Privacy Policy

GuruExplorer Pte. Ltd. — Personal Data Protection Act 2012 (Singapore) — Updated 27 June 2026 · v1.0

GuruExplorer Pte. Ltd. (“GuruExplorer”, “we”, “us” or “our”) operates an online platform that introduces Customers (students, parents and guardians) to Ad Listers (tutors, coaches and training providers), and that publishes editorial content. This Privacy Policy explains how we collect, use, disclose, protect and retain personal data when you access or use the GuruExplorer website, services, tools and features (the “Platform”). We handle personal data in accordance with the Singapore Personal Data Protection Act 2012 (the “PDPA”) and the guidelines of the Personal Data Protection Commission (“PDPC”). This Policy forms part of, and should be read together with, our Terms of Service. Capitalised terms not defined here have the meaning given in the Terms of Service. Where required by law, we obtain your consent before collecting, using or disclosing your personal data.

1. Scope and Key Definitions

• “Personal data” means data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access.
• “Customer” means a student and/or a parent or legal guardian using the Platform to find education or enrichment services.
• “Ad Lister” means a tutor, coach or training provider using the Platform to advertise, list or offer services.
• “Editorial Contributor” means any person who submits an article, guide or other editorial work for publication by GuruExplorer.
• “Data intermediary” means an organisation that processes personal data on our behalf.
• GuruExplorer is an introduction and lead-generation platform. We are not a tuition agency, tuition centre, education provider or employer of Ad Listers, and lessons, fees and arrangements are made directly between Users off the Platform.

2. Data Protection Officer (DPO)

We have appointed a Data Protection Officer who is responsible for our compliance with the PDPA. You may contact our DPO for any matter relating to your personal data, including access and correction requests, withdrawal of consent, questions or complaints: Data Protection Officer Contact Data Protection Officer Email: dpo.guru@guruexplorer.co General / Account Enquiries Email: support.guru@guruexplorer.co

3. Personal Data We Collect

3.1 Customers (students, parents and guardians)

• Year of birth or age range; and, for users aged 13–17, parent/guardian identity and consent details;
• Contact number and email address;
• Subjects, levels, session types, duration and frequency sought;
• Availability and general location;
• Booking requests and messages sent through the Platform; and
• Account credentials and usage information.

3.2 Ad Listers (tutors, coaches and training providers)

• Full name, contact number and email address;
• A clear profile photograph showing the Ad Lister’s face, and (for sports/physical enrichment) approved supplementary coaching/facility photos;
• Self-declared qualifications, experience and certifications (name and type only — the Platform does not collect or store certificate documents);
• Subjects, levels, hourly rates, availability, tutor type, focus age groups and update frequency;
• Biography and other profile content; and
• Account credentials and usage information.

3.3 Editorial Contributors

• Name (or agreed pen/display name), photograph, professional credentials, biography and a link to the Ad Lister profile (where applicable);
• The editorial content submitted, and any author/contact details provided; and
• Disclosures of AI assistance and of any material affiliation or interest.

3.4 Reviews, ratings and verification data

• Reviews, ratings and related content you post;
• Verify-My-Cert information and the QR code issued for in-person credential verification (paid Ad Listers); and
• Acceptance rate, response time, review score and activity metrics derived from your use of the Platform.

3.5 Data collected automatically

When you use the Platform we may automatically collect technical and usage data such as device information, IP address, browser type, and interaction data, through cookies and similar technologies, to operate, secure and improve the Platform.

4. How We Collect Personal Data

• Directly from you — when you register, create or update an account or listing, submit a booking request, post a review, submit an editorial contribution, or contact us;
• Automatically — as you interact with the Platform; and
• From third parties — where you have authorised them to share your data, or where permitted by law.

5. Purposes for Collection, Use and Disclosure

We collect, use and disclose personal data only for purposes that a reasonable person would consider appropriate and which have been notified to you, including to:

• create, verify and administer User accounts and Ad Lister profiles;
• match Customers with Ad Listers, validate subscription tier/booking caps, and operate the booking flow;
• reveal the Customer’s and Ad Lister’s contact details to each other upon acceptance of a booking, so that they can arrange the engagement directly (see Section 9);
• enable in-Platform messaging and communications;
• operate the reviews, ratings, calendar, search-visibility and Verify-My-Cert features;
• publish editorial contributions, including author attribution (byline, author profile and structured-data author markup);
• process subscription payments via our third-party payment provider (we do not store full card numbers or CVV);
• provide customer support; moderate listings, reviews and content; and detect, investigate and prevent breaches, fraud or misuse;
• send transactional and (with consent) marketing communications; and
• comply with applicable laws, regulations and lawful requests. We do not sell personal data to third parties.

6. Consent

• We collect, use or disclose your personal data with your consent, or where consent is deemed or otherwise permitted under the PDPA.
• Where you provide us with another individual’s personal data (for example a parent providing a child’s details, or an Editorial Contributor naming a student, parent or tutor), you confirm that you have obtained that individual’s consent for us to collect, use and disclose their data for the relevant purposes, or that the individual has been appropriately anonymised.
• You may withdraw consent at any time (see Sections 8 and 14).

7. Children’s and Minors’ Personal Data

• The Platform is not intended for children under 13, and we do not knowingly collect personal data from anyone under 13.
• Users aged 13 to 17 may use the Platform only with the consent and supervision of a parent or legal guardian, on whose consent we rely for the minor’s personal data.
• No photograph may feature the face of a minor student or participant without the verified written consent of that minor’s parent or legal guardian; we will remove non-compliant photos.
• Parents/guardians may exercise access, correction and withdrawal rights on behalf of a minor by contacting our DPO.
• If we learn that we have collected a child’s personal data without verified parental consent, we will take steps to delete it.

