Privacy policy

Last updated: 3 November 2026

Zippy is made by Blink Works Private Limited, a company registered in Singapore. This page covers the Zippy apps and heyzippy.io. It says what we collect, why, who receives it, how long we keep it and what you can do about it.

1. How Zippy uses AI

Your AI teacher reads your work to give you feedback and answer your questions. Your teacher has the final say, and can change any mark or comment.

What we share if you are a student: your answers, photos of your work, voice recordings, your messages to Zippy, and your name in class threads.

What we share if you are a teacher: what you type, your class details, your photos and files, and your students’ work, which can include their names.

Requests also carry ID numbers for the student, activity and school, so that we can trace a result if something goes wrong.

To provide AI feedback and assistance, we send the content you submit, such as messages, documents and images, to external AI providers for processing. View AI providers and data shared

2. We ask first

Before you start an activity or use an AI feature, the phone app shows one screen saying that your content goes to external AI providers, with a link to who they are and what they receive. Nothing goes to AI services from the phone app until you tap Agree and continue. If you tap Not now, those features stay closed and you can use the rest of the app. To change your mind, withdraw in Settings and the screen comes back.

3. What we collect and why

Account details: name, email and school or organisation. We use them to sign you in and put you in the right class.
Answers and marks: what you write or choose in activities, your scores, feedback and skills. We use them to mark your work and show progress to you and your teacher.
Photos of work: pages you or your teacher photograph or upload. We use them to read the work and mark it.
Voice recordings: clips recorded for speaking activities. We use them to turn speech into text and mark it.
Messages: what you say to Ask Zippy and in class threads with your teacher and AI teacher. We use them to answer you.
Teaching material: lessons, rubrics, classes and files that teachers add. We use them to create lessons and mark work.
Device details: your push token, phone type and app version. We use them to send the notifications you allow.
App and website use: which screens you open and what you do on them. We use this to see what works and fix what does not.
Session recordings: on the Zippy web app, recordings of the screen and your clicks during a session. Our team watches them to find problems. The phone apps do not record sessions.
Crash reports: what went wrong and an ID number. We use them to fix errors.
Payment details: what you bought and when. Stripe handles card details, and we do not store card numbers.

4. Who receives your data

AI services:

What	Service
Written answers, messages, documents, images, text from voice recordings	Distri, powered by external AI providers
Voice recordings	Microsoft Azure AI Speech
Text read aloud	Distri, powered by external AI providers, Alibaba Cloud Qwen TTS

Distri is our AI service, and belongs to Blink Works, the company behind Zippy. It keeps Ask Zippy chat history and a record of each request. Microsoft Azure also runs our servers. The app shows this table too, on our AI disclosure page.

Other companies:

PostHog (United States) receives how the apps are used, your name and email, and web app session recordings. On the phone apps, child accounts send an ID number instead of a name and email.
Google receives app use and an ID number through Firebase Analytics, and website use through Google Analytics. We keep copies of session recordings in a private Google Drive folder. If a teacher connects Google Drive, Zippy reads the files they pick.
Sentry receives crash and error reports. Reports from our servers can include details of the request, such as an IP address.
Expo, Apple and Google deliver notifications, so they receive your push token and the notification text.
Mailgun sends our email, so it receives your email address and the message, such as a sign-in code.
Stripe takes payments.
Cloudflare delivers the web app, this website, and stored photos and recordings.
Slack receives answers to our enquiry forms, for our team to read.

Some of these companies work outside Singapore, so your data can leave Singapore.

We confirm that each company listed here gives your data the same or equal protection as this policy.

5. How long we keep it

We store your answers, photos, voice recordings, messages and marks so that you and your teacher can look back at them and follow your progress. They have no automatic end date. They stay until a teacher deletes the submission or we delete them at your request.

PostHog deletes session recordings after 30 days. The copies in our Google Drive folder stay until we delete them.

6. Your choices

To delete your account, go to Settings in the phone app and tap Delete account. This removes your account details and replaces your name with “Name removed”. Work you submitted stays in your teacher’s class.

Email [email protected] to ask for a copy of your data, to correct it, to delete it, or to withdraw your agreement to sharing it with AI services.

You can turn notifications off in the app or in your phone’s settings.

7. Keeping data safe

The apps talk to our servers over encrypted connections. Teachers see only the classes and schools they belong to.

8. Children

Children use Zippy, including primary school pupils. Their teacher can see their work and marks. If you are a parent or guardian and want to see or delete your child’s data, email [email protected].

9. Contact and changes

For privacy questions, email [email protected]. When this policy changes, we post it here with a new date.