Privacy Policy

1. Who handles your information

AI Robotics Coding Academy Africa is operated by AI ROBOTICS CODING ACADEMY AFRICA (PTY) LTD, registration number 2025/938279/07. Its business address is 10778 Sandbur Street, Centurion, Centurion, Gauteng, 0187, South Africa. Information Officer contact: hello@airoboticscodingacademy.africa.

Schools provide learner and staff information for enrolment. The school’s and Academy’s respective roles as responsible party or operator depend on who determines each processing purpose and on the relevant school agreement. Those roles must be documented; this notice does not assume that every school arrangement is identical.

2. Information and sources

School records may include names, account email addresses, user identifiers, role, school, class enrolment, grade, academic year and active status. The Academy receives these details from schools or authorised account-provisioning processes.

The application records lesson identifiers, completion status, positions and timestamps, and saved pathway practice-test attempts and results. Firebase Authentication handles sign-in credentials. Passwords are not part of the learner profile or reporting tables.

An enquiry may contain an adult’s name, reply email, school, role and message. The current form prepares an email locally; the Academy receives it only if you send it using your mail application. Hosting and connected resource providers may receive technical request details such as IP address and browser information.

3. Purposes and authority

Information is used to authenticate accounts, show the correct grade, maintain learning progress, provide permitted school reporting, answer support enquiries and protect the service. Required school/account information is necessary for a personalised learning account; public information pages do not require enrolment.

The applicable lawful basis must be identified for each purpose and school relationship. Consent is not the only possible basis under POPIA, and a sign-in or general contact checkbox does not establish all necessary authority. Processing children’s information also requires the specific safeguards described on the POPIA page.

Responding to an enquiry is separate from marketing. The contact checkbox concerns responding to that enquiry; it is not a subscription to promotional messages.

4. Access and service providers

Authorised super administrators can access platform records. School administrators are limited to their school, and teachers to their authorised class records. Staff may download permitted reports and must protect those copies under school procedures.

Google Firebase supplies authentication, database and hosting services. Google Fonts and externally hosted lesson images or links may connect your browser to other providers; those providers may process technical request information under their own terms.

General enquiry drafts are addressed to hello@airoboticscodingacademy.africa and copied to me@siphiwemabusela.com. A direct privacy request below is not pre-addressed to that copied recipient. Information may also need to be disclosed where lawfully required.

5. Browser storage and external resources

Firebase sign-in persistence uses browser storage so a session can remain available between visits. Lesson drafts use session storage for temporary step, answer and activity state. Sign out on shared devices; clearing browser storage may remove sign-in state and unsaved drafts.

AI reflection text and the separate AI practice test are session-only, not permanent assignment submissions to the school database. Saved lesson completions and pathway test results are separate cloud records.

The current application does not include an advertising tracker or Firebase Analytics integration. This is not a promise that no service provider receives technical logs. Third-party linked pages have their own privacy practices.

6. Retention and international processing

No automatic account or cloud learning-record deletion period is currently implemented. Records can remain after a lesson is completed or a grade changes. The Academy and school must confirm a documented retention schedule and appropriate deletion or de-identification process; indefinite retention should not be inferred as the policy.

Retention should be limited to the educational, support and lawful recordkeeping needs involved. A deletion request may be subject to an applicable legal duty to keep particular records, with the reason explained. Exported reports and received emails must also be considered.

Cloud services and external resources may involve processing outside South Africa. The applicable locations, provider agreements and safeguards must be confirmed for the deployment. This notice does not claim that all information stays in South Africa. POPIA section 72 governs relevant cross-border transfers.

7. Safeguards and incidents

The application uses authenticated accounts and database access rules to restrict school records. These controls reduce risk but do not guarantee that a breach is impossible. Account access, staff handling, provider arrangements and incident procedures require ongoing review.

Report suspected unauthorised access through the privacy contact without attaching sensitive records to a first email. The responsible party must assess an incident and, where required by POPIA, notify the Information Regulator and affected people as soon as reasonably possible, subject to lawful exceptions.

8. Your choices and rights

You may ask whether information about you is held, request access, seek correction or lawful deletion, or raise an objection where applicable. If processing relies on consent, you may ask about withdrawing it and the consequences for the relevant service. These rights are subject to the Act’s conditions and lawful retention requirements.

Contact your school or the Academy with a brief description of the request. A parent or other competent person can act for a child where legally authorised. We may need proportionate identity or authority verification; do not send identity documents or passwords in your initial message.

You may complain directly to the Information Regulator. You do not have to waive that right or accept these terms to make a privacy request.

Official information

• Protection of Personal Information Act 4 of 2013
• Information Regulator: POPIA guidance
• Information Regulator: complaints