How Koala Tree handles personal information across the app, the service and this website.
Koala Tree ("the Service") is a preschool management service provided by Koala Tree Pte. Ltd., a company registered in Singapore ("we", "us"). The Service includes the Koala Tree mobile app used by preschool staff and parents, the web service at my.koalatree.sg, and this website at koalatree.sg. The app is free to download; preschools arrange their subscriptions with us separately.
Our Data Protection Officer can be reached at dpo@koalatree.sg. For privacy questions or requests, write there or to support@koalatree.sg; both reach the same team.
Koala Tree is used by preschools to run their day. Your preschool decides what information is recorded in the Service for its educational and administrative purposes, and which staff and family members may access it. We host, process, transmit and support those records on the school's behalf and under its instructions. For that information, we generally act as a data intermediary under Singapore's Personal Data Protection Act (PDPA).
We also handle some information for our own purposes: administering school subscriptions and billing, responding to enquiries and support requests, and keeping the Service secure. We are responsible for those uses ourselves.
Schools are responsible for telling families what they record and for obtaining consent or relying on another legal basis where one is required. That does not remove our own responsibilities: we remain accountable under the PDPA for the personal data we handle.
About children. These records are created in the Service by the preschool, and some can also be contributed by parents through the app:
About parents and guardians: your name and the contact details your school registered for you (such as email and phone number), your sign-in credentials, the messages you exchange with the school through the app, your notification preferences, photos you submit (for example a suggested profile photo for your child, which the school reviews), and payment proof images you upload for fee invoices.
About preschool staff: name, email, phone number, role, sign-in credentials, and the records and messages they create in the Service.
Collected automatically: when the app or a browser connects to our servers, we keep standard server logs such as IP address, time of access and basic device information. These are operational and security logs, not analytics, and they are kept for 30 days.
For your preschool, under its instructions:
For our own purposes:
We do not sell personal information, and we do not show advertising in the Service.
Access in the Service follows the school's setup:
One honest note: anything shown on a screen can be kept by the person viewing it, for example with a screenshot. Schools should share updates with that in mind.
Uploading content to Koala Tree does not transfer its ownership to us. Copyright in photos, documents and other material stays with the school, the person who uploaded it, or whoever else holds it. We handle content in order to provide the Service: hosting, storing, backing up, resizing for display, transmitting and showing it to the people it is meant for.
Routine use of the Service does not, by itself, authorise anyone to use children's photos in public marketing. That needs separate, specific permission from the school and the families involved. Schools and uploaders are responsible for having the necessary rights and authority for the material they submit.
The app does not read your photo library in the background, does not track your location, and does not send push notifications. Notifications from the Service are delivered by email.
We keep the list of providers short:
Providers process personal information only as needed to provide their service to us. We may disclose information where the law requires it. We do not sell personal information to anyone.
Live data, databases and our routine automated backups are located in Singapore. The exceptions are email delivery through SendGrid, which may involve processing outside Singapore, and any storage provider your school has chosen to connect. Where personal data is transferred out of Singapore in these ways, we take reasonable steps, as the PDPA requires, to ensure it continues to receive a comparable standard of protection.
You can ask to access or correct your personal data. For records your preschool maintains, such as your child's profile, attendance, photos and notes, start with your school, since they manage that information in the Service. For anything else, or if you would rather deal with us directly, contact us at support@koalatree.sg; we will coordinate school-managed requests with your school.
You can also withdraw consent you have given, by writing to your school or to us. We will explain what the withdrawal means in practice, for example which features stop working for your family, stop the processing that relied on your consent where the PDPA requires it, and coordinate with your school for records it manages. Some processing or retention may continue where the law permits or requires it, or where your school must keep the records concerned.
Singapore's PDPA gives individuals rights to access and correct their personal data. Use the contacts above to make a request.
To ask for your account or personal data to be deleted, email support@koalatree.sg, or ask through your school. To protect your information, we verify requests against the contact details registered for the account and, for records managed by a preschool, with the school's designated point of contact. We do not ask you for copies of identification documents when your registered contact details are enough to verify you. We aim to complete verified requests within 30 days.
It helps to know what each step means:
Some information may be kept where the law requires it, such as accounting records, or where your school must retain it, and we will tell you when that is the case.
Connections between the app, the website and our servers are encrypted in transit (HTTPS). Passwords are stored hashed, never in plain text. Access is controlled by roles, so staff see only the children in their care and families see only what is meant for them. Photos and files are served through access-controlled, time-limited links rather than public URLs. No method of storage or transmission is completely secure, but we work to protect your information and to fix problems quickly.
If a data incident affects personal data, we will assess it and notify the affected schools and individuals, and the Personal Data Protection Commission, where the PDPA requires it. If you believe you have found a security issue, please write to support@koalatree.sg.
The Koala Tree app is used by adults: preschool staff and parents or guardians. We do not knowingly collect information directly from children. Information about children is recorded by their preschool and, through supported features such as care updates and suggested profile photos, by their own parents or guardians. Schools are responsible for telling families what they record and for obtaining any consent they need.
This website, koalatree.sg, does not use analytics or advertising and does not set cookies. Its pages load fonts from Google Fonts, so Google receives your IP address when they load.
The Service uses no analytics, crash reporting, advertising or tracking technologies. Signing in on the web at my.koalatree.sg sets one essential session cookie to keep you signed in. The mobile app does not use cookies; it signs you in with a secure token stored on your device.
If we make meaningful changes, we will update this page and the effective date at the top, and give affected schools and users reasonable notice. Where a change would need new permission, we will ask for it; continuing to use the app does not by itself grant it.
Koala Tree Pte. Ltd.
Data Protection Officer: dpo@koalatree.sg
Support: support@koalatree.sg