Privacy notice

The responsible party is [TO BE COMPLETED: registered entity name and company registration number], trading as Diipone Academy. Our Information Officer is [TO BE COMPLETED: name and email address of the registered Information Officer], and you can reach us about anything on this page at [TO BE COMPLETED: privacy contact email address].

POPIA treats anyone under 18 as a child, and it does not allow us to process a child's personal information without the prior consent of a parent, guardian or other competent person. So an account here is held by an adult. If you are a learner under 18, ask a parent or guardian to create the account and to agree to this notice on your behalf.

An account cannot be created without confirming that you are 18 or older and that you consent on behalf of any child who will use it. When you sign in by email we record the date and time of that confirmation against the account.

We collect as little as the product can work with. In full:

• Your email address, when you sign in. We sign you in with a one-time link sent to that address, or with Google if you choose that instead. We use it to identify your account and to send you the sign-in link. We do not send marketing from this product.
• Your plan and your generation credits. We store which plan you are on and how many questions you have generated, so that the credit count on your account is correct and so that a question you have already paid for is never charged for twice.
• Which topics you generate questions in. We keep a record of generation activity so the credit ledger can be audited and so we can see which parts of the curriculum are being used. It is not used to build a profile of a learner.

We do notcollect a learner's name, school, ID number, date of birth, address, or any marks or results. Nothing you type as an answer to a practice question is sent to us — see below.

Your saved questions (“My Library”) are stored in your browser, not on our servers. So are the answers you type into a practice question and the marks the instant marker gives you. If you clear your browser storage, they are gone, and we cannot restore them — which is the other side of the same coin: we never see them.

We use cookies only to keep you signed in. There is no advertising network, no analytics service and no social-media pixel anywhere in this product — nothing here follows you to another website, and there is nothing for a consent banner to ask you about.

Our database and sign-in are operated for us by Supabase, and the site is served by Vercel. Both act on our instructions as operators under POPIA and neither may use your information for their own purposes. Our data is hosted in [TO BE COMPLETED: the Supabase project region, and whether that is inside South Africa]. Where information is processed outside South Africa, POPIA s72 requires the receiving country to give it comparable protection, or your consent — [TO BE COMPLETED: the transfer basis relied on].

We do not sell personal information, and we do not share it with anyone else except where the law requires it.

We keep your account and its credit ledger for as long as the account is open, and for [TO BE COMPLETED: retention period after closure, and the reason for it] afterwards. Ask us to close your account and we will delete it, apart from anything we are legally obliged to keep.

Under POPIA you may, at any time and free of charge:

• ask what personal information we hold about you, and ask for a copy;
• ask us to correct anything that is wrong, or delete anything we should not have;
• object to what we are doing with it, or withdraw a consent you gave us;
• complain to the Information Regulator (South Africa), at inforegulator.org.za, if you think we have got it wrong.

Write to [TO BE COMPLETED: privacy contact email address] and we will answer within 30 days.

Sign-in is by one-time email link or Google, so we never hold a password. Access to your account row is enforced in the database itself, not only in the application. No system is perfectly secure; if a breach ever affects your information we will tell you and the Information Regulator, as POPIA s22 requires.

If we change it we will change the date at the top, and if the change is significant we will tell you the next time you sign in. The terms of use sit alongside this notice.