Privacy Policy
What Ganily collects, why, who else handles it, and how to have it removed. We collect as little about children as we can: a nickname and a level, never a full name, school or photo.
Who we are
Our website address is: https://ganily.com. Ganily is an online Singapore Math practice site for families in Singapore. Our office is at 48 Serangoon Road, #01-04, Little India Arcade, Singapore 217959.
What personal data we collect and why
Parent account
To create an account you give us your email address and a password. We use your email to sign you in, send password-reset links and order receipts, and reply when you contact us. Your password is stored only in hashed form; we cannot read it.
Child profiles
For each child you add on the Parent Dashboard we store a nickname and a level, linked to your parent account. We do not ask for, and you should not enter, your child’s full name, school or photo.
Practice results
When your child works through Learn, Practice, Bar Models and Tests while signed in, we store their answers, scores and progress skill by skill. We use this to show progress on the Parent Dashboard, to produce the per-skill report after each test, and to point your child to the lessons to revise.
Orders and payment
When you buy a membership, our shop (WooCommerce) records the order: your name, email, billing details, what you bought and which child each membership is assigned to. Payment itself is taken on HitPay’s secure checkout page. Your card or PayNow details go to HitPay and are never stored on Ganily.
Contact form
When you use the contact form we receive your name, email, phone number (if you give one), subject and message, and use them only to reply to you.
Spam and bot protection
Our forms, such as the contact form, are protected by Cloudflare Turnstile, which checks that a real person is using the form. To do this Cloudflare processes technical data such as your IP address and browser characteristics.
Analytics
We use Google Analytics to understand how the site is used in aggregate, for example which pages are visited and from which kinds of device, so we can improve it. Google Analytics uses cookies and collects data such as pages viewed, approximate location and device type.
Cookies
When you sign in, we set cookies to keep you signed in and remember your screen choices. Login cookies last for two days, or two weeks if you select “Remember Me”. If you sign out, the login cookies are removed. A temporary cookie on the login page checks whether your browser accepts cookies; it holds no personal data.
The shop sets cookies to keep track of your cart and checkout session. Google Analytics sets cookies to tell visits apart. Cloudflare Turnstile may set a cookie needed for its check.
You can block or delete cookies in your browser settings, but signing in and checkout will not work without them.
Who we share your data with
We do not sell your data. We share it only with the services that run Ganily for us:
- HitPay — processes payments.
- Cloudflare — Turnstile bot protection.
- Google — Google Analytics.
- Our web host — stores the website and its database.
If you request a password reset, your IP address is included in the reset email. We may also disclose data where the law requires it.
How long we keep your data
We keep your parent account, child profiles and practice results for as long as your account exists.
Deleting a child profile from the Parent Dashboard deletes that child’s progress with it. Order records are kept for as long as we need them for accounting and legal purposes, even if the account is deleted. Contact-form messages are kept only as long as needed to deal with your request.
What rights you have over your data
You can see and edit your account details on My Account, and add, edit or delete child profiles on the Parent Dashboard.
You can also ask us, through the contact form, for an exported file of the personal data we hold about you, to correct it, or to erase your account and all its data. This does not include data we must keep for administrative, legal or security purposes, such as order records.
Where your data is sent
Payment details go to HitPay. Bot-protection checks go to Cloudflare. Analytics data goes to Google. These providers may process data outside Singapore under their own privacy policies.
Contact us
For any question about this policy or your data, use our contact form.