Privacy Policy

Last Updated: April 2026

EduTechSA ("we," "us") is committed to protecting your personal information. This policy dictates how we process your data in strict compliance with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Information We Collect

  • Identity & Contact Data: Name, email address, and authentication credentials.
  • Academic Data: Grade, curriculum, subject choices, and self-reported school marks (SBA).
  • Telemetry & Performance Data: Your interactions with our practice engine, correct/incorrect responses, generated diagrams, and calculated "True Mastery" Elo scores.
  • Guardian Data: Email addresses of parents/sponsors you explicitly invite to view your progress.

2. Cross-Border Transfers & Sub-Processors (POPIA s72)

To provide an enterprise-grade AI experience, Scholar utilizes world-class international sub-processors. By using our Service, you consent to the processing of your data through the following secure vendors, all of whom are bound by GDPR and POPIA-equivalent data protection standards:

  • Supabase (AWS): Our primary database infrastructure.
  • Google Cloud (Gemini API): Used strictly for processing educational prompts and grading diagram uploads. Your personal identity is not transmitted to the LLM.
  • Vercel & Cloudflare: Our hosting, edge computing, and zero-egress asset storage (R2) networks.
  • Resend: Our transactional email routing service.

3. Data Portability & Post-Termination Destruction

You have the right to your data. Should you choose to terminate your Scholar account:

  • Portability: You may request an export of your raw academic performance data (CSV format) prior to account closure.
  • Destruction: Upon account deletion, we initiate a 30-day "wind-down" retention period to prevent accidental data loss. Following this period, your personal identifying information is permanently and irrecoverably destroyed. Aggregated, anonymized performance telemetry is retained solely for algorithmic training purposes, stripped of any link to your identity.

4. Your POPIA Rights

As a data subject, you maintain the right to Access your data, request Rectification of incorrect data, and demand Erasure ("Right to be Forgotten").

To exercise any of these rights, or if you suspect a data breach, please immediately contact our Information Officer at privacy@edutechsa.org.