Privaatheidsbeleid
Hoe ons jou persoonlike inligting versamel, gebruik en beskerm.
Inwerkingsdatum: 17 Junie 2026 · Weergawe 1.01 Wie ons is (Verantwoordelike Party)
Ingevolge die Wet op Beskerming van Persoonlike Inligting (POPIA), Nr. 4 van 2013, is die verantwoordelike party vir die verwerking van jou persoonlike inligting:
Hierdie beleid is van toepassing op alle gebruikers van StudyBomb — insluitend leerders, ouers en besoekers.
2 Watter inligting ons versamel
Ons versamel slegs inligting wat nodig is vir die werking van die platform:
| Kategorie | Voorbeelde | Rede |
|---|---|---|
| Rekeningbesonderhede | Naam, van, e-posadres, wagwoord (geënkripteer) | Rekening skep en aanmelding |
| Kind-profiele | Naam, gebruikersnaam, wagwoord (geënkripteer), graad | Ouer-rekening met kinders |
| Betalingsinligting | Betalingsverwysing, bedrag, datum, pakkettipe | Toegangsverifikasie — geen kaartbesonderhede gestoor nie |
| Studeer-aktiwiteit | Onderwerp gebruik, tyd gespandeer, inhoudtipe, toestel | Ouer-dashboard en platform-verbetering |
| Sessiedata | Sessie-token, toestel, laaste aktief, IP-adres | Veiligheid en sessiebestuur |
| Terugvoer | Ster-gradering, opsionele kommentaar, taal | Inhoudsverbetering |
| Bemarkingstoestemming | Jou keuse om e-pos-kommunikasie te ontvang | POPIA-nakoming |
3 Hoe ons jou inligting gebruik
Ons gebruik jou persoonlike inligting slegs vir die volgende doeleindes:
- Om jou rekening te skep en te bestuur
- Om toegang tot betaalde en gratis inhoud te verifieer
- Om die ouer-dashboard se studeer-aktiwiteit-oorsig te vertoon
- Om betalingstransaksies via PayFast te verwerk en te verifieer
- Om outomatiese e-pos-herinneringe te stuur — slegs as jy toestemming gegee het
- Om die platform te verbeter gebaseer op gebruiksdata en terugvoer
- Om veiligheid te handhaaf en ongemagtigde toegang te voorkom
- Om aan wetlike verpligtinge te voldoen
4 Minderjariges en ouer-toestemming
StudyBomb is hoofsaaklik gerig op leerders tussen 13 en 18 jaar. Ons neem die beskerming van minderjariges ernstig op.
- Leerders onder 18 jaar moet die platform met ouer- of voogdywetende registreer, óf die ouer registreer 'n ouer-rekening namens die kind.
- Kind-profiele onder 'n ouer-rekening het beperkte persoonlike inligting — slegs naam, gebruikersnaam en graad.
- Ons stuur nooit bemarkings-e-posse direk aan kind-profiele nie — slegs aan die ouer se rekening-e-pos.
- Leerders wat self registreer (enkelprofiel) bevestig by registrasie dat hulle die bepalings aanvaar — as hulle onder 18 is, moet 'n ouer dit namens hulle doen.
5 Hoe ons jou inligting deel
Ons verkoop of verhuur jou persoonlike inligting nooit aan derde partye nie. Ons deel inligting slegs in die volgende beperkte omstandighede:
| Derde Party | Doel | Inligting gedeel |
|---|---|---|
| Supabase | Databasis en stawing | Alle rekeningdata (veilig geënkripteer) |
| PayFast | Betalingsverwerking | Bedrag, verwysing (nie kaartdata nie) |
| Vimeo | Video-aflewering | Geen persoonlike data — video's is domein-gesluit |
| Resend | E-pos-aflewering | E-posadres en inhoud (slegs met toestemming) |
| Netlify | Webwerf-hosting | Standaard webverkeer-logs |
Alle diensverskaffers is gekies met privaatheid en sekuriteit in ag. Ons vereis dat hulle jou data beskerm en nie ongemagtigde verwerking doen nie.
Ons mag inligting openbaar maak as dit wetlik vereis word deur 'n hof, regulerende liggaam of wetstoepassingsowerhede.
