AmaPrep — Privacy Policy

Effective date: [DATE]
Responsible party (POPIA): [Registered entity name — e.g. "AmaPrep (Pty) Ltd", or the owner's full name if a sole proprietor], [business/physical address], South Africa.
Information Officer: [Name], [email], [phone]. (POPIA requires the Information Officer to be registered with the Information Regulator of South Africa before processing.)

1. Who we are and what this policy covers

AmaPrep ("we", "us", "our") operates the AmaPrep website and web application at amaprep.net, an online study platform that helps South African Grade 12 learners prepare for the National Senior Certificate (NSC) examinations. This policy explains what personal information we collect, why we collect it, how we look after it, who we share it with, and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).

Many of our users are minors (under 18). This policy therefore gives specific attention to children's information and the role of parents and guardians.

2. The personal information we collect

Information you give us

• Identity & contact: your name, email address, and (optionally) phone number.
• School profile: the school you attend, your grade, and your class/register group.
• If you are under 18: your parent's or guardian's email address and their recorded consent.

Information created as you use AmaPrep

• Learning activity: the lessons and practice you open, the questions you attempt and the answers you give, exam-paper practice, scores, XP, streaks, achievements, and (if you take part) your leaderboard standing.
• Any support requests or messages you send us.

Information collected automatically — only with your consent (see section 6)

• Basic usage analytics (pages visited and general device/browser type) via Microsoft Application Insights, used only to understand and improve the service. This does not load until you accept analytics cookies.

Authentication. Sign-up and sign-in are handled by Microsoft Entra External ID. We do not see or store your password.

We do not collect identity numbers, banking details, or other financial account information through the app.

3. Why we process your information, and our lawful basis

We process your information to: create and manage your account; provide lessons, practice and past papers; personalise and track your learning progress; run optional leaderboards and friend groups; keep the service safe and secure; respond to you; improve AmaPrep; and meet legal obligations.

Our lawful bases under POPIA are: your consent (in particular for minors' information, analytics, and any electronic marketing); performance of our agreement with you (providing the service you signed up for); and our legitimate interests in operating and improving AmaPrep, weighed against your rights and interests.

4. Children, and parental/guardian consent

• AmaPrep is intended for Grade 12 learners. Where a user is under 18, POPIA requires the consent of a competent person (a parent or legal guardian).
• At sign-up we ask for the learner's date of birth. If the user is under 18, we collect the guardian's email address and request the guardian's consent before unlocking interactive content, and we keep a record of that consent.
• A parent or guardian may review, correct, or request deletion of their child's information at any time using the details in section 12.

5. Who we share information with

We do not sell your personal information. We share it only with service providers ("operators" under POPIA) who process it on our behalf under contract, namely:

• Microsoft Azure — secure cloud hosting (primary region: South Africa North).
• Microsoft Entra External ID — authentication.
• Microsoft Application Insights — usage analytics (consent-gated).

We may disclose information where the law requires it, or to protect the rights, safety, and security of our users and the service. [List any other processors — e.g. email provider, and PayFast if/when paid plans launch.]

6. Cookies and analytics

Essential cookies are required to sign you in and keep the app working. Analytics (Application Insights) loads only after you consent through our cookie banner; you may decline and still use AmaPrep fully. You can change or withdraw your choice at any time via the "Cookie choices" link in the footer.

7. Cross-border processing

We host primarily in South Africa (Azure South Africa North). Some Microsoft sub-processors may process limited information outside South Africa; where they do, the transfer is protected by [Microsoft's contractual safeguards / a basis that meets section 72 of POPIA — confirm].

8. How we protect your information

We use role-based access controls, least-privilege administrative access, encryption in transit (HTTPS), and reputable cloud infrastructure. No system is perfectly secure, but we take reasonable and appropriate safeguards and will notify affected users and the Information Regulator of any compromise as POPIA requires.

9. How long we keep your information

We keep your information while your account is active and as needed to provide the service, and thereafter for [retention period] unless the law requires longer. You may ask us to delete it sooner (section 10).

10. Your rights under POPIA

You have the right to: ask what personal information we hold about you and request a copy; ask us to correct or delete information that is inaccurate, irrelevant, excessive, or unlawfully obtained; object to certain processing; withdraw consent (including for analytics and marketing); and not receive unsolicited electronic marketing without your consent. To exercise any of these, contact our Information Officer (section 12). You may also lodge a complaint with the Information Regulator (South Africa): [verify and insert the Regulator's current postal address, email, and complaints contact before publishing].

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes in-app or by email and update the effective date above.

12. Contact

Information Officer: [name], [email], [phone], [address].