The App requests no camera, photo, contacts, location or microphone permissions.
4. Children’s privacy
The users of this App are parents and legal guardians, not the minors themselves; however, the App displays data about minors. We follow applicable Google Play policies and data-protection law, including Malaysia’s Personal Data Protection Act 2010 (PDPA):
- Accounts are created by the education centre after parental consent at enrolment; there is no self-registration.
- Only the minimum data necessary to deliver the service is processed.
- No advertising of any kind, and no behavioural profiling or cross-app tracking.
- A parent can only view data for the child matching their registered phone number; this restriction is enforced at the database level through Row Level Security (RLS).
5. Storage, retention and security
- Storage — data is held in a Supabase cloud database hosted in the Singapore region (ap-southeast-1).
- Encryption in transit — all network traffic uses TLS/HTTPS.
- Access control — database-level Row Level Security (RLS) restricts each parent to their own child’s data.
- Receipt files — stored in a private bucket and served only through time-limited signed links to the corresponding parent.
- Retention — data is retained while the child is enrolled. 24 months after withdrawal or completion, personally identifying data is deleted or anonymised, leaving only statistics that cannot be traced to an individual. Parents may request earlier deletion at any time.
6. Data sharing
We do not disclose personal data to third parties except:
- Infrastructure providers — Supabase (database hosting), Cloudflare (web hosting and delivery) and Google Firebase Cloud Messaging (notification delivery). These providers store and transmit data on our behalf and may not use it for their own purposes.
- Legal obligations — where required by law or binding order of a competent authority.
We do not sell, rent or trade personal data for marketing purposes.
7. Your rights (access, correction, deletion)
- View your own and your child’s data through the profile page inside the App.
- To correct data, contact a teacher at the education centre, or email us at the address below.
- To delete an account and its personal data, see the account deletion page, or email [email protected] stating the parent’s name, contact phone and centre. We will complete the request and confirm in writing within 14 working days.
8. Changes to this policy
Any revision will be published on this page with an updated “Last updated” date. For material changes, parents will additionally be notified through their education centre.
9. Contact us