POPIA & Data Protection

1. What Personal Information We Collect

• Account data: full name, email address, role (teacher, student, parent, administrator), and organisation assignment.
• Learning data: lesson progress, assessment results, mastery records, revision pack interactions, and diagnostic outcomes.
• Organisation data: school or district name, grade, subject, and class group assignments.
• Usage data: anonymised analytics events such as logins, page views, and feature usage, used to improve the Platform.
• Communication data: messages sent via the contact form or support channels.

2. How We Use Your Information

• To deliver curriculum content, assessments, and personalised mastery tracking.
• To generate progress reports for teachers, students, and parents.
• To maintain and improve the quality and reliability of the Platform.
• To communicate important account, service, and security updates.
• To comply with legal obligations under South African education law.

3. Legal Basis for Processing

We process personal information on the following lawful bases: the performance of a contract (delivering the educational service you enrolled for), compliance with a legal obligation (education record-keeping), your consent (where you have agreed to specific data uses), and our legitimate interests (improving the Platform and preventing misuse), always balanced against your rights.

4. Data Sharing

We do not sell personal data. Learning data is visible only to the student, their assigned teachers, and authorised administrators within the same organisation. We share data with third-party service providers only where necessary to operate the Platform (hosting, email delivery, analytics), under written agreements that require them to protect personal information to the same standard we hold ourselves to.

5. Security Measures

We implement technical and organisational measures to protect personal information, including encrypted data transmission, access controls, role-based permissions, and regular security reviews. Despite these measures, no system can be guaranteed completely secure. We will notify affected users and the Information Regulator of any breach as required by POPIA.

6. Data Retention

We retain personal information for the duration of your active enrolment or licence. After termination, learning data may be retained by your school for academic-record purposes as required by education law. Account data is deleted upon request via our Data Deletion page, subject to legal retention obligations.

7. Your Rights as a Data Subject

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete information.
• Deletion: request deletion of your personal data, subject to legal retention obligations.
• Objection: object to the processing of your data for direct marketing.
• Withdrawal of consent: withdraw consent for processing that relied on it.
• Complaint: lodge a complaint with the Information Regulator (South Africa).

To exercise any of these rights, contact us via the Contact page.

8. Children's Personal Information

The Platform is used by students under 18. We collect only the minimum data necessary to deliver educational services and rely on school and parental consent for student enrolment. No direct marketing communications are sent to student accounts. For details, see our Privacy Policy, section on children's privacy.

9. Direct Marketing

We may send service-related communications (account updates, product announcements) to registered users. We do not send unsolicited marketing emails. You may opt out of any non-essential communications at any time by following the unsubscribe link in the email or contacting us.

10. Information Officer

11. Complaints

If you believe we have not handled your personal information in accordance with POPIA, you may complain to the Information Regulator of South Africa at inforegulator.org.za.