Privacy Policy

MyStudyDesk ("we", "us", "our") is operated by Yireh Business Solutions (Pty) Ltd, registered in South Africa. This policy explains what personal information we collect, why we collect it, how we use it, who we share it with, and what rights you have under the Protection of Personal Information Act (POPIA).

If anything in this policy is unclear, email info@mystudydesk.co.za and we will do our best to explain.

1. What we collect

• Account details: your name, email address, password (stored hashed), school, grade, language preference, and optional profile photo.
• Study content: subjects, notes, photos, timetables, test marks, AI conversations, and exam papers you upload for marking.
• Subscription details: your Paystack customer and subscription codes, the plan you chose, and renewal dates. We never see or store your card number.
• Technical data: basic logs (IP address, browser type, pages visited) used for security and to fix bugs.

2. Why we collect it

We only collect what we need to:

• Give you a working account and let you sign in.
• Save your subjects, plans, marks, and papers so you can come back to them.
• Run AI features that respond to your study material.
• Process Pro subscriptions via Paystack.
• Email you transactional messages (sign-up confirmation, password resets, payment receipts).
• Keep the service secure and prevent abuse.

3. Who we share it with

MyStudyDesk is a small operation. We share the minimum amount of your data needed with reputable third-party processors so we can deliver the service:

• Supabase (database, authentication, file storage) — your account and all your study content are stored here. Hosted in Europe.
• Anthropic (Claude AI) — receives the study material you upload and the questions you ask, only at the moment you ask for AI help. Anthropic do not use this data to train their models when accessed via the API.
• Paystack (payments) — receives your email, chosen plan, and amount. Handles your card details directly.
• Resend (email delivery) — receives your email address and the email content we send you.
• Vercel (hosting) — runs the website and app servers.

We do not sell your data, and we do not share it with advertisers.

4. Children

MyStudyDesk is designed for school students, including learners under 18. If you are under 18, you must have your parent or guardian's permission to use MyStudyDesk and to subscribe to Pro. We do not knowingly collect more data from a child than is necessary for the service to work.

Parents or guardians can email info@mystudydesk.co.za to review, correct, or delete their child's data at any time.

5. Your POPIA rights

You have the right to:

• Access the personal information we hold about you.
• Ask us to correct anything that is wrong or out of date.
• Delete your account and all your data (the "Delete account" button on your profile does this).
• Object to how we process your data.
• Lodge a complaint with the South African Information Regulator.

6. Data security

We use HTTPS everywhere, strong password hashing, Row Level Security on our database (so users can only access their own data), and signed URLs for file access. We do not store your card number.

7. Retention

We keep your data for as long as your account is active. If you delete your account, we delete your subjects, notes, papers, marks, friends, AI history, and profile within 30 days. Backups may retain copies for up to 90 days before they are also overwritten.

8. Cookies

We use first-party cookies only, for authentication and to remember your language preference. We do not use third-party tracking or advertising cookies.

9. Changes to this policy

If we materially change this policy, we will email registered users at least 14 days before the change takes effect. The "Last updated" date at the top will always reflect the current version.

10. Contact us

Email info@mystudydesk.co.za for any privacy questions, data requests, or to delete your account if the in-app button is not working for you.