What we hold, and why.

01

Who we are

“Invictus” is the team building the Invictus Knowledge Center and the dashboard. For any privacy question, or to exercise a right below, write to hello@invictus.sg.

02

What we collect

Your sign-in email and password (the password is held by our authentication provider and never in readable form by us). The preferences you give us: goals, age band, interests, reading level, format, and any channel you connect. Health-related inputs where you provide them, such as test answers or results, treated as sensitive and kept only as far as needed to show you your own picture. Basic, aggregated usage, such as which topics are asked about, to improve the service. If you join the testing kit waitlist, we store your email, chosen language, consent and signup timestamps separately from your quiz results and community preferences. This is an availability request, not an order.

03

What we do not do

Invictus is educational and non-diagnostic. It does not diagnose, treat or prescribe, makes no medicinal claims, and is not a substitute for a qualified clinician. We do not sell personal data. Supplements, when offered, are never bundled into a plan; they are bought separately, and nothing here is a prescription.

04

How we use it

To create and secure your account, to personalise what you see, to run the features you ask for, and to improve the service. We rely on your consent, and you can withdraw it. Testing kit waitlist details are used for availability updates you explicitly request. Contact hello@invictus.sg to withdraw that consent or ask us to remove your waitlist details.

The weekly league is the one place other members see anything of yours. Members are in it unless they leave: others in your age group see your first name and the initial of your last name, your XP for the week and your day streak, and nothing else — never your email, your answers or any health data. You can leave the league at any time in Settings › Privacy, and you disappear from it for everyone else straight away.

05

Where it is stored

With our infrastructure provider, Supabase, over encrypted connections. Access is restricted and we keep as little as the service needs.

06

Your rights under the PDPA

Access: ask what we hold about you. Correction: ask us to fix anything inaccurate; much of it you can edit yourself in your profile. Withdrawal: turn off optional processing, or delete your account, at any time. For any request or complaint, the address above.

07

Cookies and local storage

Your browser’s local storage holds essentials: your session, your language and your reading preferences. They stay on your device and are not advertising trackers.

08

Children, and changes

Invictus is for adults; we do not knowingly collect data from children. When this policy changes, the effective date at the top changes with it.