This article explains how Lexa supports compliance with Singapore's Personal Data Protection Act (PDPA) and clarifies the responsibilities of teachers, schools, and Lexa.
Understanding Roles Under PDPA
Under PDPA, different parties have different responsibilities:
| Role | Who | Responsibility |
|---|---|---|
| Data Controller | Teacher / School / Tuition Centre | Decides what data to collect and why; obtains consent |
| Data Intermediary | Lexa | Processes data on behalf of the controller; implements security measures |
In plain terms: Teachers (or their schools) are responsible for obtaining consent from students/parents. Lexa provides the secure platform to process that data.
What Data Does Lexa Collect?
For Teachers
- Email address and name (for account creation)
- Payment information (processed by Stripe, not stored by Lexa)
- Uploaded worksheets and teaching materials
For Students
- Name (as entered by teacher or student)
- Email address
- Class enrollment information
- Submitted work and Lexa-generated feedback
Consent Requirements
For Schools
If you are using Lexa as part of a school:
- Your school's existing consent framework for educational technology likely covers Lexa
- Check with your school's Data Protection Officer (DPO) if unsure
For Tutors and Tuition Centres
If you are an independent tutor or tuition centre:
- You are responsible for informing parents that you use Lexa
- Include Lexa in your standard consent forms for educational tools
- Parents should understand that student work will be processed by AI for feedback
What to Tell Parents
A simple disclosure might say:
"We use Lexa, an AI-powered learning platform, to manage worksheets and provide feedback on student work. Student names and submitted work are stored securely and processed by AI to generate educational feedback. Data is not shared with other students or used for marketing."
Purpose Limitation
Lexa only uses personal data for educational purposes:
- ✅ Providing worksheet feedback
- ✅ Tracking student progress
- ✅ Enabling teacher-student communication
- ✅ Generating study materials from teacher content
- ❌ Marketing to students
- ❌ Selling data to third parties
- ❌ Building advertising profiles
Access and Correction Rights
Under PDPA, individuals have the right to access and correct their personal data.
For Teachers
- You can view and edit your profile information at any time
- You can delete your account and all associated data
For Students (via Teachers)
- Students can view their own work and feedback
- Parents should contact the teacher to request access to their child's data
For Parents
If a parent wants to:
- See their child's data: Contact the teacher directly
- Delete their child's data: Request the teacher to remove the student from the class
Data Retention
- Active accounts: Data retained while account is active
- Deleted students: Removed from class immediately; work deleted within 30 days
- Deleted teacher accounts: All data (classes, worksheets, students) permanently deleted
Contact for PDPA Inquiries
For data protection inquiries related to PDPA compliance:
- Teachers/Schools: Contact us at contact@lexa.sg
- Parents: Please contact your child's teacher first, as they are the data controller