Effective date: 30 September 2026
1. Our privacy approach
Pathcraft is designed for learners, parents and guardians, teachers, tutors, lecturers and institutions. We aim to collect only information reasonably necessary to provide, secure and improve the service. We apply South African privacy law, including the Protection of Personal Information Act, 2013 (POPIA).
2. Information we may process
Depending on how you use Pathcraft, this may include your name, email address, account identifiers, role, date of birth or age information, parent or guardian details, institution or class information, learning activity, quiz and mastery results, uploaded learning material, tutoring requests, support messages, device and security logs, and settings such as data-quality preferences.
3. Children and guardian approval
Pathcraft treats learner accounts under 18 as protected accounts. Where a child’s personal information requires the involvement or consent of a competent person, Pathcraft requires a parent or guardian relationship to be established before protected family, tutoring or other sensitive features are enabled. Guardian access is limited to relevant family and learning-support functions and does not automatically grant unrestricted access to every learner record.
4. Why we use information
We use information to create and secure accounts; provide lessons, quizzes, tutoring, guardian and simulation features; maintain learner progress; adapt explanations to the learner’s requested subject and level; respond to support requests; detect abuse or security threats; meet legal obligations; and improve reliability and educational quality.
5. AI-assisted learning
Pathcraft may use artificial-intelligence services to generate explanations, quizzes, summaries and learning assistance. AI output can be wrong and should be treated as educational support rather than an unquestionable authority. We aim to minimise personal information sent to model providers and keep account permissions, grades, payments and other authoritative records under application controls rather than allowing an AI model to decide them on its own.
6. Uploads and learning material
If you upload notes, documents or images, use material you are entitled to use. Private learner uploads should be stored and processed for the requested learning purpose and should not be made public by default. Do not upload unnecessary identity documents, medical information, banking credentials, passwords or other highly sensitive information.
7. Sharing and service providers
We may use vetted infrastructure, authentication, storage, communications, analytics and AI providers to operate Pathcraft. They should receive only the information needed for their role and remain subject to appropriate contractual and security controls. We do not sell learner personal information to advertisers.
8. Cross-border processing
Pathcraft is South African-operated, but some infrastructure and service providers may process personal information outside South Africa, including in Europe or other permitted locations. Where information is transferred across borders, Pathcraft aims to use safeguards consistent with POPIA section 72 and appropriate contractual and security protections.
9. Security and retention
We use access controls, tenant separation, authentication, encryption in transit, logging and other technical and organisational safeguards appropriate to the service. No internet service can promise absolute security. We retain information only for as long as reasonably needed for the purpose collected, legal obligations, dispute resolution, security and legitimate operational records, after which it should be deleted or de-identified where appropriate.
10. Your choices and rights
Subject to applicable law, you may request access to personal information we hold about you, ask for inaccurate information to be corrected, object to certain processing, withdraw consent where consent is the legal basis, or ask for deletion where we no longer have a lawful reason to retain the information. We may need to verify identity and, for a child, guardian authority before acting on a request.
11. Contact and complaints
For privacy requests, contact [email protected]. You may also lodge a complaint with South Africa’s Information Regulator where applicable.
12. Account deletion
Account holders and authorised guardians may request account deletion where applicable. See Account deletion for the current process.
13. Changes
We may update this policy as Pathcraft develops. Material changes will be reflected on this page with a new effective date.