Mirembe Muse (Pty) Ltd ("we", "us") operates the K53 DrillMaster app and website. We are the "responsible party" under the Protection of Personal Information Act 4 of 2013 ("POPIA"). We process your personal information lawfully, transparently, and only for the purposes below.
Our AI tutor uses Anthropic's Claude to explain answers. Your question and minimal relevant context are sent to Anthropic's API for processing under their data-processing agreement. We do not use your data to train AI models and never sell it.
We do not sell your personal information. We use trusted processors under agreement: Supabase (database/auth), Anthropic (AI tutor), our payment processor (PayFast / Paystack — PCI-DSS compliant), Vercel (hosting), and email delivery (Resend). Some process data outside South Africa under POPIA s72 safeguards (adequate protection / binding agreements / your consent).
We only send you electronic marketing (email/SMS) where the law allows — with your consent, or where you are an existing customer and it relates to our own similar products, with an opt-out given at sign-up and in every message. Every marketing message identifies us and includes a one-click way to opt out, and we honour opt-outs permanently across all our brands. You can opt out any time via the link in any message or by emailing privacy@mirembemuse.co.za.
Learner-driver users may be under 18. Where we knowingly process the personal information of a child, we require the consent of a competent person (a parent or legal guardian). If you are under 18, please use K53 DrillMaster with your parent or guardian's permission. A parent/guardian may contact us at any time to access, correct, or delete their child's information. We do not use children's data for marketing.
You have the right to access, correct, or delete your personal information; to object to processing (including direct marketing); to data portability; to withdraw consent; and to complain to the Information Regulator. To exercise a right, email privacy@mirembemuse.co.za — we respond within 30 days.
We keep personal information only as long as needed for the purposes above, then delete or anonymise it. Payment records are kept for 5 years as required by South African tax law; account/learning data while your account is active plus a short wind-down period after a deletion request.
We protect your information with row-level security, encryption in transit (TLS) and at rest, least-privilege access, rate limiting, and encrypted off-site backups (POPIA s19). No system is perfectly secure, but we take reasonable, appropriate measures.
If a breach poses a risk of harm, we will notify the Information Regulator and affected users as required by POPIA.
You may request access to records under the Promotion of Access to Information Act 2 of 2000 (PAIA). Contact our Information Officer for our PAIA manual and procedure.
We may update this policy; the "last updated" date shows the latest version. Material changes will be communicated in-app or by email.
Information Officer: Nandawula Kabali-Kagwa · privacy@mirembemuse.co.za
Company: Mirembe Muse (Pty) Ltd, South Africa · POPIA Reg. No.: 2026-005658
Information Regulator of South Africa: inforeg.org.za · complaints@inforeg.org.za · Tel: 010 023 5200