Shifu Privacy Policy

Effective 2 November 2026

In short: we use what you do in Shifu to teach you, keep your account safe and make Shifu better. We don't sell your personal data and we don't show ads.

1. Who we are

Shifu is operated by Vivid Studies (Singapore UEN 53503045B) ("Shifu", "we", "us"). This policy explains how we collect, use, share and protect personal data when you use the Shifu website and app (the "Service"). By using the Service you agree to this policy. We may update it from time to time by posting the new version on this page; if you keep using the Service after a change, you accept the updated policy.

2. What we collect

  • Account information: your name, email address, the course and level you study, and your sign-in details.
  • What you create in Shifu: your questions, answers (typed and handwritten), photos you upload, notes, ratings, feedback and other content you choose to provide.
  • Information collected automatically: including but not limited to your IP address, device and browser information, device identifiers, the content of cookies and similar technologies, and how you interact with the Service (such as pages used, features used, performance and error reports).
  • Information you send us: anything you include when you contact us.

We don't ask for more than we need, and we don't collect what you type into password or verification-code fields.

3. How we use it

  • To run the Service: to create and maintain your account, save your work, mark your answers, answer your questions and provide a better learning environment as you use Shifu.
  • To personalise your learning: to choose practice that suits your level and show you how you're doing.
  • To keep the Service safe: to verify your identity, secure your account, and detect and prevent fraud, abuse, account sharing and unauthorised access. Authorised Shifu staff may review interactions for these purposes, to support you (for example with account recovery) and to improve Shifu.
  • To improve and develop the Service: to monitor and maintain our systems, find and fix problems, understand how the Service is used, and build new and better features.
  • To communicate with you: service messages such as sign-in codes, important changes and replies to your questions.

4. Who we share it with

We never sell or rent your personal data, and the Service shows no advertising. We share personal data only with:

  • Our service providers and data processors who help us operate the Service (for example hosting, storage, communications, analytics and processing that powers Shifu's features), only to perform services for us and under obligations of confidentiality and protection;
  • Our professional advisers, such as lawyers, accountants and auditors;
  • Government authorities, regulators or others where we reasonably believe it is necessary to comply with the law or a legal process, to protect our rights or property, to protect the safety of any person, or to address security or technical issues;
  • A successor organisation, if all or part of our business is reorganised, merged or sold; and
  • Anyone else with your permission.

Some of our service providers may process data outside Singapore. When they do, we take steps to make sure your data receives a standard of protection comparable to Singapore law.

5. Cookies and similar technologies

We use cookies and similar technologies (such as your browser's local storage) to keep you signed in, protect your account, remember your preferences, and understand how the Service is used so we can improve it. You can set your browser to refuse cookies, but parts of the Service, including signing in, may then not work.

6. How long we keep it

We keep personal data for as long as your account is active and as long as we need it for the purposes in this policy, or as required by law. When we no longer need it, we delete it or remove the details that identify you.

7. Your choices and rights

You can ask to access the personal data we hold about you, to correct it, or to withdraw your consent to our use of it, by emailing our Data Protection Officer (section 10). Withdrawing consent may mean we can no longer provide the Service to you.

Deleting your account: you can ask us to delete your account and personal data at any time by emailing hello@shifu.moe, and our Data Protection Officer will help you with the process. Deleting your account can't be undone. Copies held in our secure backups are removed over time, as those backups expire.

8. Security

We take reasonable measures to protect personal data from unauthorised access, use or disclosure, including encryption in transit and at rest and limiting access to the people who need it. No method of transmitting or storing information over the internet is completely secure, so we cannot guarantee absolute security.

9. Age

The Service is for students aged 13 and above. If you are under 13, please use Shifu only with your parent's or guardian's consent. If you believe a child under 13 has given us personal data without that consent, contact us and we will delete it.

10. Contact us

For questions, requests or complaints about this policy or your personal data, contact our Data Protection Officer: hello@shifu.moe. Please put the nature of your request in the subject line (for example "Access request").