Homeschool Events

Privacy policy

Last updated 4 November 2026

SG Homeschool Events (events.sghomeschoolcommunity.com, also events.joshuawwy.com) lets Singapore homeschool families book community events. Joshua Wong runs the site for the homeschool community. Each event is run by its organiser, a parent or group in the community, who decides what the booking form asks. The site keeps those details so the organiser can run the event. This policy follows Singapore's Personal Data Protection Act 2012 (PDPA).

What we collect

  • When you book: your name, email and phone number; the names of the children and adults attending; your answers to the organiser's questions (which can include allergies or other health details); and the payment screenshot you upload.
  • When you create an event: your email, the phone number families pay by PayNow, the event's details, and its admin PIN (stored only in a scrambled form that can't be read back).
  • If you tick "tell me about new events": your name and email for the new-event mailing list.
  • If you connect an AI app (see below): your email, the app's name, and the events you unlocked with a PIN. Sign-in codes and tokens are stored only in scrambled form.
  • To stop people guessing PINs and codes: your network (IP) address, with each attempt.

We use no analytics, no advertising and no tracking cookies. The one cookie is set while you sign in to connect an AI app, and lasts until that sign-in ends. An organiser's admin page keeps its sign-in in that browser for 24 hours.

How we use it

  • To take your booking, keep the waitlist, and email you confirmations, payment reminders, waitlist offers and the organiser's tickets.
  • To let the organiser run the event: who's coming, who has paid, and the answers they asked for.
  • To email you about new events, only if you ticked the box. Each of those emails has a one-click unsubscribe link.

We never sell your details, never use them for advertising, and never use them to train AI.

Who sees it

  • You, through the private link in your booking email.
  • The event's organiser, and any co-organiser they give the event's PIN to, see every booking for their event: names, contact details, attendees, payment and answers. Other families see only how many places are left.
  • The companies that run the site for us: Cloudflare (hosting; the database is in the Asia-Pacific region, and payment screenshots sit in private storage) and Resend (sending email, in the United States). They handle your details only to provide their service to us.
  • Anyone the law requires us to tell, when it does.

Because Cloudflare and Resend work across borders, your details can be handled outside Singapore. Both are bound by contract to protect them to a standard comparable to the PDPA.

Connecting an AI app

Parents and organisers can connect their own AI app (Claude, ChatGPT and others) to the site; here's how. Nothing is shared with any AI app unless you connect one yourself, signing in with a code we email you.

  • A parent's AI app sees only the bookings made with that parent's email, never another family's.
  • An organiser's AI app sees only the events they organise or unlocked with the event's PIN: the same booking details the admin page shows.
  • It can't book, cancel or pay for anyone. The only things it can change are marking a booking paid and sending the organiser's tickets, when the organiser asks.

What an AI app reads is handled by that app's maker under their own privacy terms. So if an organiser connects one, their event's booking details pass through it, much as if they pasted the sign-up list into it. Most apps let you turn off training on your chats in their privacy settings. Remove the connection in your AI app's settings at any time; it also ends by itself 30 days after its last use.

When it's deleted

  • Bookings, attendees, answers, payment screenshots and ticket links: with the event, 6 months after its bookings close.
  • Copies of emails we had to resend: 30 days after they were sent.
  • AI app connections: 30 days after their last use. Sign-in codes expire in 10 minutes.
  • Records of PIN attempts and organiser sign-ins: after 24 hours.
  • The new-event mailing list: until you unsubscribe.

Keeping it safe

Everything travels encrypted (HTTPS). Payment screenshots are never public: each link we make to one works for an hour. PINs, sign-in codes and tokens are stored only in scrambled form, and repeated wrong guesses are blocked. No system is perfectly secure; if a breach puts your details at risk, we will tell you and, where the PDPA requires it, the Personal Data Protection Commission.

Children

Children's names and details come from their parent or guardian, who books for them. The site isn't meant for children to use themselves.

Your choices

  • See or correct your details: open the link in your booking email, or ask the organiser.
  • Stop new-event emails: use the unsubscribe link in any of them.
  • Ask what we hold, or ask us to delete it: email privacy@sghomeschoolcommunity.com. We reply within 30 days. Deleting a booking before the event cancels it.
  • Withdraw your consent: email privacy@sghomeschoolcommunity.com. We'll explain what that means for any booking you have.

Changes and contact

If this policy changes, we'll update the date at the top. Questions or requests about your details go to Joshua Wong, who looks after data protection for the site, at privacy@sghomeschoolcommunity.com.