Privacy Policy

RE SURE ACADEMY (PTY) LTD (registration number 2025/126392/07) ("RE-SURE Academy", "we", "us", or "our") is committed to protecting the privacy and personal information of our students and website visitors. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This Privacy Policy is issued in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). By using our website or platform, or by registering for one of our courses, you acknowledge that you have read and understood this Policy.

We collect the following categories of personal information from our students and website visitors:

• Name and surname
• Email address
• WhatsApp number and phone number
• Province
• Company name, job title, and years in industry
• Target exam date
• How you heard about us (referral source)
• Your marketing communication preference
• Payment information (processed securely via our payment partner, PayFast)
• Course and exam progress and results — such as chapter progress, quiz and mock exam scores, and login activity on the platform
• Questions you ask the Mr. RE AI tutor, including any photographs you upload to it
• Device and usage information when you use our website or mobile app, such as your IP address, browser or device type, operating system and the pages or screens you visit (see Section 9)
• If you allow it in our Android app: your device's advertising ID, an app identifier assigned by Meta, and in-app events such as installing and opening the app, registering, starting a free trial and subscribing (see Section 9)
• Subscription details when you subscribe through Google Play, such as the plan, trial and renewal dates and the price paid (we do not receive your card details)

We collect and process your personal information for the following purposes:

• To create and administer your student account and provide access to our courses
• To process payments for course access
• To send you communications relating to your account, course progress, and payments
• To verify your identity where required
• To improve our platform and the quality of our course material
• To process subscriptions purchased through Google Play
• To measure how well our advertising on Facebook and Instagram works, so we can spend our advertising budget on the ads that actually help students find us (see Section 9)

Your personal information is stored in an encrypted database hosted by Supabase, a reputable database and infrastructure provider that employs industry-standard security measures, including encryption at rest and in transit.

All payment information is processed securely through PayFast, a licensed and PCI DSS-compliant payment gateway. RE-SURE Academy does not store your full card details on our own systems.

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, alteration, or disclosure.

We do not sell your personal information to any third party, ever. We only share your personal information with trusted service providers where necessary to operate our platform, and with Meta for advertising measurement as described in Section 9, including:

• PayFast— to process and confirm your course and subscription payments. Your card details are entered directly on PayFast's own secure systems and never touch our servers.
• n8n (our workflow automation system) and Brevo (our email delivery service) — together, these send you transactional emails such as registration confirmations, payment confirmations, and course reminders.
• Anthropic, the developer of Claude AI — powers our Mr. RE AI tutor. Questions you ask Mr. RE, and any photos you upload to it, are sent to Anthropic to generate a response. Anthropic does not use this data to train its models on your information without authorization.
• Supabase — our secure database and authentication provider, which stores and processes your account information. See Section 4 for more detail.
• Meta Platforms (Facebook and Instagram) — to measure the effectiveness of our advertising. See Section 9 for exactly what is shared and how to switch it off.
• Google Play — processes subscriptions bought in our Android app. Your payment details are handled by Google and never reach us.
• RevenueCat — manages Google Play subscriptions for our app, including free trials and renewals, and tells us when your subscription is active. If you have allowed ad measurement in the app, RevenueCat also reports trial, subscription and renewal events to Meta on our behalf.

These service providers are only given access to the information necessary for them to perform their function and are contractually required to keep your information secure and confidential.

In addition, when you use the free Mr. RE demo on our public website before registering, we record a one-way cryptographic hash of your IP address in order to enforce the free question limit and prevent abuse of it. We do not store your raw IP address, and this hash is not linked to any account.

Some of our service providers, including Meta, Google, RevenueCat, Anthropic, Brevo and Supabase, process information on servers outside South Africa, including in the United States and the European Union. Where this happens, we rely on these providers being bound by data protection laws or contractual terms that provide a level of protection substantially similar to POPIA, or, for advertising measurement in our app, on your consent.

As a data subject under POPIA, you have the right to:

• Access the personal information we hold about you
• Request that we correct any inaccurate or outdated personal information
• Request that we delete your personal information, subject to any legal or contractual obligations we may have to retain it
• Object to the processing of your personal information in certain circumstances
• Withdraw any consent you have given us at any time, including consent to advertising measurement (see Section 9). Withdrawing consent does not affect processing that took place before you withdrew it.

To exercise any of these rights, please contact us at info@re-sureacademy.co.za.

We will only send you marketing communications where you have opted in to receive them. You may unsubscribe from marketing communications at any time by using the unsubscribe link included in any marketing email, or by contacting us directly at info@re-sureacademy.co.za. Opting out of marketing communications will not affect your access to course-related or transactional communications necessary for the operation of your account.

Essential cookies. Our website and app use essential cookies to keep you logged in, remember your session, and recognise whether you are using the website, the installed web app or our Android app.

Meta Pixel (website).Our website uses the Meta Pixel, a tool provided by Meta Platforms that places cookies in your browser. It tells Meta which pages you visit on our website, including when you view your cart. If you have agreed to receive marketing communications, it also tells Meta when you register. Meta may link this to your Facebook or Instagram account to show you our ads and to report to us how many people our ads reached. You can limit this through your browser's privacy settings, an ad blocker, or your Facebook and Instagram ad preferences.

Meta Conversions API (website). When you pay for a course on our website and have agreed to receive marketing communications, our server tells Meta that the purchase took place, together with the amount, the course, and a scrambled (hashed) version of your email address and account ID so that Meta can match it to the ad you came from. Your email address is never sent to Meta in readable form.

Meta SDK (Android app) — only with your permission. The first time you open our Android app, we ask whether you allow advertising measurement. If you choose Allow, the app shares the following with Meta: your device's advertising ID, an app identifier Meta assigns to your installation, basic device information (such as the device model, operating system version, screen size, mobile network, language and time zone), your IP address, and these events: installing and opening the app, completing registration, and starting your free trial. If you subscribe, RevenueCat reports your trial, subscription and renewals (including the price) to Meta in the same way. If you choose Don't allow, none of this is shared, and the app works exactly the same.

We never share your study progress, quiz or exam results, or the questions you ask Mr. RE with Meta.

You can change your choice at any time under Profile → Ad Measurement in the app. You can also reset or delete your advertising ID in your Android device settings. Meta's use of this information is governed by Meta's own Privacy Policy, available at facebook.com/privacy/policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal information, please contact us at info@re-sureacademy.co.za.