Homeschool Events

Privacy policy

Last updated 5 November 2026

SG Homeschool Events (events.sghomeschoolcommunity.com, also events.joshuawwy.com) lets Singapore homeschool families book community events. Joshua Wong runs the site for the homeschool community. Each event is run by its organiser, a parent or group in the community, who decides what the booking form asks. The site keeps those details so the organiser can run the event. The same site runs Homeschool Concession Renewals (renewals.sghomeschoolcommunity.com), which renews homeschooled children's SimplyGo concession each November; its own section is below. This policy follows Singapore's Personal Data Protection Act 2012 (PDPA).

What we collect

  • When you book: your name, email and phone number; the names of the children and adults attending; your answers to the organiser's questions (which can include allergies or other health details); and the payment screenshot you upload.
  • When you create an event: your email, the phone number families pay by PayNow, the event's details, and its admin PIN (stored only in a scrambled form that can't be read back).
  • If you tick "tell me about new events": your name and email for the new-event mailing list.
  • If you connect an AI app (see below): your email, the app's name, and the events you unlocked with a PIN. Sign-in codes and tokens are stored only in scrambled form.
  • To stop people guessing PINs and codes: your network (IP) address, with each attempt.

We use no analytics, no advertising and no tracking cookies. The one cookie is set while you sign in to connect an AI app, and lasts until that sign-in ends. An organiser's admin page keeps its sign-in in that browser for 24 hours.

How we use it

  • To take your booking, keep the waitlist, and email you confirmations, payment reminders, waitlist offers and the organiser's tickets.
  • To let the organiser run the event: who's coming, who has paid, and the answers they asked for.
  • To email you about new events, only if you ticked the box. Each of those emails has a one-click unsubscribe link.

We never sell your details, never use them for advertising, and never use them to train AI.

Who sees it

  • You, through the private link in your booking email.
  • The event's organiser, and any co-organiser they give the event's PIN to, see every booking for their event: names, contact details, attendees, payment and answers. Other families see only how many places are left.
  • The companies that run the site for us: Cloudflare (hosting; the database is in the Asia-Pacific region, and payment screenshots sit in private storage) and Resend (sending email, in the United States). They handle your details only to provide their service to us.
  • Anyone the law requires us to tell, when it does.

Because Cloudflare and Resend work across borders, your details can be handled outside Singapore. Both are bound by contract to protect them to a standard comparable to the PDPA.

Connecting an AI app

Parents and organisers can connect their own AI app (Claude, ChatGPT and others) to the site; here's how. Nothing is shared with any AI app unless you connect one yourself, signing in with a code we email you.

  • A parent's AI app sees only the bookings made with that parent's email, never another family's.
  • An organiser's AI app sees only the events they organise or unlocked with the event's PIN: the same booking details the admin page shows.
  • It can't book, cancel or pay for anyone. The only things it can change are marking a booking paid and sending the organiser's tickets, when the organiser asks.

What an AI app reads is handled by that app's maker under their own privacy terms. So if an organiser connects one, their event's booking details pass through it, much as if they pasted the sign-up list into it. Most apps let you turn off training on your chats in their privacy settings. Remove the connection in your AI app's settings at any time; it also ends by itself 30 days after its last use.

Homeschool Concession Renewals

When you sign a child up at renewals.sghomeschoolcommunity.com, we keep exactly what SimplyGo's “Appendix G” form asks for, and use it only to send that form for you:

  • What we keep: your child's name, birth certificate number, date of birth and card number (CAN ID); the year the concession ends; your name, phone and email; and, each November, the signature you draw and the date you confirm.
  • Birth certificate numbers are treated like NRIC numbers under the PDPC's advisory guidelines: collected only because SimplyGo's form needs them, stored encrypted, shown back to you only masked (T****189Z), and used for nothing else.
  • Who sees it: SimplyGo's concession team, in the one email a year we send them for each child you confirm (with you on copy), and Cloudflare, which hosts the site and sends those emails. Resend is not used for renewals.
  • Nothing is sent without you: each November you confirm your child is still homeschooled and sign again. Without that, nothing goes to SimplyGo.
  • When it's deleted: your signature as soon as the year's email has gone; your child's details right after their last renewal (the November they turn 11), when a November passes without your confirmation (after 15 December), or whenever you use the delete link that every renewals email carries.

When it's deleted

  • Bookings, attendees, answers, payment screenshots and ticket links: with the event, 6 months after its bookings close.
  • Copies of emails we had to resend: 30 days after they were sent.
  • AI app connections: 30 days after their last use. Sign-in codes expire in 10 minutes.
  • Records of PIN attempts and organiser sign-ins: after 24 hours.
  • The new-event mailing list: until you unsubscribe.
  • Homeschool Concession Renewals: as set out above.

Keeping it safe

Everything travels encrypted (HTTPS). Payment screenshots are never public: each link we make to one works for an hour. PINs, sign-in codes and tokens are stored only in scrambled form, and repeated wrong guesses are blocked. No system is perfectly secure; if a breach puts your details at risk, we will tell you and, where the PDPA requires it, the Personal Data Protection Commission.

Children

Children's names and details come from their parent or guardian, who books for them. The site isn't meant for children to use themselves.

Your choices

  • See or correct your details: open the link in your booking email, or ask the organiser.
  • Stop new-event emails: use the unsubscribe link in any of them.
  • Change or remove a child signed up for renewals: use the links in any renewals email, or ask for your link on renewals.sghomeschoolcommunity.com.
  • Ask what we hold, or ask us to delete it: email privacy@sghomeschoolcommunity.com. We reply within 30 days. Deleting a booking before the event cancels it.
  • Withdraw your consent: email privacy@sghomeschoolcommunity.com. We'll explain what that means for any booking you have.

Changes and contact

If this policy changes, we'll update the date at the top. Questions or requests about your details go to Joshua Wong, who looks after data protection for the site, at privacy@sghomeschoolcommunity.com.