Privacy Policy
Last updated: 6 August 2026
ExamAce ("we", "us", "our") respects your privacy and is committed to handling your personal information responsibly, in line with South Africa's Protection of Personal Information Act (POPIA). This policy explains what we collect, why, and how it's protected.
1. Information we collect
| What | Why |
|---|---|
| Mobile phone number | Used to identify your account and log you in — no email required |
| A hashed PIN (or one-time code) | Authenticates you on return visits; the PIN itself is hashed and never stored in plain text |
| Email address (optional) | Only if you provide it, e.g. as a fallback login channel or for account communication |
| Grade and subject selections | To tailor tutoring content, exams, and marking to your level and curriculum |
| Subscription and payment status | To grant access to the subjects you've subscribed to. Card details are handled entirely by Yoco, our payment processor — we never see or store your card number |
| Chat questions and answers you submit | Processed to generate tutoring responses; may be retained to maintain your session history within the app |
| Basic usage data (e.g. pages visited, feature usage) | To understand how ExamAce is used and improve it |
2. How we use your information
- To provide the tutoring service: generating answers, exams, memos, and marking feedback.
- To authenticate you and remember your subscription status across visits.
- To process payments via Yoco and send you payment confirmations.
- To communicate with you about your account (e.g. subscription expiry reminders).
- To improve ExamAce's content and features.
3. Third parties we share data with
- Yoco — processes your payment. We only receive confirmation of payment success/failure, not your card details.
- AI model providers — process the questions and content you submit in order to generate tutoring responses.
- Supabase — our database provider, hosting your account and subscription records securely.
We do not sell your personal information to third parties.
4. Your rights under POPIA
You have the right to request access to the personal information we hold about you, ask us to correct inaccurate information, or ask us to delete your account and associated data. To exercise any of these rights, email admin@examace.co.za.
5. Data retention
We retain your account information for as long as your account is active, and for a reasonable period afterwards in case you return, or as required by law (e.g. for payment/tax records). You can request deletion at any time.
6. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and hashed (not plain-text) PIN storage. No system is 100% secure, but we take reasonable steps to protect your information.
7. Children's use
ExamAce is intended for Grade 8–12 learners. If you are under 18, we encourage a parent or guardian to be aware of your use of the service, particularly regarding any subscription payments.
8. Changes to this policy
We may update this policy from time to time. We'll update the "Last updated" date above when we do.
9. Contact
Questions about this policy, or to exercise your POPIA rights, email admin@examace.co.za.