This policy explains what personal data Skooldash collects, why we collect it and how we look after it. It covers this website, skooldash.com, and the Skooldash system and apps that preschools use. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
Who we are
Skooldash ("we", "us") makes a management system for preschools, kindergartens (tadika) and childcare centres (taska), with a Parent App, a Teacher App, the SkooLingo learning games and Skoo, an AI assistant.
Two different roles
- On this website, we decide what is collected and why, so we are responsible for it.
- In the Skooldash system, each preschool that subscribes ("the school") decides what it records about its pupils, their families and its staff. The school is responsible for that data. We process it for the school, on its instructions, only to run the service.
What we collect on this website
- Demo requests. When you book a free demo: your name, your preschool's name, your phone number and e-mail address, the number of pupils and branches, and your message. We also record the time, your IP address and your browser type, to stop spam.
- Chats with Skoo. When you chat with Skoo: the e-mail address or phone number you give, your name if you give it, your messages and Skoo's replies, the page you were on, your IP address and your browser type.
- Visits. Our server keeps standard logs (IP address, the page asked for, the time and the browser) to keep the site working and secure.
We use this information to reply to you, arrange your demo, follow up on your questions, improve our answers and protect the site. We do not sell it, and we do not use it for advertising.
Cookies and similar technology
- We use only the cookies the site needs to work and stay secure: a session cookie and a security token. We do not use advertising or tracking cookies, and we do not use analytics services.
- Skoo keeps your chat in your own browser's storage so you can carry on where you left off. Clearing your browser data removes it.
- The site loads its typeface from Google Fonts, so your browser connects to Google's servers, which receive your IP address.
How Skoo on this website uses AI
Skoo's replies are written by an AI service, DeepSeek. For each reply we send DeepSeek your messages in that chat, the name you gave (if any) and what this website says about Skooldash. We do not send your e-mail address or phone number. DeepSeek processes data outside Malaysia. Please do not type sensitive personal information into the chat. Skoo can make mistakes; our team reads the chats and follows up.
What the Skooldash system holds
What a school records depends on how it uses the system. It usually includes:
- Pupils: name, MyKid or birth certificate number, date of birth, gender, photo, class, attendance and QR scan times, learning records (such as Iqra' and Quran reading, assessments and report cards), health notes the school chooses to keep, and fee records.
- Parents and guardians: names, identity card numbers, phone numbers, e-mail and home addresses, other details the school asks for (such as work details), sign-in details for the Parent App, and the phones that receive its notifications.
- Staff: names, contact details, roles, the classes they teach, and sign-in details.
- Payments: what was paid, when and how. Card and bank details are entered on the payment provider's own page, not in Skooldash, and we do not store them.
We use this data only to provide the service to the school: attendance and safety checks, fees and receipts, learning records and report cards, notices and messages, the apps and support. We do not sell it, and we do not use it for advertising.
Children
Skooldash helps schools care for young children, so we take special care with their data. Children do not sign up for Skooldash themselves: their school adds them, with the knowledge and consent of a parent or guardian, as the PDPA requires.
Skoo in the school system
A school can let its staff and families use Skoo. Skoo is built so that children's names and records are not sent to the AI service: it receives the question, the system's help pages and totals (for example, how many pupils were present today), never lists of children. Whatever a user types is sent to the AI service, so please do not type a child's personal details into Skoo. Skoo conversations are deleted automatically after 7 days.
Who else handles data
We use a small number of service providers, each only for its part of the service:
- Hosting: the servers that run this website and each school's system.
- E-mail: to send messages such as demo requests, password resets and notices.
- App notifications: Google Firebase Cloud Messaging delivers notifications to the apps.
- AI: DeepSeek writes Skoo's replies, as described above.
- Payments, SMS and WhatsApp: each school chooses and sets up its own providers, for example ToyyibPay, CHIP, Billplz or iPay88 for payments, and an SMS or WhatsApp Business service for messages. They receive only what they need to take a payment or deliver a message.
- App stores: Google Play and the App Store distribute the apps under their own terms.
Some of these providers process data outside Malaysia. Where that happens, we take reasonable steps to keep the data protected, as the PDPA requires.
We may also share personal data when the law requires it, or when it is needed to protect the safety of a child or anyone else.
How we keep data safe
- Every page and app connects over HTTPS, so data is encrypted on its way.
- Our servers sit behind a firewall that lets in only web traffic and our own secure administration.
- Each school's system keeps its data in its own database.
- People see only what their role allows, and the staff of one branch see only their own branch.
- Passwords are stored in hashed form, never as plain text. Payment-provider keys, and Skoo conversations in the school system, are stored encrypted.
- Our own admin portal needs a password and a second sign-in step (two-factor authentication).
No system can be perfectly secure. If a breach affects personal data, we will tell the affected school without undue delay and help it meet its duties under the PDPA.
How long we keep data
- Demo requests and Skoo chats on this website: as long as we need them to follow up and to keep a record of our conversations, and no longer than two years after our last contact with you, unless your school becomes a customer.
- Server logs: a short time, as needed for security and troubleshooting.
- School data: for as long as the school subscribes. A school's past records, such as earlier school sessions or a former branch, stay until the school deletes them, because schools need their history. When a subscription ends, we keep the school's data for up to 90 days so the school can ask for a copy, and then we delete it, unless the law requires us to keep it longer.
Your rights
Under the PDPA you can ask to see the personal data held about you, ask for it to be corrected, ask for a copy of it, and withdraw your consent or ask that it no longer be used for a purpose, such as follow-up messages.
- For your demo requests and Skoo chats on this website, contact us.
- For data in a school's system, contact the school. Parents and guardians can also see much of their child's record in the Parent App. We help schools answer these requests.
We may need to confirm who you are before acting on a request, and we will reply within the time the law allows.
Changes to this policy
We may update this policy as Skooldash changes. The date at the top shows when it last changed. When a change is significant, we will tell the schools that use Skooldash.
Contact us
For a question about this policy, or a request about your personal data:
- Or leave us a message with the form at the bottom of our home page.