Privacy Policy

Welcome to Edtuition ("Platform", "we", "us", or "our"), an AI-powered educational tutoring platform operated by Edtuition Tech (Pty) Ltd (Registration No: 2026/352767/07). Edtuition is designed to support South African high school learners in Grades 8 to 12, providing structured lessons, past papers, practice exercises, and personalised progress analytics aligned to the CAPS curriculum.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our Platform at edtuition.co.za and any associated mobile or desktop applications. It also describes your rights under applicable South African law, including the Protection of Personal Information Act 4 of 2013 (POPIA).

In this Privacy Policy:

• "Personal Information" has the meaning given to it in POPIA and includes any information that identifies or can identify a natural or juristic person.
• "Data Subject" means the learner, parent, guardian, or other individual whose personal information is processed by us.
• "Processing" means any operation performed on personal information, including collection, storage, use, dissemination, and deletion.
• "Responsible Party" means Edtuition Tech (Pty) Ltd, which determines the purpose and means of processing personal information.
• "Operator" means a third party who processes personal information on behalf of the Responsible Party.
• "AI Tutor (Blobby)" means the artificial intelligence-powered tutoring character embedded within the Edtuition Platform.

3.1 Information You Provide Directly

When you register for or use Edtuition, we may collect:

• Full name and username
• Contact details including Email address and Phone numbers
• Date of birth and gender
• School grade, school name and academic records
• Password (stored in encrypted form)
• Payment information (processed securely through third-party payment providers; we do not store full card details)
• Communications you send us, including support requests
• Interactions with the AI Tutor (Blobby), including questions asked and responses received

3.2 Information Collected Automatically

When you use the Platform, we automatically collect:

• Device type, operating system, and browser information
• IP address and general geographic location
• Pages visited, site activity, features used, and time spent on the Platform
• Lesson completion rates, quiz scores, and practice exercise results
• Cookies and similar tracking technology data (see Section 8)

3.3 Information from Third Parties

If you register or log in using a third-party service (such as Google), we may receive basic profile information from that service in accordance with your privacy settings on that platform.

We process your personal information for the following purposes:

• Providing and personalising the Platform's educational features, including AI-driven tutoring, lesson recommendations, and progress tracking
• Managing your account and authenticating your identity
• Processing payments for subscription or premium features
• Communicating with you about your account, updates, and educational content
• Improving the Platform's content, features, and AI capabilities
• Conducting research and analytics to enhance learning outcomes
• Optimising our marketing and advertising performance
• Complying with our legal obligations, including under POPIA and the Consumer Protection Act
• Detecting and preventing fraudulent, abusive, or unauthorised use of the Platform
• Responding to support requests and resolving disputes

We will not process your personal information for purposes incompatible with those listed above without your consent or another lawful basis under POPIA.

We process your personal information on the following lawful grounds under POPIA:

• Performance of a contract: to provide you with access to the Platform and its features
• Legitimate interests: to improve the Platform, prevent fraud, and ensure security
• Legal obligation: to comply with applicable South African laws and regulations
• Consent: where you have given us explicit consent, for example, for marketing communications or optional data collection features

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

Edtuition is designed for learners in Grades 8 to 12 (typically ages 13 to 18). We are committed to protecting the privacy of minors in accordance with POPIA and the Children's Act 38 of 2005.

If a learner is under 18 years of age, we require that a parent or legal guardian:

• Reviews and agrees to this Privacy Policy on behalf of the minor
• Provides consent for the collection and processing of the minor's personal information

Parents and guardians may contact us at privacy@edtuition.co.za to review, correct, or request deletion of a minor's personal information.

We do not sell your personal information. We may share your information only in the following limited circumstances:

7.1 Service Providers (Operators)

We engage trusted third-party service providers to help us operate the Platform, including:

• Cloud hosting and infrastructure providers
• Payment processing providers
• Email and communication service providers
• Analytics and performance monitoring tools
• AI and machine learning infrastructure providers

All operators are contractually bound to process your personal information only on our instructions and in compliance with POPIA.

7.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we reasonably believe such disclosure is necessary to protect our rights, your safety, or the safety of others.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity, subject to the same level of protection as described in this Policy.

We use cookies and similar technologies to operate and improve the Platform. These include:

• Essential cookies: necessary for the Platform to function (e.g., authentication, session management)
• Analytics cookies: help us understand how users interact with the Platform
• Preference cookies: remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality.

We retain your personal information for as long as your account is active or as needed to provide you with the Platform's services. We may also retain information:

• For a period after account closure to comply with legal obligations
• To resolve disputes or enforce our agreements
• In anonymised or aggregated form for research and analytics purposes

Upon request for deletion, we will remove your personal information from our active systems within 30 days, subject to any legal retention requirements.

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Access controls limiting who can view or process personal information
• Regular security assessments and monitoring
• Secure password hashing

While we take data security seriously, no system is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Regulator as required by POPIA.

As a data subject, you have the following rights under POPIA:

• Right of access: to request a copy of the personal information we hold about you
• Right to correction: to request correction of inaccurate or incomplete information
• Right to deletion: to request deletion of your personal information (subject to legal obligations)
• Right to object: to object to processing based on legitimate interests
• Right to withdraw consent: to withdraw previously given consent at any time
• Right to complain: to lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us at privacy@edtuition.co.za. We will respond within 30 days.

Some of our service providers may be located outside South Africa. Where we transfer personal information across borders, we ensure that the recipient jurisdiction provides an adequate level of protection, or we implement appropriate safeguards such as contractual clauses, in accordance with POPIA section 72.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated Policy on the Platform and, where appropriate, by email. Your continued use of the Platform after the effective date of changes constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Information Officer: