Privacy Policy

    Last updated: October 2026

    Gaussian Mind Trading & Projects (Pty) Ltd is committed to protecting your privacy and complying with the Protection of Personal Information Act (POPIA), 2013 (Act No. 4 of 2013).

    1. Introduction

    This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the AI Fluency platform. Visiting or using the platform does not constitute consent to optional analytics; that choice is requested separately.

    We are the "Responsible Party" as defined under POPIA and take our obligations seriously to protect your personal information.

    2. Information We Collect

    2.1 Information You Provide

    • Account Information: Full name, email address, mobile number, province, company name, job title, department
    • Profile Information: Avatar image, bio, LinkedIn profile URL (optional)
    • User-Generated Content: AI prompts, saved responses, challenge submissions, community posts
    • Role Information: Platform roles (learner, org admin) stored in a dedicated user_roles table for access control

    2.2 Information We Collect Automatically

    • Usage Data: Pages visited, time spent on lessons, modules completed, quiz scores, daily check-in activity
    • Device Information: Browser type, operating system, IP address, device identifiers
    • Analytics Data: Learning progress, streak tracking, XP earned, streak freeze token usage, badge achievements
    • Game Data: Learning-game responses, selections, correctness and response times, including 'Is It AI?', Brand Showdown, Dead or Alive?, CausalPlay and AI Adoption Game
    • Referral Data: Referral link usage, referred user tracking, commission status
    • Technical Data: Log files, error reports, performance metrics, usual active hour (for smart notification timing)

    3. How We Use Your Information

    We process your personal information for the following lawful purposes under POPIA:

    • Service Delivery: To provide access to learning modules, track your progress, manage assessment and moderation workflows, and issue certificates
    • Account Management: To create and manage your account, authenticate your identity, and provide customer support
    • Payment Processing: To process subscription payments and manage billing through our payment processor
    • Communication: To send transactional emails (welcome, badge earned, weekly digest, streak reminders) and respond to inquiries
    • Platform Improvement: To analyze usage patterns, improve our content, and develop new features
    • Security: To detect and prevent fraud, abuse, and unauthorized access
    • Legal Compliance: To comply with applicable South African laws and regulations
    • Marketing: To send promotional communications (only with your consent, which you can withdraw at any time)

    4. Legal Basis for Processing

    Under POPIA, we process your personal information based on the following lawful grounds:

    • Consent: You have explicitly consented to the processing of your personal information during registration
    • Contractual Necessity: Processing is necessary to fulfill our service agreement with you
    • Legal Obligation: We are required by South African law to process certain information
    • Legitimate Interests: Processing is necessary for our legitimate business interests, which do not override your rights

    5. How We Share Your Information

    We do not sell your personal information. We may share your information with:

    • Service Providers: Cloud hosting, email delivery, and infrastructure providers
    • Organisation Administrators: Your organisation admin can view your learning progress and analytics
    • Legal Requirements: When required by South African law, court order, or government request
    • Business Transfers: In the event of a merger, acquisition, or sale of assets (you will be notified)
    • Community Features: Content you choose to share in forums is visible to other users within your organisation

    Processing by third-party services is also subject to those services’ terms and privacy policies. Anonymise client and personal information before submitting work for AI feedback.

    6. Data Security

    We implement appropriate technical and organizational measures to protect your personal information, including:

    • Sign-in for protected learning and administration pages
    • Organisation-based access policies for team learning data
    • Role-based permissions for administrative actions
    • Account data export and deletion request controls in Settings

    However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

    7. Your Rights Under POPIA

    As a data subject under POPIA, you have the following rights:

    • Right to Access: Request a copy of your personal information we hold
    • Right to Correction: Request correction of inaccurate or incomplete information
    • Right to Deletion: Request deletion of your personal information (subject to legal obligations)
    • Right to Object: Object to the processing of your personal information for direct marketing
    • Right to Restriction: Request restriction of processing under certain circumstances
    • Right to Portability: Request transfer of your data to another service provider
    • Right to Withdraw Consent: Withdraw consent for processing at any time (where consent is the legal basis)

    To exercise any of these rights, please contact us at privacy@acalytica.com. We will respond within 30 days as required by POPIA.

    8. Data Retention

    We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

    • Active Accounts: Data retained while your account is active
    • Deleted Accounts: Account deletion requests remove account information; records may remain where legal retention obligations apply
    • Financial Records: Billing information retained for 5 years as required by South African tax law
    • Analytics Data: Aggregated, anonymized data may be retained indefinitely for research

    9. International Data Transfers

    Your data may be processed on servers located outside South Africa, including by hosting and AI service providers. This page does not claim that all data is stored in South Africa or that the platform holds an independent privacy certification.

    10. Cookies and Tracking Technologies

    We use cookies and similar technologies to:

    • Maintain your session and keep you logged in
    • Remember your preferences and settings
    • Analyze usage patterns and improve our platform
    • Enable PWA (Progressive Web App) functionality

    Optional Google Analytics, website analytics pixels and optional usage-event collection stay off until you accept analytics. Essential sign-in, learning progress, assessment records and security logs remain available regardless of this choice. You can change or withdraw analytics consent below. Withdrawing stops future optional tracking and reloads the page to stop already-loaded scripts; it does not erase data previously collected. Your choice is saved in this browser.

    11. Children's Privacy

    Our platform is intended for professional use by adults (18+). We do not knowingly collect information from children under 18. If we become aware that we have collected personal information from a child without parental consent, we will delete it immediately.

    12. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes by:

    • Posting the new policy on this page with an updated "Last updated" date
    • Sending an email notification to registered users
    • Displaying a prominent notice on the platform

    Your continued use of the platform after changes indicates acceptance of the updated policy.

    13. Contact Us

    If you have questions about this Privacy Policy or wish to exercise your POPIA rights, please contact:

    Gaussian Mind Trading & Projects (Pty) Ltd

    T/A Acalytica

    CIPC Registration: 2013/107695/07

    Information Officer

    Email: privacy@acalytica.com

    Address: 22 Sloane Street, Bryanston, Johannesburg, South Africa, 2191

    Information Regulator: If you believe we have not complied with POPIA, you may lodge a complaint with the Information Regulator of South Africa:

    Website: inforegulator.org.za

    Email: complaints.IR@justice.gov.za

    South African platform · Privacy enquiries: privacy@acalytica.com