6 Hoe lank ons jou inligting bewaar
- Rekeningdata: Bewaar solank jou rekening aktief is, plus 12 maande na sluiting.
- Betalingsrekords: 5 jaar vir belasting- en ouditvereistes.
- Studeer-aktiwiteit: Bewaar vir die duur van die aktiewe jaar; geskrywe data word jaarliks geskrap.
- Sessiedata: Sessie-tokens verval by nuwe inlog; logs bewaar vir 90 dae.
- Terugvoer: Bewaar onbepaald vir platform-verbetering (nie persoonlik identifiseerbaar in verslae nie).
Na hierdie tydperke word jou data veilig uitgevee of geanonimiseer.
7 Koekies en plaaslike stoor
StudyBomb gebruik geen derdeparty-opspoor-koekies nie. Ons gebruik slegs:
- localStorage — om jou taalvoorkeur (Afrikaans/Engels) en aanmeldingstatus te stoor. Hierdie data verlaat nooit jou toestel nie.
- Sessie-tokens (Supabase) — om jou aangemeld te hou. Word outomaties verwyder by uitklok of nuwe inlog.
Ons gebruik geen Google Analytics, Facebook Pixel of enige bemarkings-opsporing nie.
8 Jou regte ingevolge POPIA
Ingevolge POPIA het jy die volgende regte met betrekking tot jou persoonlike inligting:
Om enige van hierdie regte uit te oefen, kontak ons by support@studybomb.co.za. Ons streef daarna om binne 30 dae te reageer.
9 Sekuriteit van jou inligting
Ons neem redelike tegniese en organisatoriese maatreëls om jou persoonlike inligting te beskerm:
- Alle verbindings is geënkripteer via HTTPS (SSL/TLS)
- Wagwoorde word gehasj — ons sien nooit jou wagwoord in gewone teks nie
- Supabase Row Level Security (RLS) verseker dat gebruikers slegs hul eie data kan sien
- Sessie-tokens verval outomaties by nuwe inlog — een aktiewe sessie per profiel
- Gebruikersinvoer word gesaniteer teen XSS-aanvalle
- Video-URL's word nooit in die HTML blootgestel nie — dit word via die Supabase API gelaai
Geen stelsel is 100% veilig nie. As jy vermoed dat jou rekening gekompromitteer is, verander dadelik jou wagwoord en kontak ons.
10 Databreuk-protokol
In die onwaarskynlike geval van 'n data-oortreding sal ons:
- Die betrokke gebruikers so gou as moontlik per e-pos in kennis stel
- Die Inligtingsreguleerder in kennis stel binne die voorgeskrewe tydperk ingevolge POPIA
- Redelike stappe neem om verdere skade te beperk
- Duidelike inligting verskaf oor watter data geraak is en watter stappe geneem word
11 Wysigings aan hierdie beleid
Ons behou die reg voor om hierdie Privaatheidsbeleid te eniger tyd by te werk. Wesenlike wysigings sal per e-pos aan geregistreerde gebruikers gekommunikeer word en op die platform aangedui word met 'n nuwe inwerkingsdatum.
Voortgesette gebruik van StudyBomb na sodanige kennisgewing sal as aanvaarding van die gewysigde beleid beskou word.
12 Inligtingsreguleerder van Suid-Afrika
As jy van mening is dat ons jou persoonlike inligting in stryd met POPIA verwerk het, het jy die reg om 'n klagte in te dien by:
Ons versoek egter dat jy ons eers kontak sodat ons jou beswaar kan aanspreek voordat jy 'n formele klagte indien.
13 Kontak ons
Vir enige vrae oor hierdie Privaatheidsbeleid of die hantering van jou persoonlike inligting:
Privacy Policy
How we collect, use and protect your personal information.
Effective date: 17 June 2026 · Version 1.01 Who we are (Responsible Party)
In terms of the Protection of Personal Information Act (POPIA), No. 4 of 2013, the responsible party for processing your personal information is:
This policy applies to all users of StudyBomb — including learners, parents and visitors.
