Privacy Policy

1. What this policy covers

This policy explains what information Phasa collects, how we use it, and the choices you have. We process personal information in line with the Protection of Personal Information Act (POPIA) of South Africa and applicable law.

2. Information we collect

• Account information: name, email address and password (passwords are stored securely and never in plain text).
• Profile information: photo, bio, university, faculty, course and year of study that you choose to add.
• Content you post: past papers, notes, questions, discussions and any files you upload.
• Usage data: pages you visit, and technical data such as device and browser information needed to operate the Service.

3. How we use your information

• To create and manage your account and to sign you in.
• To show you your university, faculty and course content.
• To let others find you and your shared study content.
• To keep the Service safe, diagnose problems and prevent abuse.
• To send you service-related updates when necessary.

4. Sharing your information

We do not sell your personal information. Public content you post (such as your profile and shared files) is visible to other users. We share information only:

• with service providers who help run the Service (such as hosting and authentication),
• to comply with the law or a lawful request from an authority, or
• to protect the rights and safety of Phasa and its users.

If you sign in with Google, Google shares only the information needed to identify you, in line with Google's own privacy policy.

5. Storage and security

Your information is stored on secured servers with access controls. We use practical safeguards to protect against unauthorised access, but no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Retention

We keep your account information while your account is active. If you delete your account or content, we remove or anonymise it where possible, except where we are required by law to keep it.

7. Your rights

Under POPIA you have the right to access, correct or delete your personal information, and to object to certain processing. You can update most of your information in Edit Profile and Settings. To request account deletion or exercise any right, email us at legal@phasa.app.

8. Cookies and analytics

We use essential cookies to keep you signed in and to keep the Service working. We may use privacy-respecting analytics to understand how the Service is used. You can control cookies in your browser settings.

9. Children

Phasa is not aimed at children under 13. If you believe a child under 13 gave us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will let you know through the Service. The current version always applies.

11. Contact

Privacy questions or requests: legal@phasa.app. Please also read our Terms of Service.