隐私政策 / Privacy Policy

各入口的功能范围 / Scope by interface

家校沟通 App 0.3.0 的使用入口为成年老师和家长，提供孩子学习报告、老师发布的文字和照片动态、家庭确认及举报。 此版本不提供学生登录、做题、学习游戏、AI 提示或练习生成、题目朗读、难度推荐、家长作业拍照上传或即时聊天。 普通网站仍保留原有学习功能；下文有关练习、排行榜及 AI 的说明适用于实际使用这些功能的入口，不代表家校沟通 App 已开放它们。 成年人使用 App 仍会处理孩子的资料，学校须核实相应告知和授权。

Family communication App 0.3.0 provides entry for adult teachers and guardians, with learning reports, teacher-posted text/photo updates, family confirmations and reporting. It has no student login, exercises, learning games, AI hints or exercise generation, read-aloud, difficulty recommendations, guardian homework uploads or instant chat. The ordinary website retains learning features. References below to practice, leaderboards and AI apply to interfaces where those features are used, and do not mean they are available in this App. Adult use still involves children's data; the school must establish the relevant notice and authority.

1. 收集的资料 / Information processed

包括学校已登记的学生姓名、身份证号码（IC/NRIC）、年级、分校及负责老师；老师账号的姓名、邮箱和登录资料；用户主动上传的作业、手写答案、学习或活动照片及文字；练习答案、成绩、学习进度、积分、报告查看及动态确认记录。托管与故障处理服务也可能处理请求的 IP、浏览器、访问及错误信息。

Information includes school-registered student names, government identification numbers (IC/NRIC), grades, centres and assigned teachers; teacher names, email addresses and sign-in information; submitted homework, written answers, learning/activity photos and text; answers, results, progress, points, report views and update confirmations. Hosting and troubleshooting services may also process IP addresses, browser, request and error information.

Lovable 托管统计会记录页面访问、访问来源、访问时长、设备类型及网络请求对应的国家等粗略地区信息，用于了解服务使用及改善稳定性；故障报告可能包含错误信息、堆栈与页面路径。这些属于网站托管及运行统计，不需要手机定位权限，也不表示获取 GPS 精确位置。

Lovable hosting analytics records page visits, referral sources, visit duration, device types and coarse regions such as the country associated with a network request, to understand service use and improve reliability. Error reports may include messages, stack traces and page paths. These hosting and operational statistics do not require phone location permission and do not mean GPS precise location is obtained.

拍照或选图由用户主动选择。请只提交学校已获适当许可的相关资料，避免在作业或活动照片中附带身份证件、密码或无关的敏感内容。

Users choose when to capture or select images. Submit relevant material with appropriate school/guardian permission, and avoid including identity documents, passwords or unrelated sensitive details in images.

2. IC 及访问方式 / IC and access

家长邮箱账号功能启用后，家长使用自己的邮箱注册、验证邮箱及设置密码，再输入孩子 IC／学生登录编号自行认领。 匹配学校学生记录后自动关联，不经过学校事前亲子关系批准；邮箱验证及自行声明均不等于学校已核实监护人身份。 关联账号可查看该孩子的学习报告、老师发布的家庭文字与照片动态，并确认或举报。知道孩子 IC 的其他人可能错误认领；发现错误请立即联系学校撤销。 家长邮箱与关联记录保存在 Babe 的 Supabase 后台，不覆盖校务系统的学生身份资料；密码由 Supabase Auth 管理。 忘记密码可经已注册邮箱重设。照片动态用于相关家庭了解孩子情况，不用于本平台公开宣传或广告。

When parent email accounts are enabled, parents register and verify their own email, set a password, and self-claim a child using the child's IC or student login ID. A matching school record activates the link automatically, without prior school verification of guardianship. Email verification and a self-declaration do not verify a guardian's identity. Linked accounts can view reports and family text/photo updates, acknowledge updates and report content. Another person who knows a child's IC may claim incorrectly; contact the school immediately to revoke a disputed link. Parent emails and links are stored in Babe's Supabase backend without overwriting central student identities; Supabase Auth manages passwords and email password resets. Family update photos are not used for public promotion or advertising on this platform.

Apabila akaun e-mel penjaga diaktifkan, penjaga mendaftar dan mengesahkan e-mel sendiri, menetapkan kata laluan dan menuntut pautan anak menggunakan IC atau ID pelajar. Padanan rekod sekolah mengaktifkan pautan secara automatik tanpa pengesahan hubungan penjaga terlebih dahulu. Pengesahan e-mel dan pengakuan sendiri bukan pengesahan identiti penjaga. Akaun terpaut boleh melihat laporan, kemas kini teks/foto keluarga, membuat pengakuan baca dan melaporkan kandungan. Orang lain yang mengetahui IC mungkin membuat tuntutan salah; hubungi sekolah untuk membatalkan pautan yang dipertikaikan. E-mel dan pautan disimpan dalam Supabase Babe tanpa menimpa identiti pelajar pusat. Supabase Auth mengurus kata laluan dan penetapan semula melalui e-mel. Foto kemas kini keluarga tidak digunakan untuk promosi awam atau iklan platform ini.

原有入口在家长邮箱账号功能未启用时，学生与家长以学校登记的孩子 IC 或学校提供的学生登录编号进入学习或报告入口。 普通学生继续由学校中央系统核对记录与老师认领情况；经批准的虚构学生档案使用独立测试编号核对，不使用真实孩子资料。IC 用于匹配学生，本身不证明持有人是某位家长。老师使用邮箱和密码登录，注册需要学校注册码。孩子专属动态另需老师交付的家庭访问码；该码代表家庭访问凭据，确认记录不代表某位父亲或母亲的实名签署。

Legacy entry, before parent email accounts are enabled, uses a school-registered child's IC or a school-provided student login ID. Ordinary students remain checked against the central roster and teacher assignment. Approved fictional student records use separate test identifiers without real children's data. An IC identifies a student record; it does not independently prove a particular guardian's identity. Teachers use email/password and need a school code to register. Child updates require an additional school-issued family access code. That code represents a family credential, and a confirmation is not a named parent's identity-verified signature.

3. 用途与可见范围 / Purposes and visibility

学校举报功能启用后，举报内容、原因、相关动态和处理记录仅向学校指定的相应处理负责人提供。普通老师不会自动获得举报处理权限；举报不会自动改变孩子的学习记录。原动态及必要处理记录可能为核查和安全处理而保留，删除请求仍按下方渠道核验。

When school reporting is enabled, the report, reason, relevant update and handling records are provided only to the school-designated reviewer assigned to that scope. Ordinary teacher accounts do not automatically receive review access, and reports do not automatically change a child's learning records. Original updates and necessary handling records may be retained for investigation and safety; deletion requests follow the verified process below.

资料用于匹配学校学生记录、老师管理、作业整理、个性化练习、题目朗读、学习报告和孩子动态。负责老师可处理其负责孩子的学习资料；家长报告以孩子记录提供。孩子动态的文字、照片和确认按负责老师与家庭访问码校验。学习与游戏排行榜会向其他学生、家长入口显示参与学生的姓名或已有显示名及积分；如需更改显示名，请联系负责老师核对。

Data supports school-record matching, teacher work, homework analysis, practice, text-to-speech, reports and child updates. Assigned teachers handle their students' records; parent reports are provided by child record. Child updates and confirmations use teacher/family-code checks. Learning/game leaderboards display participants' names or existing display names and points to other student/parent portal users. Contact the assigned teacher to review a display-name change.

4. 云服务与 AI / Cloud and AI processing

云服务可能在马来西亚境外处理资料；运营方与学校应按适用要求核对跨境处理及相关权限。

Cloud processing may occur outside Malaysia; the operator and school should review applicable cross-border processing requirements and authority.

提供功能需要学校中央系统、Lovable 托管及 Cloud/AI Gateway、Supabase 数据与文件服务，以及 AI 模型服务商（目前包括 OpenAI）。题目朗读使用 Google Gemini；Google Fonts 提供界面字体。触发 AI 功能时，相关作业照片、题目、答案或报告文字会发送到相应处理服务；照片中自行写入的个人信息也可能一并被处理。AI 结果应结合原作业由老师核对。

Services include the school's central system, Lovable hosting and Cloud/AI Gateway, Supabase data/file infrastructure and AI providers (currently including OpenAI). Google Gemini provides text-to-speech and Google Fonts supplies interface fonts. When an AI feature is used, relevant homework images, questions, answers or report text are sent to the processing service; personal details written in submitted material may be included. Teachers should check AI output against the original work.

本应用未提供广告投放、广告标识符追踪或出售个人资料的功能。资料向服务提供商的处理与向其他使用者的可见范围，应按本政策所述实际功能理解。

The app does not provide advertising, advertising-ID tracking or personal-data sales features. Processing by providers and visibility to other users follow the functional purposes described in this policy.

5. 保存、安全与删除 / Retention, security and deletion

学习记录与照片用于持续提供学校学习及家校服务，目前没有统一的自动到期删除安排。学校会按服务需要及适用的保存要求核对资料保留范围。对账号或资料删除请求，学校核验申请人权限后会说明处理范围、预计时间，以及依法或为安全、防欺诈必须保留的类别、理由与期限；账号停用不等于已经删除。

Learning records and images support ongoing school services; there is currently no universal automatic expiry/deletion schedule. The school reviews retention against service needs and applicable requirements. After verifying a deletion request, the school will explain its scope, expected timing and any categories, reasons and periods of retention needed for legal, security or fraud-prevention purposes. Deactivation is not deletion.

App 网页入口使用 HTTPS。老师账号使用密码，孩子动态采用家庭访问码与私有照片链接。请勿向公开群组发送密码、完整 IC、家庭访问码或孩子私人照片；使用共用设备后请退出。

App web entry uses HTTPS. Teachers use passwords; child updates use family access codes and private image links. Do not post passwords, full ICs, family codes or private child photos in public groups, and sign out of shared devices.

6. 联系我们 / Contact

如需了解、核对、更正或申请删除资料，请联系学校负责老师，或邮件至 Stanley.Chuan@xuedaeducationgroup.edu.my。请先提供账号邮箱、学校/分校及学生编号或遮盖的 IC 后四位；请勿在首次邮件中发送完整身份证号码、密码、访问码或孩子照片。如需进一步资料，会另行说明核验方式。

For access, correction or deletion enquiries, contact the assigned school teacher or email the address above. Initially provide your account email, school/centre and student reference or masked IC ending only. Do not send a full government ID, password, access code or child photo in the initial message. Further verification steps will be explained if required.

7. 提供资料与选择 / Providing information and choices

照片和动态文字由用户主动提交。学校身份资料用于匹配记录，不提供时无法进入对应记录；老师入口需要登录资料，私人动态需要家庭访问码。 如需限制处理、撤回许可、停止使用某项功能或了解其他安排，请联系学校，学校应说明对服务的影响及须保留的记录。 本隐私说明本身不代表已取得监护人同意。

Users choose to submit photos and update text. School identifiers are needed to match records; without them the relevant record cannot be accessed. Teacher entry requires sign-in details, and private updates require a family code. To discuss limiting processing, withdrawing permission, stopping a feature or alternative arrangements, contact the school. The school should explain the effect on services and records that must be retained. This notice is not itself evidence of guardian consent.