Privacy Policy

1. Information We Collect

1.1 Personal Information

1.2 Automatically Collected Information

• Device information (browser type, operating system)
• IP address and location data
• Usage patterns and interaction data
• Session duration and frequency

2. How We Use Your Information

We use your personal information to:

• Provide AI-powered maths tutoring services
• Create and manage your account
• Process payments and subscriptions
• Track learning progress and generate analytics
• Send service updates and renewal reminders
• Improve our AI models and service quality
• Comply with legal obligations
• Prevent fraud and ensure security

3. Data Sharing and Third Parties

3.1 Service Providers

We share data with trusted third parties who help us operate:

• Supabase - Database and authentication (EU/US servers)
• Anthropic (Claude AI) - AI processing for explanations
• Yoco - Payment processing (South African company)
• Vercel - Hosting and infrastructure

3.2 Data Transfers

Some service providers may process data outside South Africa. We ensure adequate safeguards are in place through:

• Standard contractual clauses
• Data processing agreements
• Security certifications (ISO 27001, SOC 2)

3.3 We Never Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Your POPIA Rights

Under POPIA, you have the right to:

• Access: Request a copy of your personal information
• Correction: Update inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal obligations)
• Objection: Object to processing for direct marketing
• Restriction: Request limited processing of your data
• Portability: Receive your data in a structured format
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at support@mathscoach.ai. We will respond within 30 days.

5. Data Security

We implement industry-standard security measures:

• End-to-end encryption for data transmission (TLS/SSL)
• Encrypted storage of sensitive data
• Regular security audits and updates
• Access controls and authentication
• Secure payment processing (PCI DSS compliant via Yoco)

6. Data Retention

We retain your data for:

• Account data: Duration of account + 1 year after closure
• Problem submissions: Duration of account + 1 year
• Payment records: 5 years (tax and legal requirements)
• Analytics data: Aggregated and anonymized indefinitely

7. Children's Privacy

Our service is designed for children aged 10-18 under parental supervision. We:

• Require parental consent for account creation
• Collect minimal information about children (name, grade only)
• Do not use children's data for marketing
• Allow parents to access and delete their children's data

8. Cookies and Tracking

We use essential cookies for:

• Authentication and session management
• Service functionality and preferences
• Security and fraud prevention

We do not use third-party advertising cookies or tracking pixels.

9. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or in-app notification.

10. Information Officer

For POPIA-related inquiries, contact our Information Officer:

Email: privacy@mathscoach.ai
Address: South Africa

11. Complaints

If you believe we have not complied with POPIA, you may lodge a complaint with:

Information Regulator (South Africa)
Website: inforegulator.org.za
Email: inforeg@justice.gov.za