Privacy Policy
1. Who is responsible
XtraClass is the responsible party under the Protection of Personal Information Act (POPIA). Our Information Officer can be reached at hello@xtraclass.online.
2. What we collect
About the learner: name, email, phone number, age or school year, gender (optional), country, region and timezone, English level and placement answers, and learning goals. About a parent or guardian: name and contact details. About lessons: schedule, topics, attendance, ratings, teacher feedback and recaps, homework files, Practice results and messages with the teacher. Technical: sign-in details, language and basic device information. Payments: plan and payment status. Card details are handled by PayFast and not stored by us. We do not record video lessons.
3. Why we use it
To give lessons, manage bookings and send booking and reminder emails, track progress, take payments, keep learners safe, give support and improve the Service. We rely on your consent and on what is needed to provide the Service you asked for.
4. Children
For learners under 18 we collect personal information only with the consent of a parent or legal guardian, given when signing up. That consent can be withdrawn at any time.
5. Who sees it
The learner's teachers and our administrators. Service providers who process information for us under agreements: Supabase (database and sign-in), Vercel (website hosting), Daily.co (video classes), Resend (email) and PayFast (payments). We do not sell personal information and do not use it for advertising.
6. Outside South Africa
Some of these providers store information in other countries. We choose providers that protect information to a standard comparable to POPIA.
7. How long we keep it
While the account is active and for a reasonable time after. We delete or anonymise information on request, except records we must keep by law, such as payment records.
8. Security
Information is sent encrypted, and access is limited to people who need it. If there is a security breach that affects you, we will tell you and the Information Regulator as POPIA requires.
9. Your rights
You may ask to see, correct or delete your information, object to how we use it, or withdraw consent, by emailing hello@xtraclass.online. You may also complain to the Information Regulator (South Africa): complaints.IR@justice.gov.za.
10. Browser storage
We use your browser's storage to keep you signed in and to remember your language and settings. We do not use advertising trackers.
11. Changes
We may update this policy and will change the version number when we do.
12. Sign in with Google
If you choose "Continue with Google", Google shares your name, email address and profile picture with us. We use them only to create and sign you in to your XtraClass account. We do not ask for access to your Gmail, Drive, Calendar, contacts or anything else in your Google account, and we do not share Google data with anyone else or use it for advertising. You can remove XtraClass's access at any time in your Google account settings.