Privacy at SKOOL21
SKOOL21 Pte. Ltd. (Singapore) runs the SKOOL21 learning portal, learn.skool21.org, and the SKOOL21 Learn and SKOOL21 Teach apps, for schools that use the SKOOL21 STEM Innovator's Workbook. This page says what we record, why, who sees it, where it is kept and for how long, and how to ask us about it. Last changed: 31 October 2026.
Who is responsible
The school decides to use SKOOL21 and is responsible for its pupils' and staff's information (the controller). SKOOL21 keeps and processes that information for the school, only on the school's instructions (the processor). A pupil cannot sign in until the school has recorded a parent's consent. Data protection officer: dpo@skool21.org.
What we record
If it is not in this list, the portal and the apps do not collect it.
About a pupil
- A first name or nickname, the class and the level. Optionally, the school's own student number.
- The sign-in secret (three pictures, a PIN or a QR card), kept only as a scrambled hash.
- Which lessons were opened and finished, the answers inside them, the stickers earned and the time spent.
- At the levels that have them (today Level 4), a start-of-year and an end-of-year check, shown as bands, never as
marks. A few taps after each project (how the pupil feels it went), never scored.
- Drawings the pupil makes in a lesson's drawing boxes, on the screen. The lessons have no camera.
- The teacher's notes on the paper workbook and the teacher's rubric levels.
- With the parent's separate consent only: photos of builds and workbook pages, never faces.
About a parent (only when the parent chooses a parent account): one email address (the portal sends no text messages), kept encrypted; the relationship to the child; and the consent given: which boxes, when and how it was confirmed.
About teachers and school staff: name, work email, role, sign-in secrets (hashed), the optional two-step sign-in secret, and for teachers in certification their training progress, assignments and certificates.
About everyone: technical logs (device type, time, the page asked for, and the internet address the request came from) for security, to limit repeated sign-in attempts, and for troubleshooting. Inside the portal's own records (sign-ins, consent, the audit log) the internet address is kept only in a hashed form. The access logs of the portal's front door keep the full address for 30 days, then they are deleted; they never hold a password, a sign-in link or a cookie.
Never collected: a pupil's email, phone, home address, date of birth, identity number or photo of their face; precise location; contacts; biometrics; health, religion or nationality; free text typed by pupils; advertising identifiers; third-party cookies.
Why, and who sees it
The information is used to run lessons, show progress and help the teacher, and for nothing else: never sold, never used for advertising or profiling. A pupil's record is seen by the pupil, the pupil's teachers, the school admin, a linked parent, and SKOOL21 support when the school asks for help. SKOOL21 staff state a reason before they open a school's records, and every change they make, every export of a pupil's record and every view of a pupil's private details (legal name, school student number) is written to the school's own audit log, which the school admin can read. A school's distributor sees only figures without names, for groups of ten pupils or more.
Where it is kept, and for how long
On Amazon Web Services (AWS) servers in Singapore; the backups stay in Singapore too. Each school's records are encrypted with a key that belongs to that school, and each pupil's private fields and drawings with a key of their own.
| What | Kept |
|---|---|
| Everything about a pupil: name, class, answers, scores, the start- and end-of-year checks where the level has them, self-ratings, the teacher's notes, drawings, and photos of builds and workbook pages | nothing is deleted while the pupil is at the school; 12 months after the pupil leaves, all of it at once: name, notes, drawings and photos deleted, answers and scores kept only as anonymous statistics |
| A parent's contact | 6 months after the last child is unlinked |
| Consent records | the life of the consent plus 6 years |
| Staff accounts | while the account exists |
| Certificates; practicum videos | 10 years; 12 months |
| Technical logs, including the access logs with the full internet address (security and sign-in limits) | 30 days, then deleted |
Companies that help us: Amazon Web Services (hosting, backups and the portal's own emails, Singapore). When you write to support@skool21.org or dpo@skool21.org, your message and our reply sit in SKOOL21's Google Workspace mailbox; a pupil's record never leaves the portal. The interactive books are hosted by SKOOL21 itself.
Your rights
A parent can ask to see, download, correct or delete their child's record, and can withdraw consent at any time, from the parent page, through the school, or by writing to dpo@skool21.org. Teachers and staff ask their school admin or write to support@skool21.org. We reply within 21 days.
The SKOOL21 Learn and SKOOL21 Teach apps
SKOOL21 Learn is the tablet app pupils use in schools that license the SKOOL21 STEM Innovator's Workbook. SKOOL21 Teach is the app for their teachers and school staff. Both are published by SKOOL21 Pte. Ltd. (Singapore) and work only with a school's licence. Everything the apps record is recorded for the school: the school is the controller of its pupils' and staff's data, and SKOOL21 processes it for the school under the notice above.
What the apps record
- Learn: the pupil's display name (a first name or nickname the school chose), which lessons were opened and
finished and the time spent in them, the answers inside lessons, the self-rating taps and, at the levels that have it (today Level 4), a start-of-year check, the stickers earned, and drawings made inside a lesson. Never a surname, email address, phone number, photo of the child, location, contacts or free text. Each pupil is known to the system by an opaque account id, never by a device id.
- Teach: the teacher's name and school email address, and the workbook checks, rubric levels and notes the teacher
enters about pupils.
What stays on the device
- Learn keeps on the tablet: the lesson and self-assessment files the school assigned; each pupil's saves waiting
to be sent (answers and progress under the pupil's account id), sealed with a key made for that pupil on the tablet and removed once they are sent; and the teacher's class session for that tablet (14 days) in the device's secure store. All of it is inside the app's private storage and is removed when the class is closed or the app is uninstalled.
- Teach keeps on the phone: the teacher's sign-in token in the device's secure store and the entries waiting to be
sent.
What the apps never do
No analytics, crash-reporting, advertising or social SDK is built into either app. No advertising identifier is read. No third-party cookies are set. There are no ads, no purchases, no chat and no links out of the pupil app other than this page, which sits behind a press-and-hold gate for adults. The apps talk only to learn.skool21.org, over TLS. If an error is ever reported, it goes to SKOOL21's own servers with no personal data in it.
Permissions
Learn and Teach ask the device only for internet access: no camera, no location, no contacts, no storage outside the app.
Read-aloud
The pupil app reads its prompts aloud. On Levels A, B and 1 these are recordings of the lessons' narrator, shipped inside the app; on older levels the tablet's own voice reads the words on the device. Nothing the child says or does is recorded by this feature, and nothing is sent anywhere.
Deleting a record
A pupil's record: a parent asks the school, or writes to dpo@skool21.org. SKOOL21 deletes the record at the school's or the parent's request, after giving them a copy if they want one; we reply within 21 days. Otherwise a pupil's record is never deleted while the pupil is at the school, and is deleted 12 months after they leave. A deleted record is made unreadable: the name, notes, drawings and photos are gone, and the answers and scores stay only as anonymous statistics, never under the child's name. Our database backups age out within 35 days, so after that no copy of the deleted record remains anywhere. The steps are also shown inside the app under Settings → Privacy.
A teacher's account: ask your school administrator to remove it, or write to support@skool21.org; we reply within 21 days.
How long records are kept
See [Where it is kept, and for how long](#where) above.
Contact
SKOOL21 Pte. Ltd., 168 Robinson Road, #12-34, Singapore 068912 · data protection officer dpo@skool21.org · support support@skool21.org. Home regulator: the Personal Data Protection Commission, Singapore. For schools in Malaysia, SKOOL21 also meets the Personal Data Protection Act 2010 as amended in 2024; parents there receive the notice in English and in Malay.