8. Marketing Communications and the Do Not Call (DNC) Provisions

• Transactional communications necessary to operate the Platform (e.g., booking notifications and acceptances, subscription reminders, payment receipts, security alerts and service updates) may be sent by email, SMS, WhatsApp or in-Platform notification and do not require separate consent.
• Marketing communications (e.g., newsletters, platform updates, educational content, exam-season tips, success stories, offers and matching opportunities) are sent only with your prior consent, given by ticking an opt-in checkbox, subscribing via a form, or replying with an affirmative keyword (e.g., “YES”).
• Channel-specific consent: email, WhatsApp and SMS consents are separate — opting in to one channel does not opt you in to another.
• Before sending marketing messages to Singapore telephone numbers, we comply with the DNC Provisions and, where required, check numbers against the DNC Registry unless valid clear and unambiguous consent has been obtained.
• You may withdraw marketing consent at any time, free of charge, via the “unsubscribe” link in any marketing email, by replying “STOP” to a marketing WhatsApp or SMS, by updating your account settings, or by emailing support.guru@guruexplorer.co . Changes take effect within 10 business days; transactional communications will continue.
• We maintain records of marketing consent, including the date, channel and method of opt-in, which you may request under your right of access.

9. Disclosure to Third Parties and Data Intermediaries

We may disclose personal data to the following categories of recipients, who are authorised to process it only for the purposes in this Policy and under appropriate confidentiality and data-protection obligations: Recipient / Integration Purpose Nature Other Users (Customer ↔ Ad Lister) Upon acceptance of a booking, contact details are Disclosure under revealed to each other so the engagement can be the service arranged directly; listing, profile and review content is shown on the Platform Meta Platforms — WhatsApp Business To send and receive WhatsApp messages where you Direct messaging Platform (Cloud API) engage on that channel; your mobile number and provider (overseas) message content are processed by Meta Amazon Web Services (AWS) Cloud hosting and storage of Platform data and Data intermediary User-uploaded content (profiles, photos, editorial (hosting) articles) Third-party payment service providers To process subscription payments; they handle card Independent details directly — we do not store full card numbers processor or CVV Software development / maintenance To build, host, maintain and support the Platform Data intermediary provider Editorial syndication / promotion To publish or promote editorial content with author Disclosure (with partners attribution, where applicable consent) Regulators, law enforcement, Where required or permitted by law, or to protect Legal / compliance professional advisers our rights and User safety Where we engage a data intermediary, we require it by written contract to protect the personal data and to process it only for the purposes we authorise.

10. Transfer of Personal Data Outside Singapore

• Some service providers process or store personal data outside Singapore. In particular, our WhatsApp messaging provider (Meta) processes data on servers located outside Singapore.
• Our primary hosting and storage on Amazon Web Services is configured to use the Singapore (Asia Pacific) region where reasonably practicable.
• Where personal data is transferred outside Singapore, we take reasonable steps to ensure the recipient provides a standard of protection comparable to the PDPA, for example through contractual data-protection clauses.

11. Protection of Personal Data

We make reasonable security arrangements to protect personal data in our possession or control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, including:

• access controls, authentication and least-privilege permissions;
• encryption of data in transit and, where appropriate, at rest;
• secured cloud infrastructure (AWS) and network protection;
• restricting contact-detail exchange between Users until a booking is accepted;
• staff confidentiality obligations and data-protection awareness; and
• periodic review of our security measures. No method of transmission or storage is completely secure, and while we take reasonable steps we cannot guarantee absolute security.

12. Retention of Personal Data

Category Retention period Account and profile data Retained while the account remains active Data after account termination Up to 24 months after termination, unless a longer period is required by law Payment and transaction records Up to 7 years, in line with statutory requirements Published editorial content May be retained/archived after removal requests, as set out in our Terms of Service Marketing consent records For as long as needed to demonstrate compliance We cease to retain personal data, or remove the means by which it can be associated with you, when it is no longer necessary for any business or legal purpose, after which it is securely deleted or anonymised.

13. Accuracy of Personal Data

We take reasonable steps to ensure personal data is accurate and complete, particularly where it is likely to be used to make a decision affecting you or to be disclosed to another organisation. Please keep your account and profile information up to date and notify us of changes. Ad Listers are responsible for the accuracy of their self- declared qualifications.

14. Your Rights: Access, Correction and Withdrawal of Consent

• Access — request information about the personal data we hold about you and how it has been used or disclosed in the past year;
• Correction — request that we correct any error or omission; and
• Withdrawal of consent — withdraw consent to our collection, use or disclosure of your personal data, on reasonable notice. To exercise these rights, contact our DPO (Section 2). We may verify your identity (and authority, for requests on behalf of a minor) before responding, and a reasonable fee may apply to an access request (notified in advance). We respond within the timelines required by the PDPA. Withdrawing consent may mean we can no longer provide certain features or services.

15. Data Breach Notification

We maintain a data breach management plan. Where a data breach results in, or is likely to result in, significant harm to affected individuals, or is of significant scale, we will notify the PDPC and affected individuals in accordance with the PDPA’s mandatory data breach notification requirements.

16. Cookies and Similar Technologies

The Platform may use cookies and similar technologies to keep you signed in, remember preferences, analyse usage and improve performance. You can manage cookies through your browser settings, although disabling some may affect functionality.

17. Complaints

If you have a complaint about how we handle your personal data, please contact our DPO first (dpo.guru@guruexplorer.co ) and we will endeavour to resolve it. You may also lodge a complaint with the PDPC (www.pdpc.gov.sg).

18. Changes to this Policy

We may update this Policy from time to time. The latest version will be posted on the Platform with its effective date. Your continued use of the Platform after an update constitutes acknowledgement of the revised Policy.