Privacy Notice

JanaJoy is operated by Sojana Botha, trading as JanaJoy. For the purposes of data-protection law, Sojana Botha is the data controller of the personal data collected through the Service.

• Account data — your name, email address and login credentials, used to create and secure your account.
• Teaching profile — country, curriculum, grade, subjects, languages and theme preferences you tell us, used to personalise the resources the AI generates for you.
• Content you create — prompts, generated resources, saved plans and uploaded text, used to provide the Service to you.
• Usage and technical data — feature usage counts (for plan limits), device and browser information, and IP address, used for security, fraud prevention and product improvement.
• Support messages — if you contact us, we keep the conversation so we can help you.

Payment card details are collected and processed directly by Paddle (our Merchant of Record) — we never see or store your full card number.

• Performing our contract with you — creating your account, generating resources, enforcing plan limits, providing support.
• Legitimate interests — keeping the Service secure, preventing fraud, and improving features in ways that don't override your rights.
• Consent — where we ask for it, for example optional marketing emails (you can withdraw at any time).
• Legal obligations — tax and accounting records we must keep by law.

• Paddle — our Merchant of Record, which receives the data needed to sell you the product, manage your subscription, process payments, handle tax compliance and invoicing.
• Service providers — hosting and database infrastructure, AI model providers (which process your prompts to generate content), and support tooling, each under contract and only as needed to run the Service.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where the law requires it.

We do not sell your personal data.

Some of our service providers process data outside South Africa. Where data crosses borders, we rely on appropriate safeguards such as contractual protections required by applicable data-protection law.

We keep your data while your account is active. When data is no longer needed — for example after you delete your account — we delete or anonymise it, except where the law requires us to keep records (such as tax records) for longer.

Under South Africa's Protection of Personal Information Act (POPIA) and other applicable laws, you can request access to your personal data, ask us to correct or delete it, object to or restrict certain processing, request a portable copy, and withdraw consent where processing is based on consent. You also have the right to complain to the Information Regulator (South Africa). To exercise any of these rights, contact us through the support details shown in the app and we will respond within one month.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls on our database, and row-level security so teachers can only see their own content. No system is perfectly secure, but protecting your data is a responsibility we take seriously.

We use essential cookies and local storage to keep you signed in and remember your preferences. We do not use advertising or third-party marketing cookies. You can clear cookies in your browser settings, though signing in will no longer persist if you block essential cookies.

If we update this notice, we will post the new version here with a fresh "last updated" date. Material changes will be flagged in the app.