Legal

Privacy Policy

Effective date: 17 June 2026

1. Who we are

Brightmark is a product of Finedrawn Pte. Ltd. (UEN 202614907C), a company incorporated in Singapore with its registered address at 19 Cactus Crescent, Singapore 809753.

In this policy, "Brightmark", "we", "us", and "our" refer to Finedrawn Pte. Ltd. operating the Brightmark platform — including the mobile application, website, and any related services.

2. What data we collect

We collect only the information needed to provide Brightmark's features.

Tutor account data

When you register as a tutor, we collect your name, email address, and the details you enter about your students — including their names, subjects taught, lesson rates, schedules, and the WhatsApp contact number you provide for invoicing. We also store lesson logs, invoice records, and payment status as you record them.

Calendar data

If you connect Google Calendar, we receive OAuth access tokens from Google and write lesson events to your calendar on your behalf. We do not read your existing calendar events or store your calendar data beyond what is necessary to create and update Brightmark lesson events.

Usage data

We collect basic analytics — pages visited, features used, and session metadata — through a self-hosted analytics tool. This data is aggregated and not tied to your identity.

3. How we use your data

  • To provide and operate the Brightmark platform
  • To generate invoices, lesson logs, and payment records on your behalf
  • To sync lessons to Google Calendar when you have enabled that integration
  • To send push notifications for lesson reminders and invoice alerts that you have enabled
  • To improve the product based on aggregated usage patterns
  • To communicate with you about your account, including support and policy updates

We do not sell your personal data. We do not use your data for advertising.

4. Third-party services

We rely on the following third-party services to operate Brightmark. Each service processes data in accordance with its own privacy policy.

Supabase

Our database and authentication infrastructure runs on Supabase. Your account credentials and all application data are stored in Supabase's infrastructure, hosted in the Singapore or Asia-Pacific region. Supabase is SOC 2 Type II certified.

Google Calendar

If you enable Google Calendar sync, we integrate with Google's Calendar API using OAuth 2.0. Only the minimum required permissions are requested. You can revoke access at any time from your Google account settings.

5. Data retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes or enforcing agreements.

Aggregated, anonymised analytics data may be retained indefinitely.

6. Cookies

Brightmark's website uses only technically necessary cookies — session tokens for authentication and security. We do not use tracking or advertising cookies.

7. Your rights

Under Singapore's Personal Data Protection Act 2012 (PDPA) and, where applicable, other data protection laws, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Withdraw consent for processing where consent is the legal basis
  • Request deletion of your account and associated data

To exercise any of these rights, contact us at [email protected]. We will respond within 10 business days.

8. Children

Brightmark is a tool for tutors. Student profiles are created by tutors for their own record-keeping — students do not create accounts and no data is collected directly from minors.

9. Changes to this policy

We may update this policy as the platform evolves. If we make material changes, we will notify you by email or via an in-app notice at least 14 days before the changes take effect. Continued use of Brightmark after that date constitutes acceptance of the updated policy.

10. Contact

Questions about this policy or how we handle your data should be directed to:

Finedrawn Pte. Ltd.

19 Cactus Crescent, Singapore 809753

[email protected]

Also see our Terms of Service

Back to home