EduChores

Privacy Policy

Version 1.0 — Last updated: 2026/08/07

1. Introduction

EduChores ("we", "us", "the Platform") is a software platform that helps South African schools generate CAPS-aligned lesson plans, assessments, activities and letters, and manage learner support records (SNA/ISP), operated by EduChores (Bfjbecker101, sole trader — company registration pending).

This policy explains what personal information we process, why, and how, in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

2. Important: Who Is Responsible For What

Under POPIA, there are two key roles, and it matters which one applies to which data:

  • The School (via its Admin account) is the "Responsible Party" for all learner personal information, SNA records, and ISP records entered into the Platform. The school determines why and how that data is collected (e.g. from parents/guardians or a prior school system) and is legally accountable for having a lawful basis to hold it.
  • EduChores acts as an "Operator" — we process that learner data only on the school's instructions, to provide the Platform's features. We do not decide why learner data is collected; the school does.
  • For Admin and Teacher account data, EduChores is the Responsible Party, since we collect that information directly for account administration and billing.

A separate Operator Agreement between EduChores and each subscribing school governs this relationship in more detail and is incorporated into these terms by reference.

3. What We Collect

Admin and Teacher accounts: first name, surname, email address, phone number, password (stored encrypted, never in plain text), school name, role, subjects and grades taught.

Learner records (entered by the school): first name, surname, date of birth, home language, gender, grade/class, learner number, previous school (if transferring).

Special personal information (learner support records): SNA data (presenting concerns, learning barriers, prior interventions, strengths, support level) and ISP data (goals, strategies, accommodations, review dates, responsible people). Treated as special personal information under POPIA because it relates to a child and to educational/health support needs, and receives the highest level of protection on the Platform.

School branding and template files: logo, and example test/lesson plan/SBA/activity/letter documents uploaded by the school, used only to match the visual style of AI-generated documents.

Generated content: lesson plans, assessments, activities and letters created through the Platform, and the chat messages used to refine them.

Billing information: processed by our payment provider (PayFast) — EduChores does not store full card details.

Technical/usage data: login timestamps, IP address, device/browser type, audit logs of who accessed which learner record and when, and standard analytics/cookies used to keep you logged in and understand basic feature usage (see Section 14).

4. Why We Process This Information

  • To provide the core service: generating AI lesson plans, assessments, activities and letters grounded in CAPS/ATP/SIAS/NPA/NPRRRR/White Paper 6 content.
  • To maintain one continuous learner record across classes, teachers, and — with admin approval — across schools.
  • To bill schools for the annual school-profile fee and monthly subscription.
  • To secure accounts and prevent unauthorised access to learner data.
  • To comply with our own legal obligations (e.g. tax, record-keeping).

We do not sell learner, teacher, or admin personal information to any third party, and we do not use learner data to train external AI models beyond generating the specific document requested.

5. Legal Basis for Processing

  • Learner data: processed on the basis that the school (Responsible Party) has obtained the necessary consent from parents/guardians, or otherwise has a lawful basis under POPIA and the Children's Act, before entering that learner's information. By signing up, the Admin confirms this is in place.
  • Admin/Teacher account data: processed under contract necessity (to provide the service you've signed up for) and legitimate interest (account security, billing).

6. Where Your Data Is Stored

Data is stored using our own Supabase infrastructure, hosted in the EU region, and, for payments, PayFast (South Africa). Because your database is hosted in the EU rather than South Africa, personal information is transferred outside South Africa on an ongoing basis. The EU has data protection laws (GDPR) that are widely regarded as providing a level of protection substantially similar to POPIA, which supports compliance with section 72 of POPIA — but this should be confirmed by an attorney before publishing, since it is a specific legal determination.

7. Data Retention

  • Learner records remain active while the learner is enrolled at a subscribed school.
  • When a learner transfers to another school on the Platform, their record (including SNA/ISP history) moves with them, and the original school's copy is archived, not deleted, for historical record-keeping.
  • A school may request permanent deletion of a specific learner's record at any time (see Section 9).
  • Account and billing records are retained for as long as required by South African tax and financial record-keeping laws after account closure.

8. Security Measures

  • Row Level Security ensures a school's data is never visible to another school.
  • Storage buckets holding logos, templates, generated documents and policy documents are private, accessed only via signed, time-limited links generated by our servers.
  • Passwords are never stored in plain text and are checked against known data breaches.
  • Access to learner support records (SNA/ISP) is limited to the teachers actually linked to that learner and the school's admin.
  • In the event of a data breach affecting personal information, we will notify affected schools and, where required, the Information Regulator, as soon as reasonably possible, in line with POPIA section 22.

9. Your Rights

Subject to POPIA, you (or, for a learner, their school acting on the parent/guardian's behalf) have the right to:

  • Request access to the personal information we hold.
  • Request correction of inaccurate information.
  • Request deletion of personal information where there is no lawful basis to retain it.
  • Object to processing in certain circumstances.
  • Lodge a complaint with the Information Regulator of South Africa if you believe your information has been mishandled: enquiries@inforegulator.org.za.

Requests can be made to our Information Officer at bfjbecker101@gmail.com.

10. Children's Information

We recognise learner records involve children. The Platform does not allow learners to create accounts or log in themselves. All learner personal information, SNA and ISP data is entered and managed solely by verified School Admins and Teachers, who are responsible for ensuring parental/guardian consent has been obtained before any learner information is entered.

11. Third-Party Service Providers

We use the following categories of sub-processors to run the Platform: cloud infrastructure and AI processing (Lovable Cloud/Lovable AI), payment processing (Stripe or PayFast/Yoco). Each is bound by contractual obligations to protect any personal information they process on our behalf.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated to School Admins by email before taking effect.

13. Contact Us

Information Officer: [Name]
Email: bfjbecker101@gmail.com
Postal address: 32 Verster Street, Randridge, Randfontein, South Africa

14. Cookies and Tracking

The Platform uses only essential cookies/local storage required to keep you securely logged in, plus basic, non-invasive analytics to understand which features are used, so we can improve the Platform. We do not use tracking for advertising purposes, and we do not sell or share this data with advertisers.