Privacy policy
Draft. This policy has not yet been reviewed by a lawyer and will be replaced by the reviewed version before SkoolZA opens.
Who is responsible
{{LEGAL_NAME}} ({{REGISTRATION}}), {{ADDRESS}}, is the responsible party for personal information processed through SkoolZA under the Protection of Personal Information Act, 2013 (POPIA). Our Information Officer is {{INFO_OFFICER}}, reachable at {{EMAIL}}.
Learners under 18
We only create an account for a learner under 18 with the prior consent of a parent or legal guardian, who creates the account. The parent or guardian can ask to see, correct or delete the learner's information, or withdraw consent, at any time.
What we collect
- Account details: name, email address and how you sign in. For a learner under 18, also the parent or guardian's name and email address.
- Learning records: your answers, progress and marks, photographs of your working, files you upload, questions you ask the Mentor, and, if you use the spoken guide, recordings of what you say.
- Payment records: your email address, Paystack customer and subscription references, and whether payments succeeded. Card details are entered on Paystack's page and never reach us.
- Technical records: IP address, browser and device type, and activity logs we use to keep the service secure and working.
- Messages: anything you send us by email, including a request to be told when SkoolZA opens.
Why we use it
- To provide the service: build lessons, mark answers, give feedback and keep your progress in step across devices.
- To take payment and manage your subscription.
- To keep accounts and systems secure and to fix faults.
- To reply to you, and to tell you when SkoolZA opens if you asked us to.
We do not sell personal information, show advertising, or use learners' information for marketing.
Who processes it for us
These providers process information on our behalf, only to deliver the service. Some are outside South Africa, so your information is transferred across borders as POPIA section 72 allows.
- Hetzner (Finland): the servers that store SkoolZA's data.
- Cloudflare: delivers this website and protects the service. Sees IP addresses and requests.
- WorkOS (United States): sign-in, including Google sign-in if you choose it. Receives your name and email address.
- OpenAI (United States): writes lessons and feedback, answers Mentor questions and reviews photographed working. Receives the learning content needed for each task, such as an answer or a photo, but not your payment details.
- Google (United States): converts speech to text and text to speech when you use the spoken guide.
- Paystack: takes card payments and runs the monthly subscription. Receives your email address and payment details.
How long we keep it
- Account and learning records: while your account is open. If you ask us to delete your account, we delete them within {{DELETION_DAYS}} days.
- Payment records: as long as tax law requires, currently five years, even after your account is deleted.
- Security logs: no longer than {{LOG_DAYS}} days.
Cookies
This website sets no cookies of its own and runs no analytics or advertising trackers. Cloudflare may set a cookie that is needed to protect the site from abuse. Once SkoolZA opens, the learning app sets a cookie to keep you signed in.
Your rights
You may ask to see the personal information we hold about you, have it corrected or deleted, object to how we use it, or withdraw consent. Email {{EMAIL}}. We may need to confirm who you are first.
If you are not satisfied with our answer, you may complain to the Information Regulator: inforegulator.org.za.
Security
Information is encrypted in transit, access is limited to the people who need it to run the service, and each account's records are kept separate in the database. If a breach affects your information, we will tell you and the Information Regulator as POPIA requires.
Changes
We will email you before a change to this policy that affects how your information is used takes effect.