This Privacy Policy explains how Up Tech Solutions Sdn Bhd (“we”, “us”, “Little Steps”) collects, uses, and protects personal data when you use the Little Steps mobile app and related services (the “Service”). We are committed to handling your information — and your child's — responsibly and in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Information we collect
- Account & contact information — your name, email and phone number, provided by your school or by you.
- Your child's information — name, class, attendance, grades, behaviour notes, leave records and related details entered by the school.
- Messages — the content of messages you exchange with your child's teachers.
- Payment information — invoices, payment records, and any bank-transfer receipt image you choose to upload. Card and online-banking details are entered directly with our payment processors and are never collected or stored by the app.
- Photos — class and event photos shared by the school that your child may appear in.
- Device & usage data — basic technical information (app version, error logs, a push-notification token) needed to operate and improve the Service.
2. How we use your information
- To provide the Service — show attendance, grades, news, photos, invoices and messages.
- To enable safe pick-up via your child's gate QR code.
- To process fee payments and record payment status.
- To deliver notifications you've asked for.
- To maintain security, prevent misuse, and fix problems.
We do not sell your personal data, and we do not use it for third-party advertising.
3. Children's privacy
The app is intended for use by parents and guardians, not by children. Information about a child is added by the school and made visible only to that child's linked parents/guardians and authorised school staff. We collect children's data solely to provide the Service to the school and the child's family.
4. How information is shared
We share information only as needed to run the Service:
- Your child's school — staff authorised by the school can access the relevant student and communication records.
- Payment processors — Billplz and ToyyibPay process online payments you initiate, governed by their own privacy policies.
- Service providers — hosting and push-notification providers (e.g. Apple Push Notification service and Google Firebase Cloud Messaging) that help us operate the app, bound by confidentiality obligations.
- Legal — where required by law or to protect rights, safety and security.
5. Data retention
We retain personal data for as long as your account is active or as needed to provide the Service to your school, and thereafter only as required to meet legal, accounting or reporting obligations. Your school may also set its own retention periods for student records.
6. Security
Data is transmitted over encrypted connections (HTTPS) and stored on secured servers. Account access requires authentication, and sensitive credentials on your device are kept in the platform's secure storage (iOS Keychain / Android Keystore). No method of transmission or storage is completely secure, but we use appropriate safeguards to protect your information.
7. Your rights
Subject to the PDPA, you may request to access, correct, or delete your personal data, or to limit how it is used. Because your child's school controls student records, some requests are best directed to the school; we will assist the school in fulfilling them. To make a request, contact us using the details below.
8. International transfers
Our servers and service providers may process data outside Malaysia. Where this happens, we take steps to ensure your information remains protected to a standard consistent with this policy and applicable law.
9. Changes to this policy
We may update this policy from time to time. We'll revise the “Last updated” date above and, where appropriate, notify you in the app. Continued use of the Service after changes take effect means you accept the updated policy.
10. Contact us
For any privacy questions or requests:
Up Tech Solutions Sdn Bhd
Email: privacy@littlesteps.com.my
Support: support@littlesteps.com.my
Website: littlesteps.com.my