Privacy Policy

Last updated: 31 May 2025

Version: 1.0

1. Who We Are

For the purpose of the Protection of Personal Information Act (POPIA), the Responsible Party for your data is VulaLearn. You can contact us at vulalearn@gmail.com.

2. What Personal Information We Collect

• Name and surname
• Email address
• School name and grade
• Optional phone number (for opt-in programs like WhatsApp groups)
• XP points, quiz progress, and responses
• Information submitted through tools like the CV Builder or University Match Assistant

We do NOT collect sensitive information like ID numbers, biometric data, or financial details.

3. How We Collect Information

• When you sign up and create a profile
• When you complete quizzes, earn XP, or use platform features
• When you use tools like the CV builder or university explorer
• When you opt in to join WhatsApp groups or ambassador programs
• When you use the AI chatbot or receive AI-generated content

4. Why We Collect Your Data

• To personalize your learning journey
• To track academic progress and XP levels
• To help build your CV or explore university options
• To improve our platform with anonymous usage analytics
• To communicate with you (if you opt in)

We process your information in accordance with Section 11 of POPIA, based on your voluntary consent and our legitimate interest in delivering and improving educational services.

5. Data Storage and Security

All personal data is securely stored in Google Firebase Firestore, hosted in the Johannesburg (africa-south1) region. To protect your information, we implement the following safeguards:

• HTTPS encryption across all pages
• Firebase Authentication for secure login
• Strict access control and email verification
• Google infrastructure encryption (data in transit and at rest)
• Firebase security rules to restrict access to administrators only

6. Data Retention

We retain your data only as long as needed to support your academic growth and for as long as you maintain an account with us. You may request at any time to:

• View the personal data we have stored about you
• Correct or update any inaccurate or outdated information
• Permanently delete your account and associated data

Email: vulalearn@gmail.com

7. Consent for Users Under 18

• We collect only necessary educational data
• Use of the platform is voluntary and based on informed opt-in
• We are implementing formal parental/guardian consent features
• Users under 18 should obtain parental or guardian permission before signing up

8. Use of Third-Party Services

To provide our educational services, we integrate with reputable third-party providers:

• Firebase (Google) — for user authentication and data storage
• Google Gemini — for generating AI-based learning content
• Chatbase — for our study-assist chatbot experience
• Google Forms — for ambassador program signups and surveys
• Google Analytics — for analyzing platform usage and improving features

We do not sell your personal data or use advertising cookies of any kind.

9. Cookies and Analytics

• Google Analytics — helps monitor user activity, page traffic, and engagement patterns
• Firebase Auth Cookies — essential cookies used for login session handling

We do not currently display a cookie banner, but this may be added in the future to improve transparency and control.

10. Your Rights Under POPIA

As a user, you have the following rights under the Protection of Personal Information Act:

• The right to request access to your personal data
• The right to correct or update inaccurate information
• The right to request the deletion of your data and account
• The right to object to certain types of data processing
• The right to withdraw your consent at any time

To exercise any of these rights, please contact: vulalearn@gmail.com

11. International Data Transfers

Some of the services we use, including Google Firebase and Google Gemini, may involve the processing or storage of data outside South Africa. We take appropriate measures to ensure that any cross-border transfers comply with POPIA and that your data is protected through:

• Encryption of data in transit and at rest
• Restricted access based on administrative roles
• Google’s adherence to international data protection standards

By using our services, you acknowledge and consent to the possibility of international data storage as part of these trusted tools.

12. Updates to This Privacy Policy

This policy may be revised from time to time. We will notify users of any significant changes via email or platform alerts. Your continued use of the platform after changes have been posted signifies acceptance of the updated policy.

13. Contact Us

If you have any questions, complaints, or requests related to your personal data, please contact us:

Email: vulalearn@gmail.com

14. Consent Notice

By using this platform or creating an account, you confirm that you have read and understood this Privacy Policy. You also consent to the collection, storage, and processing of your personal information as outlined above, in accordance with the Protection of Personal Information Act (POPIA).