Privacy Policy

This policy explains what Degreemate (“we”, “us”) collects about you when you use degreemate.my, why we collect it, and what choices you have. Degreemate helps Malaysian students and parents compare post-SPM pathways, universities and careers.

Account details. If you sign up, we collect your email address and, if you use email/password sign-up, a password (stored as a salted hash by our authentication provider, Supabase; we never see or store it in plain text). If you sign up with Google, we receive your name, email and profile picture from Google, and nothing else.

Profile and plan data. Your SPM results, onboarding answers, saved pathways, shortlisted programmes, saved careers and any other inputs you give the recommendation engine. This is what lets the engine and your plan work. It is used to generate your recommendations and is not sold or rented to any third party, including universities.

Survey responses. If you take one of our research surveys, your answers are used only for product research and are not linked to your Degreemate account.

Contact details you send us. If you email or WhatsApp us, we keep that correspondence to respond to you and improve the product.

Usage analytics. We record anonymous visit and page-view events (which pages are viewed, in what order) to understand how the site is used and to improve it. These events are not tied to your name or email unless you are signed in, in which case they help us understand product usage patterns, not to build an advertising profile.

Cookies and local storage.We use your browser’s local storage to keep your plan and language preference on your device, and a small cookie to remember your chosen language (English or Bahasa Malaysia). We do not use third-party advertising or tracking cookies.

Subscription payments are processed by Curlec, a licensed Malaysian payment gateway. Your card or bank details are entered directly into Curlec’s checkout and never pass through or get stored on our servers; we only receive confirmation that a payment succeeded, an order/subscription reference, and the plan you paid for.

We do not sell your data. We share the minimum necessary with the service providers that run Degreemate: Supabase (database, authentication and file storage), Curlec (payment processing), and our hosting provider. Each is bound to use your data only to provide their service to us. We do not share your profile, plan or survey answers with universities, colleges or employers; that independence is the point of the product (see How we work).

We may disclose information if required by Malaysian law or a valid legal request.

We keep account and plan data for as long as your account is active, and for a reasonable period after deletion in case you return or as required for legal and accounting purposes. Survey responses are kept for the duration of the research programme they support.

Under Malaysia’s Personal Data Protection Act 2010, you can ask us to access, correct or delete the personal data we hold about you, or withdraw consent for us to process it. You can also close your account and remove your data at any time from your account settings, or by emailing us at degreemate.work@gmail.com.

Degreemate is built for post-SPM students, most of whom are minors under Malaysian law. We collect only what is needed to produce a pathway recommendation, and a parent or guardian may contact us to review or delete a minor’s data at any time.

If we make a material change to this policy, we will update the date above and, where appropriate, let you know in the product.

Questions about this policy or your data: degreemate.work@gmail.com.