Legal

Privacy Policy

Last updated: 1 March 2025

1. Introduction

CubbyBunny is operated by Magnified Pte. Ltd. ("Magnified", "we", "us", or "our"). We are committed to protecting the privacy of all individuals who interact with our platform, including preschool operators, teachers, parents, and guardians.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use the CubbyBunny platform and visit our website. It should be read together with our PDPA Policy and Terms of Service.

2. Information We Collect

We collect information in the following categories:

Account & Centre Information

  • Preschool name, address, and licence details
  • Administrator contact details (name, email, phone number)
  • Staff names, roles, qualifications, and CPD records

Child & Parent Information

  • Child's name, date of birth, class assignment, and health/allergy information
  • Parent or guardian names, contact details, and authorised pickup persons
  • Check-in/check-out records, temperature logs, and activity data
  • Photos captured during check-in or activity logging

Financial Information

  • Fee structures, invoices, and payment records
  • Subsidy details (Basic Subsidy, Additional Subsidy, CDA)

Technical Information

  • IP addresses, browser type, device information
  • Usage data and platform interaction logs
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

  • Operate and maintain the CubbyBunny platform
  • Process attendance, activity logs, and real-time parent notifications
  • Generate invoices, track payments, and calculate subsidies
  • Provide customer support and respond to enquiries
  • Send service-related communications (e.g. system updates, security alerts)
  • Improve our platform, fix bugs, and develop new features
  • Comply with legal and regulatory obligations, including ECDA requirements

We do not use your data for advertising purposes or sell your data to third parties.

4. Data Storage & Security

All data is stored on Amazon Web Services (AWS) servers located in Singapore (ap-southeast-1 region). Your data never leaves Singapore.

We implement industry-standard security measures including:

  • Encryption at rest and in transit (TLS 1.2+)
  • Role-based access controls
  • Regular security audits and vulnerability assessments
  • Automated backups with point-in-time recovery
  • Comprehensive audit trails for all data access

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share data only in the following circumstances:

  • With your preschool: Parents and guardians can view their own child's attendance and activity data as shared by the preschool through the platform.
  • Service providers: We work with trusted service providers (e.g. AWS for hosting, Xero/QuickBooks for accounting integrations) who process data on our behalf under strict contractual obligations.
  • Legal requirements: We may disclose data if required by law, regulation, or government request.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When a preschool terminates their account, we will delete all associated data within 90 days, unless retention is required by law.

Preschools can request a full data export at any time before account termination.

7. Your Rights

Under Singapore's Personal Data Protection Act (PDPA), you have the right to:

  • Access your personal data held by us
  • Request corrections to inaccurate data
  • Withdraw consent for data collection (subject to legal obligations)
  • Request deletion of your data

For parents and guardians: please contact your preschool directly to exercise these rights regarding your child's data. The preschool is the data controller for child records.

8. Cookies

Our website uses essential cookies to ensure the platform functions correctly. We do not use advertising or tracking cookies. Essential cookies include session management and security tokens.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify all active users of material changes via email and update the "Last updated" date at the top of this page.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: