Privacy Policy

Last updated: March 2026  ·  Effective date: March 2026

1. Who We Are

Curio Learning ("Curio", "we", "us", or "our") is an online educational platform operated in South Africa. We provide exam papers, quizzes, and AI-powered study tools to South African students from Grade R to Grade 12.

Responsible Party (as defined by POPIA): Curio Learning
Contact: hello@curiolearning.co.za
Website: curiolearning.co.za

2. Information We Collect

Information you provide to us:

• Account information — your name, email address, and grade when you register
• Payment information — processed securely via Paystack; we do not store your card details
• Communications — messages you send us via email or contact forms

Information collected automatically:

• Usage data — pages visited, quizzes taken, papers downloaded, time spent on the platform
• Device information — browser type, operating system, screen size
• Cookies and local storage — used to keep you logged in and remember your preferences

3. How We Use Your Information

We use your personal information only for the following purposes:

• To create and manage your account
• To provide access to exam papers, quizzes, and premium features
• To process payments and manage your subscription
• To personalise your experience (e.g. showing papers for your grade)
• To send you important account and service notifications
• To improve our platform and fix technical issues
• To comply with legal obligations under South African law

We will never sell your personal information to third parties.

4. Legal Basis for Processing (POPIA)

Under POPIA, we process your personal information on the following grounds:

• Contract — processing is necessary to provide the services you have signed up for
• Consent — where you have given us explicit permission (e.g. marketing emails)
• Legitimate interest — to improve and secure our platform
• Legal obligation — where required by South African law

5. Cookies

We use cookies and browser local storage to keep you logged in and remember your preferences. We also use Google AdSense, which may set its own cookies to serve relevant advertisements. You can control cookies through your browser settings, though disabling them may affect site functionality.

6. Third-Party Services

We use the following trusted third-party services that may process your data:

• Supabase — database and authentication (data stored on secure servers)
• Paystack — payment processing (PCI-DSS compliant, South Africa)
• Google AdSense — advertising (free and non-premium users)
• Vercel — website hosting
• Cloudflare — DNS and security

Each of these services has their own privacy policy. We only share the minimum data necessary for them to perform their functions.

7. Data Storage and Security

Your data is stored on secure servers provided by Supabase. We implement appropriate technical and organisational measures to protect your personal information against loss, theft, and unauthorised access. However, no system is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

Curio is designed for South African students including minors. We take children's privacy seriously. If you are under 18, you should use this platform with the knowledge of a parent or guardian. We do not knowingly collect more information from minors than is necessary to provide our educational service. Parents may contact us at hello@curiolearning.co.za to request access to or deletion of their child's data.

9. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate information
• Deletion — request that we delete your personal information (subject to legal obligations)
• Objection — object to the processing of your personal information
• Complaint — lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at hello@curiolearning.co.za. We will respond within 30 days.

You may also contact the Information Regulator at:
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg

10. Data Retention

We retain your personal information for as long as your account is active, or as long as necessary to provide our services. If you delete your account, we will delete or anonymise your personal data within 30 days, unless we are required to retain it for legal or financial compliance purposes.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on our website. Your continued use of Curio after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Email: hello@curiolearning.co.za
Website: curiolearning.co.za