
Legal
Privacy Policy
Draft — an interim version pending the full POPIA-aligned policy (access, export, retention, and deletion processes tracked in issue #13). Do not treat this page as final until that review lands.
What we collect
- Free resource downloads: your name and email, and any optional details you choose to add afterwards (surname, phone, position, industry).
- Full Life Plan Course: your name, email address, contact number and a password (stored securely by our authentication provider — we never see it), the contact permissions you give, your module progress, knowledge-check answers and scores, and the worksheet answers you write.
- Friend invitations (optional): the email addresses you enter, and whether each invitation was delivered.
- Donations (optional): the amount and the name and email you provide. Card details are handled by PayFast and never reach us.
- Contact and newsletter forms: the details you submit.
How we use it
To run the course (your account, saving your progress and worksheets so you can resume on any device), to deliver downloads, to send transactional email (account verification, password resets, receipts, form confirmations), and to support you through the course. We do not sell personal information.
Your contact permissions
When you enrol in the Full Life Plan Course you give a required permission for us to contact you about the course — enrolment, course delivery and course-related support. Receiving news and offers is a separate, optional permission. We record the exact wording you agreed to and when. You can withdraw either permission at any time from your course account page; withdrawing never affects your access to the course or your saved work.
Friend invitations
If you invite friends, each receives a single email that mentions your first name. We use their address only to send that email and to stop you inviting the same person twice. We don't add them to any mailing list.
Who can see it
Your worksheet answers, knowledge-check results and progress are private to your account. ASPIYRE staff can access stored data only to operate and support the service. Our service providers process data on our behalf: Supabase (database, authentication and file storage), Vercel (hosting and anonymous analytics), Resend (email delivery) and PayFast (donations).
Analytics
We count anonymous events — for example that a download or donation started — to understand how the site is used. Names, emails, worksheet answers and quiz answers are never sent to analytics.
Earlier ASPIYRE accounts
If you created an account for our earlier mentorship journey, that account data is still held securely but is no longer used. You can sign in to the Full Life Plan Course with the same email, or ask us to delete it.
How long we keep it
We keep course account data for as long as your account is active, plus a reasonable period afterwards in case you return. You can request deletion at any time — see below — which removes your account, progress and worksheets, except where we're required to keep transaction or communication records for legal or accounting reasons.
Your rights
Under POPIA you can request access to, correction of, export of, or deletion of your personal information, and object to its processing, by emailing hello@aspiyre.co.za. We will confirm what we hold and act on your request in a reasonable time. You may also complain to the Information Regulator of South Africa.
Contact
Questions about this policy: hello@aspiyre.co.za.