Privacy Policy

Last updated: August 2026

Governing law: Personal Data Protection Act 2012 (Singapore)

EmpowerED Health Pte. Ltd. (“EmpowerED”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal data of all users of the EmpowerED platform, with particular care for the privacy and safety of children and young people.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to your data. It applies to all users of the EmpowerED app and website, including students, parents, guardians, and school staff.

By using the EmpowerED platform, you confirm that you have read and understood this Privacy Policy. If you have any questions, please contact us at dpo@empoweredhealth.asia.

 

1.  WHO WE ARE

EmpowerED Health Pte. Ltd. is a company incorporated in Singapore (Company Registration No. [Insert]). We operate the EmpowerED digital health and wellbeing platform for young people aged 11 to 18, available via app and web.

EmpowerED acts as the Data Controller in respect of personal data collected through the platform, in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”).

 

2.  DATA PROTECTION OFFICER

EmpowerED has appointed a Data Protection Officer (“DPO”) who is responsible for overseeing our data protection practices and ensuring compliance with the PDPA.

For any data protection queries, data access or correction requests, or concerns about how we handle your personal data, please contact our DPO at: dpo@empoweredhealth.asia

We aim to respond to all data protection enquiries within 10 business days.

 

3.  WHAT DATA WE COLLECT

We collect only the personal data necessary to deliver the EmpowerED platform and services. This includes:

 

From students:

  • – Username and school year group
  • – Month and year of birth
  • – App activity data including content viewed, quiz responses, and engagement metrics
  • – Mood tracker entries and self-reported emotional states
  • – Help or support requests submitted via the platform

 

From parents and guardians:

  • – Name and email address (provided at registration)
  • – Consent records, including the date and scope of consent given
  • – Engagement with parent-facing content and dashboard

 

From school staff:

  • Name, role, and email address for safeguarding contact and platform administration purposes only

 

We do not collect unnecessary personal data, financial information, or government-issued identification numbers.

 

4.  SENSITIVE DATA

Mood tracker inputs and self-reported emotional states are treated as sensitive personal data. We apply enhanced security measures to this category of data, including strict access controls and purpose limitation. This data is used solely to deliver personalised platform content and is never shared with third parties or used for any commercial purpose.

 

5.  HOW WE COLLECT DATA

We collect personal data in the following ways:

  • – Directly from parents and guardians at the point of app registration and consent
  • – From students through their use of the platform, including content interaction, quizzes, and mood tracking
  • – From school staff when they register as designated safeguarding contacts

 

Students access the platform following registration and consent by their parent or guardian. Schools are not involved in the account creation or consent process.

 

6.  CONSENT

For students under the age of 18, we obtain consent from a parent or guardian directly through the app registration process before any personal data relating to the student is collected or processed.

Consent records are retained by EmpowerED, including the date consent was given, the identity of the consenting party, and the scope of consent.

Parents and guardians may withdraw consent at any time by contacting us at dpo@empoweredhealth.asia. Withdrawal of consent may limit or prevent access to the platform.

 

7.  HOW WE USE YOUR DATA

We use personal data only for the following purposes:

  • – To provide access to the EmpowerED platform and deliver educational content
  • – To personalise the learning experience based on engagement and preferences
  • – To enable mood tracking and provide relevant content suggestions
  • – To facilitate the Request Support feature, which allows students to contact their school’s designated safeguarding lead and/or parent or guardian
  • – To generate anonymised, aggregated wellbeing insights for schools
  • – To improve and develop the platform
  • – To offer EmpowerED’s own branded wellness and educational products through the platform, where applicable

 

We will never use your personal data for purposes beyond those listed above without obtaining appropriate consent.

 

8.  DATA SHARING

We do not sell personal data under any circumstances.

We may share personal data in the following limited circumstances:

 

With school safeguarding leads:

Where a student submits a support request via the platform, limited identifying information (such as username or registered email address) may be included in the notification sent to the school’s designated safeguarding contact.

 

With parents and guardians:

Parents and guardians have access to aggregated engagement data and may be notified of a support request submitted by their child.

 

With infrastructure providers:

We use third-party cloud infrastructure providers to host and operate the platform. These providers are contractually bound to maintain data protection standards equivalent to those required under the PDPA. They do not process student data for their own purposes.

 

As required by law:

We may disclose personal data where required to do so by law, regulation, court order, or to protect the safety of a user or third party.

 

9.  DATA STORAGE AND SECURITY

Personal data is stored on secure servers located in Singapore or via cloud infrastructure with documented and defined storage locations.

We implement the following security measures to protect your data:

  • – Encryption of data in transit and at rest
  • – Role-based access controls, limiting access to authorised EmpowerED personnel only
  • – Regular security monitoring and reviews
  • – Secure hosting infrastructure

 

In the event of a data breach, we will notify affected parties and, where required, the Personal Data Protection Commission, within 72 hours of becoming aware of the breach.

 

10.  DATA RETENTION

We retain personal data only for as long as necessary to deliver the platform services or as required by law.

Upon termination of a school’s subscription, active student data is deleted within 30 days and backup copies are securely deleted within 90 days. Written confirmation of deletion is provided upon request.

 

11.  CHILDREN’S PRIVACY

EmpowerED is designed for young people aged 11 to 18. We take the privacy and safety of children seriously and apply the following protections:

  • – Parental or guardian consent is obtained before any student data is collected
  • – Students are identified by username and year group only; we do not collect full names or photographs
  • – Sensitive wellbeing data is subject to enhanced security measures and is never shared with third parties
  • – No third-party advertising is displayed on the platform
  • – Commercial product offerings on the platform are provided by EmpowerED only, are age-appropriate, and are clearly identified as such

 

EmpowerED complies with Singapore’s Personal Data Protection Act 2012 in respect of all data collected through the platform. Schools and users in other jurisdictions should contact us to discuss applicable local requirements.

 

12.  YOUR RIGHTS

Under the PDPA, you have the right to:

  • – Request access to the personal data we hold about you
  • – Request correction of any inaccurate or incomplete personal data
  • – Withdraw consent for the processing of your personal data
  • – Request information about how your data has been used or disclosed in the past year

 

To exercise any of these rights, please contact our Data Protection Officer at dpo@empoweredhealth.asia. We will respond within 10 business days. We may need to verify your identity before processing your request.

 

13.  CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, the platform, or applicable law. Where changes are material, we will notify users through the platform or by email. The date of the most recent update is shown at the top of this page.

Continued use of the platform following notification of changes constitutes acceptance of the updated policy.

 

14.  CONTACT US

If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise your rights, please contact us:

 

Data Protection Officer

EmpowerED Health Pte. Ltd.

Email: dpo@empoweredhealth.asia

General enquiries: info@empoweredhealth.asia

 

We are committed to resolving any concerns about your privacy promptly and transparently.

Data Protection & Safeguarding Policy

Last updated: 27-08-25

 

EmpowerED is committed to safeguarding the privacy, safety, and dignity of all users, especially children and young people.


1. Legal Compliance – We comply with Singapore PDPA, UK & EU GDPR, and US COPPA.


2. Data Security Measures– End-to-end encryption, role-based access control, and regular security audits.


3. Safeguarding Features – Built-in help buttons link directly to designated safeguarding leads or parents. Requests are time-stamped and securely stored. In urgent cases, key details may be shared to protect the user.


4. Anonymisation & Reports – School reports are anonymised. Personal well-being data is shared only with consent or for safety.


5. Incident Response – Any breach is investigated immediately. If required, users and authorities will be informed within 72 hours.


6. Staff Training – All staff handling data receive annual training in child protection, data privacy, and secure record handling.