Privacy Policy

1. Introduction

Welcome to Zippy (“we”, “us”, or “our”), a product by Blink Logic, a Singapore-registered company. We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and safeguard information when you use our platform, website, and related services at heyzippy.io.

2. Data We Collect

We may collect the following types of data:

• Account and profile information (name, email, organisation)
• Student work submissions for AI-powered grading and feedback
• Lesson content, rubrics, and resources created on the platform
• Progress tracking, analytics, and skill assessment data
• Platform interaction and usage patterns
• Payment and billing details for subscribers
• Organisation and tenant configuration data

3. How We Use Your Data

• Providing, maintaining, and improving our services
• Generating AI-powered grading, feedback, and analytics
• Tracking student progress and generating personalised recommendations
• Tenant provisioning, authentication, and access management
• Service communications and customer support
• Payment processing and fraud prevention
• Security monitoring and platform integrity

4. Data Processing and AI Models

We DO NOT use your content, student submissions, or any user data to develop, improve, or train generalised or non-personalised AI or ML models.

Content is processed exclusively for your individual requests (e.g., grading a composition, generating a rubric) without retention for model training purposes. All AI processing involves personalised, request-specific operations only.

5. Third-Party AI Providers

To power our AI features, we partner with the following third-party AI providers: OpenAI, Anthropic, Google (Gemini), Deepseek, Qwen, xAI, and LangDB.ai.

Content is transferred to these providers only for processing your specific requests (e.g., grading, lesson generation, feedback). Most providers store prompt data transiently or minimally. We do not permit these providers to use your data for their own model training.

6. Multi-Tenant Data Isolation

Zippy enforces organisation-scoped access controls so that tenant data remains logically isolated in application workflows, APIs, and analytics. Data belonging to one organisation is never accessible to another.

7. Data Retention and Deletion

User data is retained only as long as necessary for active service provision. You may request deletion of your data at any time.

Submitted content (e.g., student compositions) is processed transiently and is not permanently stored beyond what is necessary for providing progress tracking and analytics features.

8. Data Security

We apply administrative, technical, and procedural safeguards appropriate for cloud platform operations, including encryption in transit and at rest, access controls, authentication mechanisms, regular security assessments, and partnerships with dependable infrastructure providers.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request data portability
• Withdraw consent at any time

10. Children's Privacy

Zippy is designed for use by educators and education centres, including those serving young learners. Where student accounts are managed by educators or guardians, those adults maintain full authority over student data, with the ability to access, modify, and delete information at any time.

11. Contact

For privacy questions, data requests, or concerns, contact us at privacy@blinklogic.dev.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated “Last updated” date.