Legal

Privacy Policy

Learn how NavyBlue collects, uses, and protects your information while helping you prepare for CAPS exams.

1. Introduction

Last updated: 2024-09-01.

NavyBlue ("we", "us", or "our") operates the NavyBlue mobile application and landing page. This Privacy Policy explains how we collect, use, disclose, and protect information when South African learners use the Service.

We comply with the Protection of Personal Information Act (POPIA), the Consumer Protection Act, and other applicable South African laws.

2. Responsible Party (POPIA)

NavyBlue acts as the Responsible Party for personal information processed through the Service.

You may contact our team using the details provided at the end of this policy to exercise your POPIA rights.

3. Information We Collect

Information you provide

  • Support requests submitted via email.
  • Future account details (if introduced): name, email, grade, school, or province - all optional extras that would require separate consent.

Information collected automatically

  • Device diagnostics such as model, operating system, app version, screen resolution, and network operator.
  • Usage analytics (e.g., papers viewed, feature adoption, session duration, CTA clicks).
  • Crash reports and anonymised performance metrics via PostHog.

Stored locally on your device

  • Your marked papers and practice history.
  • Topic-level performance breakdowns and progress tracking.
  • Downloaded examination papers for offline use.
  • Personal preferences such as last viewed paper or subject filters.

We do not collect

  • South African ID numbers.
  • Payment information.
  • Precise GPS location, photos, microphone input, SMS messages, or contact lists.

4. How We Use Information

  • Provide and maintain the Service, including saving your local progress and topic breakdowns.
  • Respond to support requests and communicate important updates.
  • Improve the Service through aggregated analytics, feature testing, and crash diagnostics.
  • Comply with legal obligations and enforce our Terms of Service.

5. Legal Basis for Processing

  • Consent: You provide consent by using the App and accepting this Policy.
  • Legitimate interest: We analyse anonymised data to improve study features, prevent fraud, and ensure platform security.
  • Legal obligation: We retain records necessary to comply with South African regulations and lawful requests from authorities.

6. Data Sharing and Disclosure

We do not sell personal information, and we do not share exam performance data with advertisers, schools, or parents without consent.

Service providers

  • PostHog for privacy-friendly analytics (aggregated and anonymised).
  • Google Play for distributing the Android app.

Legal requirements

  • We may disclose information if required by law, court order, or to respond to lawful requests from regulatory bodies.

7. Data Retention

Locally stored performance data remains on your device until you delete the App or clear its data.

Aggregated analytics and support communications are retained only as long as necessary to operate the Service, comply with POPIA, and resolve disputes.

8. Data Security

We use reasonable administrative, technical, and physical safeguards to protect information. While no system is perfectly secure, we monitor for vulnerabilities and enhance protections where practical.

9. Your POPIA Rights

You may exercise the following rights under POPIA:

  • Request access to personal information we hold about you.
  • Ask for corrections or deletions of inaccurate data.
  • Object to or restrict certain processing activities.
  • Withdraw previously granted consent.

10. Children and Teens

The Service is designed for learners aged 13 and older. We do not knowingly collect information from children under 13. Parents or guardians may request deletion of their child's data by contacting us.

11. International Data Transfers

Where data leaves South Africa (for example, PostHog analytics or Google Play services), we implement appropriate safeguards consistent with POPIA Section 72. By using the Service, you consent to these necessary transfers.

12. Cookies and Tracking Technologies

The landing page uses privacy-friendly analytics cookies (via PostHog). We do not use advertising cookies or third-party trackers.

The mobile App does not employ traditional cookies but may use anonymised device identifiers to support analytics and crash reporting.

13. Third-Party Services

Our Service links to Google Play. These services operate under their own privacy policies, and we encourage you to review them before participating.

14. Data Breach Response

If a data breach occurs, we will notify the Information Regulator within 72 hours (as required by POPIA) and inform affected users as soon as reasonably possible, including steps taken and recommended actions.

15. Analytics Details

We use PostHog to analyse anonymised usage data such as button clicks, session duration, and feature adoption. The platform does not store personally identifiable information or individual performance scores.

You may request an opt-out from analytics by contacting us; however, doing so may limit our ability to improve the Service.

16. Changes to This Policy

We may revise this Privacy Policy to reflect product updates or legal requirements. Significant updates will be communicated via the App or website. Continued use after any update constitutes acceptance of the revised policy.

17. Contact

For privacy requests, concerns, or complaints, please use the contact details below:

  • Email: dearnavyblue@gmail.com