2 What information we collect
We only collect information that is necessary for the operation of the platform:
| Category | Examples | Reason |
|---|---|---|
| Account details | First name, surname, email address, password (encrypted) | Account creation and login |
| Child profiles | Name, username, password (encrypted), grade | Parent account with children |
| Payment information | Payment reference, amount, date, package type | Access verification — no card details stored |
| Study activity | Topics accessed, time spent, content type, device | Parent dashboard and platform improvement |
| Session data | Session token, device, last active, IP address | Security and session management |
| Feedback | Star rating, optional comment, language | Content improvement |
| Marketing consent | Your choice to receive email communications | POPIA compliance |
3 How we use your information
We use your personal information only for the following purposes:
- To create and manage your account
- To verify access to paid and free content
- To display study activity in the parent dashboard
- To process and verify payment transactions via PayFast
- To send automated email reminders — only if you have given consent
- To improve the platform based on usage data and feedback
- To maintain security and prevent unauthorised access
- To comply with legal obligations
4 Minors and parental consent
StudyBomb is primarily aimed at learners between the ages of 13 and 18. We take the protection of minors seriously.
- Learners under 18 must register with parental or guardian knowledge, or the parent registers a parent account on behalf of the child.
- Child profiles under a parent account hold limited personal information — only name, username and grade.
- We never send marketing emails directly to child profiles — only to the parent account's email address.
- Learners who register themselves (single profile) confirm at registration that they accept the terms — if under 18, a parent must do so on their behalf.
5 How we share your information
We never sell or rent your personal information to third parties. We share information only in the following limited circumstances:
| Third Party | Purpose | Information shared |
|---|---|---|
| Supabase | Database and authentication | All account data (securely encrypted) |
| PayFast | Payment processing | Amount, reference (no card data) |
| Vimeo | Video delivery | No personal data — videos are domain-restricted |
| Resend | Email delivery | Email address and content (only with consent) |
| Netlify | Website hosting | Standard web traffic logs |
All service providers are selected with privacy and security in mind. We require that they protect your data and do not perform unauthorised processing.
We may disclose information if legally required by a court, regulatory body or law enforcement authority.
6 How long we keep your information
- Account data: Kept for as long as your account is active, plus 12 months after closure.
- Payment records: 5 years for tax and audit requirements.
- Study activity: Kept for the duration of the active year; historical data is cleared annually.
- Session data: Session tokens expire on new login; logs kept for 90 days.
- Feedback: Kept indefinitely for platform improvement (not personally identifiable in reports).
After these periods, your data is securely deleted or anonymised.
7 Cookies and local storage
StudyBomb uses no third-party tracking cookies. We use only:
- localStorage — to store your language preference (Afrikaans/English) and login status. This data never leaves your device.
- Session tokens (Supabase) — to keep you logged in. Automatically removed on logout or new login.
We use no Google Analytics, Facebook Pixel or any marketing tracking.
8 Your rights under POPIA
Under POPIA, you have the following rights regarding your personal information:
To exercise any of these rights, contact us at support@studybomb.co.za. We aim to respond within 30 days.
9 Security of your information
We take reasonable technical and organisational measures to protect your personal information:
- All connections are encrypted via HTTPS (SSL/TLS)
- Passwords are hashed — we never see your password in plain text
- Supabase Row Level Security (RLS) ensures users can only see their own data
- Session tokens expire automatically on new login — one active session per profile
- User input is sanitised against XSS attacks
- Video URLs are never exposed in HTML — they are loaded via the Supabase API
No system is 100% secure. If you suspect your account has been compromised, change your password immediately and contact us.
10 Data breach protocol
In the unlikely event of a data breach, we will:
- Notify affected users by email as soon as possible
- Notify the Information Regulator within the prescribed period under POPIA
- Take reasonable steps to limit further harm
- Provide clear information about what data was affected and what steps are being taken
11 Changes to this policy
We reserve the right to update this Privacy Policy at any time. Material changes will be communicated to registered users by email and indicated on the platform with a new effective date.
Continued use of StudyBomb following such notice will be deemed acceptance of the updated policy.
12 Information Regulator of South Africa
If you believe we have processed your personal information in violation of POPIA, you have the right to lodge a complaint with:
We do however request that you contact us first so that we may address your concern before you lodge a formal complaint.
13 Contact us
For any questions about this Privacy Policy or the handling of your personal information: