Privacy policy

What we collect

• Account details — your name and email address, used to create and secure your account.
• Study profile — your licence goal, vehicle code, test date(s) and the answers you give during onboarding, used to personalise your plan.
• Study activity — question attempts, flashcard reviews, mock-exam results, scenario answers and streaks, used to compute your readiness and schedule revision.
• Tutor conversations — messages you send to the AI tutor, used to generate replies and keep your conversation history.

Where your data lives

Your study data is stored locally in your browser and, on a full account, synced to our database (hosted on Supabase) so you can continue on other devices. In the local demo mode, everything stays in your browser — clearing your browser data erases it.

Payments

Payments are processed by Paystack. Your card number never touches our servers — we receive only confirmation of payment and the subscription status needed to unlock your plan.

AI processing

When you use the AI tutor, the content of your question (and a short summary of your study context, such as your weak categories) is sent to our AI provider to generate the reply. We do not send your name, email or payment details with tutor requests.

Cookies & local storage

We use local storage for the things that make the app work: your session, your study progress cache, and preferences like dark mode and data-saver.

We also use PostHog for product analytics, which stores an identifier in your browser's local storage so we can tell whether the same person finished onboarding, and count how many people get stuck where. It records the pages you open and a short list of named actions (signing up, finishing a diagnostic, starting a checkout). We have turned off its automatic capture of every click and keystroke, so it only receives events we have named deliberately. We do not run advertising trackers and we do not sell or share your data with advertisers.

Who processes your data

We are a small operation and rely on established providers rather than running our own infrastructure. Each of these receives only what it needs to do its job:

• Supabase — database and sign-in. Holds your account details and study data.
• Vercel — hosting. Processes the requests your browser makes, including your IP address.
• Paystack — payments and subscription status. Handles your card details directly; we never receive them.
• Anthropic and OpenAI — the AI tutor. Receive your question and a short summary of your study context, without your name, email or payment details.
• Resend — transactional and reminder email. Receives your email address and the message we are sending you.
• PostHog — product analytics, as described above.
• Upstash — usage limits. Holds a counter keyed to your account ID so the AI features can enforce a daily allowance.

Sending data outside South Africa

Every provider listed above operates outside South Africa, so using this service means your personal information is processed abroad — principally in the European Union and the United States. Section 72 of POPIA allows this where the transfer is necessary to perform the contract between us, which is the basis we rely on: we cannot host your account, process your payment, or generate a tutor reply without sending the relevant data to the provider that does it.

We choose providers that publish a data-processing agreement and commit to protection comparable to POPIA. We do not transfer your personal information to anyone else, and we do not sell it.

Your rights (POPIA)

Under the Protection of Personal Information Act you may ask what personal information we hold about you, ask us to correct it, or ask us to delete it. You can delete your study progress yourself at any time from Account → Reset all progress, and deleting your account removes your personal information from our systems within a reasonable period.

You do not need an account, or access to one, to make a request — email us from the contact page and we will handle it. We do not charge for this.

If you are not satisfied with how we have handled a request, you may complain to the Information Regulator of South Africa, which oversees POPIA.

Retention

We keep your data for as long as your account is active. If your account is inactive for an extended period we may delete it after notice to your email address.

Children

The service is intended for people preparing for a South African learner's or driving licence (16 years and older). We do not knowingly collect information from children under 16.

Changes & contact

If this policy changes materially we'll note it here with a new date. Questions or requests about your personal information can be sent to us from the contact page, or from your account page if you have one.