Privacy Policy

Last updated: June 13, 2026

1. Introduction

Class Budiies ("we", "us", or "our") is committed to protecting the privacy and personal information of all users. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA) of the Republic of South Africa.

2. Information We Collect

We collect the following types of personal information depending on your role:

For All Users
  • Full name, title, and preferred name
  • Email address and phone numbers
  • Login credentials (password stored in encrypted form only)
  • Role and account activity
For Parents and Learners
  • South African ID number (for identification purposes)
  • Gender and date of birth
  • Physical address
  • School enrolment and application information
  • Academic records, marks, and performance data
For Schools
  • School name, registration number, and type
  • Contact details and physical address
  • Staff and class information
3. Purpose of Processing

We process your personal information for the following purposes:

  • To create and manage your user account.
  • To facilitate school administration, including learner enrolment, marks recording, homework management, and parent-teacher communication.
  • To verify your identity using OTP verification.
  • To enable schools to process learner applications.
  • To generate academic reports and performance analytics.
  • To ensure the security of the Platform and prevent unauthorized access.
4. Legal Basis for Processing

We process personal information on the following legal grounds under POPIA:

  • Consent: You consent to processing when you register and use the Platform.
  • Contractual necessity: Processing is necessary to provide the services you have requested.
  • Legal obligation: We may process data to comply with South African education regulations.
  • Legitimate interest: To maintain the security and integrity of the Platform.
5. Data Sharing

We do not sell your personal information. Your data may be shared in the following limited circumstances:

  • Within the Platform: Teachers can view learner data for their assigned classes. Parents can view their children's records. School administrators can access data for their school.
  • With your consent: If you explicitly authorize sharing with a third party.
  • Legal requirements: If required by law, regulation, or court order.
6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Passwords are encrypted using industry-standard hashing algorithms.
  • Sessions are secured with HTTP-only cookies and CSRF protection.
  • Login attempts are rate-limited to prevent brute-force attacks.
  • Access to data is restricted based on user roles and permissions.
  • Database credentials and sensitive configuration are stored securely outside of publicly accessible directories.
7. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Platform's services. Schools may retain learner records in accordance with South African education record-keeping requirements. You may request deletion of your account and personal data at any time, subject to any legal retention obligations.

8. Your Rights Under POPIA

As a data subject, you have the right to:

  • Access: Request confirmation of what personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Objection: Object to the processing of your personal information on reasonable grounds.
  • Data portability: Request a copy of your personal information in a structured, commonly used format.
  • Withdraw consent: Withdraw your consent to processing at any time (this may affect your ability to use the Platform).
9. Children's Privacy

The Platform processes personal information of learners, some of whom may be children under the age of 18. This processing is done with the consent of a parent or legal guardian and is strictly limited to educational purposes. Schools and parents are joint responsible parties for learner data.

10. Cookies and Session Data

The Platform uses session cookies to maintain your login state. These cookies are essential for the Platform to function and are automatically deleted when you log out or your session expires. We do not use third-party tracking cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated revision date. Continued use of the Platform after changes constitutes acceptance of the revised policy.

12. Information Officer

For any questions, requests, or complaints regarding your personal information, please contact the platform administrator. You also have the right to lodge a complaint with the Information Regulator of South Africa: