Privacy Policy
Last updated: 27 December 2025
Introduction
PathwaySA ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
This policy is compliant with the Protection of Personal Information Act (POPIA) of South Africa (Act 4 of 2013) and other applicable data protection laws. By using PathwaySA, you consent to the data practices described in this policy.
Responsible Party: PathwaySA
Contact Email: privacy@pathwaysa.co.za
Location: South Africa
Information We Collect
Personal Information You Provide
When you register for an account or use our services, you may voluntarily provide us with the following personal information:
- Account Information: Email address, password, full name
- Profile Information: Location, matric year, education status, biography, profile picture
- Educational Data: Subject marks, APS scores, course information, GPA calculations
- Financial Information: Budget data, expense categories (stored locally on your device)
- Career Information: Career quiz responses, job application tracking
- Community Content: Posts, comments, and interactions on community walls
Information Collected Automatically
When you access our services, we automatically collect certain information:
- Device Information: Browser type, operating system, device type
- Usage Data: Pages visited, features used, time spent on site
- Analytics Data: Session information, interactions, and user journey data
- Error Logs: Technical errors and crash reports to improve our services
Information from Third Parties
If you choose to sign in using Google OAuth, we receive your email address and basic profile information from Google, as authorized by you.
How We Use Your Information
We use your personal information for the following purposes:
- Service Provision: To create and manage your account, provide personalized recommendations, and enable access to our tools and features
- Communication: To send you service updates, respond to inquiries, and provide support
- Improvement: To analyze usage patterns and improve our services, tools, and user experience
- Security: To detect, prevent, and address technical issues, fraud, and security concerns
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
- Community Features: To enable posting, commenting, and interaction on community walls
Data Storage and Security
We implement appropriate technical and organizational measures to protect your personal information:
- Your account data is stored securely using Supabase, a trusted cloud database provider with enterprise-grade security
- Passwords are encrypted and never stored in plain text
- All data transmissions are encrypted using HTTPS/TLS
- Row-Level Security (RLS) ensures users can only access their own data
- Many tool-specific data (like budget calculations, flashcards) is stored locally on your device and never transmitted to our servers
Data Retention: We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time.
Third-Party Services
We use the following third-party services that may process your data:
Supabase (Database & Authentication)
Stores user accounts, profiles, posts, and application data. Supabase is SOC2 Type II certified and GDPR compliant.
PostHog (Analytics)
Collects anonymous usage analytics to help us understand how users interact with our platform. Data is used to improve user experience.
Sentry (Error Monitoring)
Captures technical errors and exceptions to help us identify and fix bugs. Error reports may include technical context but are anonymized.
Google (OAuth Authentication)
If you choose to sign in with Google, we receive basic profile information as authorized by you through Google's OAuth service.
Cookies and Local Storage
We use cookies and local storage to enhance your experience:
- Essential Cookies: Required for authentication and basic site functionality
- Preference Cookies: Remember your settings like dark mode preference
- Analytics Cookies: Help us understand how you use our services
- Local Storage: Stores tool data (flashcards, budget info, etc.) on your device
For more details, please see our Cookie Policy.
Your Rights Under POPIA
Under the Protection of Personal Information Act (POPIA), you have the following rights:
- Right to Access: Request a copy of the personal information we hold about you
- Right to Correction: Request correction of inaccurate or incomplete information
- Right to Deletion: Request deletion of your personal information
- Right to Object: Object to processing of your personal information
- Right to Withdraw Consent: Withdraw consent for processing at any time
- Right to Lodge a Complaint: File a complaint with the Information Regulator
To exercise any of these rights, please contact us at privacy@pathwaysa.co.za. We will respond to your request within 30 days as required by POPIA.
Children's Privacy
PathwaySA is designed for students typically aged 17 and older (Grade 12 and beyond). We do not knowingly collect personal information from children under 18 without parental consent. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
International Data Transfers
Some of our third-party service providers may process data outside of South Africa. When this occurs, we ensure appropriate safeguards are in place to protect your information in accordance with POPIA requirements. These providers maintain security standards and privacy practices that meet or exceed South African requirements.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@pathwaysa.co.za
Subject Line: Privacy Inquiry - PathwaySA
You may also lodge a complaint with the South African Information Regulator:
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg