Privacy Policy

1. Information We Collect

1.1 Account Information: When you register, we collect:

• Full name
• Email address
• Password (stored encrypted — we never see it)
• Grade (4–12)
• School name
• Gender (for personalisation)
• Home language preference (English / Afrikaans)

1.2 Usage Data: We automatically collect:

• Subjects studied and topics asked about
• Number of questions asked per session
• Boss battle results and scores
• XP and progress data
• Session timestamps and duration

1.3 Payment Information: Payment details are processed by Paystack and are NOT stored on StudySauce servers. We only retain your subscription status and billing interval.

1.4 Device and Technical Data:

• Browser type and version
• Device type (mobile / desktop)
• IP address (used for security only)

2. How We Use Your Information

2.1 To provide and improve the Service:

• Personalise your learning experience
• Generate AI responses relevant to your grade
• Track your progress and award XP
• Send transactional emails (confirmations, receipts)

2.2 For educational analytics:

• Generate aggregated, anonymised reports showing which topics students struggle with most
• Share these insights with schools to improve teaching (individual students are NEVER identified)
• Improve our AI models and curriculum alignment

2.3 We do NOT use your information to:

• Sell to third parties (ever)
• Display targeted advertising
• Share your personal details with schools (only anonymised aggregate data)
• Build profiles for commercial purposes

3. Data Sharing

3.1 We will NEVER sell your personal information to any third party.

3.2 We share data only with:

• Supabase — database hosting (South Africa / EU servers)
• Anthropic — AI processing (your questions are processed to generate responses)
• Paystack — payment processing (ZA-based)
• Resend — email delivery
• Vercel — platform hosting

All partners are contractually bound to protect your data.

3.3 SCHOOL REPORTS: Schools that partner with StudySauce receive aggregated reports showing:

• Which topics students ask about most
• Common areas of difficulty
• Usage statistics

These reports NEVER include individual student names, email addresses, or identifiable information.

3.4 We may disclose information if required by South African law or court order.

4. Data Retention

4.1 Your account data is retained while your account is active.

4.2 If you delete your account, your personal information is deleted within 30 days, except where retention is required by law.

4.3 Anonymised usage data may be retained indefinitely for educational research purposes.

5. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Object to processing of your information
• Lodge a complaint with the Information Regulator

To exercise these rights, email support@study-sauce.com.

6. Security

6.1 We implement industry-standard security measures:

• All data transmitted over HTTPS (encrypted)
• Passwords hashed using bcrypt (never stored in plain text)
• Row-level security on all database tables
• Regular security audits

6.2 No system is 100% secure. In the unlikely event of a data breach, we will notify affected users within 72 hours as required by POPIA.

7. Cookies

7.1 StudySauce uses essential cookies only for:

• Maintaining your login session
• Security tokens

7.2 We do not use tracking or advertising cookies.

8. Children's Privacy

8.1 Users under 18 must have parental consent.

8.2 We do not knowingly collect data from children under 13 without verified parental consent.

8.3 Parents may request deletion of their child's data at any time by contacting support@study-sauce.com.

9. Contact — Information Officer

StudySauce (Pty) Ltd
Information Officer: To be designated
Email: support@study-sauce.com
Website: www.study-sauce.com