Privacy Policy

What we keep depends on which features you use. You can explore most of BokamosoEd without an account.

• Without an account: your quiz answers, matches, saved careers, saved bursaries and completed activities are stored only on your own device (in your browser). We do not receive them.
• When you create an account: your email address, username, display name and password (stored in scrambled, hashed form, never as plain text). If you sign in with Google, we receive your email address and basic Google profile details.
• Optional profile details: your school grade and a profile picture, if you choose to add them.
• Your learner data: career quiz answers and results, saved careers, saved bursaries, activity progress and preferences, so they are available on any device.
• Technical information: our hosting and sign-in providers automatically process basic information such as your IP address, browser and device type, and error logs. We use your IP address to limit repeated sign-in attempts and stop abuse.

BokamosoEd does not currently have a contact or feedback form, and we do not use advertising or marketing trackers.

• To create and manage your learner account
• To show personalised career matches and save your quiz results
• To save the careers and bursaries you bookmark
• To keep the platform secure and prevent abuse, spam and fake accounts
• To fix problems and improve BokamosoEd
• To reply when you contact us
• To send service emails, such as confirming your email address or resetting your password

We do not sell your personal information, and we do not send marketing emails.

We rely on a small number of trusted providers to run BokamosoEd:

• Lovable and Lovable Cloud: hosting the website and providing our secure database, file storage (for profile pictures), sign-in and account emails.
• Google: only if you choose "Continue with Google" to sign in.
• Cloudflare Turnstile: a security check on sign-in, sign-up and password reset forms that helps tell people apart from bots.
• Google Fonts: to display the fonts on our pages, which means your browser connects to Google's servers.

Some of these providers may store information outside South Africa. We choose providers that apply recognised security safeguards.

• All connections to BokamosoEd are encrypted.
• Passwords are handled by our sign-in provider and are never stored in readable form.
• Access rules in our database mean each learner can only see and change their own account data.
• Profile pictures are stored privately, not as public links.
• Sign-in, sign-up and password reset are protected by a security check and limits on repeated attempts.

No system is perfectly secure, but we take reasonable steps to keep your information safe.

We keep your account information for as long as your account is open. Information stored only on your device stays there until you clear your browser data. Basic security logs are kept only for a short time.

To delete your account and all learner data linked to it, email us from the address you signed up with and ask for deletion. We will confirm and remove your information within 30 days, unless the law requires us to keep something.

South Africa's Protection of Personal Information Act (POPIA) gives you the right to:

• Ask what personal information we hold about you
• Ask us to correct information that is wrong or out of date (you can also edit most of it on your account page)
• Ask us to delete your information
• Object to how we use your information
• Complain to the Information Regulator of South Africa if you are unhappy with how we handle your information

If you are under 18, we encourage you to talk to a parent or guardian about using BokamosoEd and creating an account.

We may update this policy when BokamosoEd changes. The date at the top shows when it was last updated.

For privacy questions, data requests or account deletion:

Email us at webcoreafrica@gmail.com.