Privacy Policy

Last updated: [DATE]

DRAFT FOR LEGAL REVIEW. Fill in every highlighted [PLACEHOLDER], have a South African attorney check this page, then delete this box.

Who we are

Make Matric Easy ("we", "us") is operated by [FULL LEGAL NAME OR REGISTERED BUSINESS NAME][REGISTRATION NUMBER, IF ANY], [PHYSICAL ADDRESS IN SOUTH AFRICA]. Contact us at makematriceasy@gmail.com[TELEPHONE NUMBER].

This policy explains how we handle your personal information under the Protection of Personal Information Act, 2013 (POPIA). We are the "responsible party". Our Information Officer is [INFORMATION OFFICER NAME], reachable at the email above.

What we collect and why

Account details: your name, surname, Gmail address and cell number, and a password (stored only as a secure hash by our login provider). We use these to create your account, sign you in, send account emails (confirmation, password reset) and contact you about your purchases.
Progress and study plans: your mock exam results, study plan and flashcard progress are kept on your own device. If you tap Share progress, a link is created on your device with your first name, results and exam dates. We do not store that link. Anyone you send it to can open it, so only share it with people you trust, such as a parent or teacher.
Purchases: which subjects you bought, when, the amount and a payment reference. We use this to unlock your subjects for 30 days and to keep financial records.
Payments: card and bank details are entered on Paystack's secure page. We never see or store your card details.
Messages and reports: if you email us or flag a mistake in a question, we receive the message, your name and email address and the question details.
On your device: your exam attempts and results are saved in your own browser (local storage). They are not sent to us.

Our basis for processing

We process your information to carry out our agreement with you (your account and purchases), because the law requires us to keep certain records, and with your consent given when you sign up. You can withdraw consent at any time by asking us to delete your account, although we may need to keep purchase records for as long as the law requires.

Who we share it with (operators and service providers)

Supabase (accounts, database and file storage)
Cloudflare (website hosting)
Paystack (payment processing)
Anthropic (AI replies)
FormSubmit and Gmail (delivering your contact messages and question reports to us)
Google Fonts (delivers the website fonts to your browser)

Some of these providers process information outside South Africa. We only use providers that protect personal information to a standard that is comparable to POPIA, and we rely on your consent for cross-border transfers where needed. [ATTORNEY TO CONFIRM: list each provider's data location and transfer basis]

We do not sell your information and we do not use it for third-party marketing.

How long we keep it

We keep your account details while your account exists. If you ask us to delete your account we remove your profile and sign-in details, and keep only the purchase records we must keep by law (for example for tax), for the period the law requires. [ATTORNEY TO CONFIRM RETENTION PERIOD]

Security

We use encrypted connections (HTTPS), store passwords only as hashes, restrict database access so that each student can see only their own records, and keep payment card details out of our systems entirely. No online service is perfectly secure. If there is a breach that affects your information we will tell you and the Information Regulator as POPIA requires.

Learners under 18

Most matric learners are under 18. If you are under 18, a parent or guardian must agree to this policy and to the Terms on your behalf. By ticking the confirmation box when signing up, you confirm that you are 18 or older or that your parent or guardian has agreed.

Your rights

You may ask us to tell you what personal information we hold about you, to correct it, or to delete it, and you may object to our processing. Email us at the address above and we will respond within a reasonable time. You may also complain to the Information Regulator of South Africa (see inforegulator.org.za for current contact details).

Changes

We may update this policy and will show the new date at the top. If a change is significant we will tell you.