Privacy Policy

Who We Are

OmnitechWorks (Pty) Ltd ("the Company", "we", "us") is registered in South Africa (Reg No. 2026/197863/07) and operates the Braintiq academic platform. This Privacy Policy explains how we collect, use, store, share, and protect the personal information of users ("you") who access our services.

We are committed to full compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and all applicable South African data protection legislation.

Information We Collect

We collect information in the following categories:

• Account information: Name, email address, institution name, and password (stored in hashed form)
• Usage data: Study session duration, modules accessed, flashcard performance, AI query history, focus session logs, and progress metrics
• Device and technical data: Browser type, device type, operating system, IP address, and connection type
• Content you submit: Queries entered into the AI tutoring system, documents or text uploaded for analysis, and notes created within the platform
• Communication data: Emails sent to hello@omnitechworks.com and any form submissions on our website

We do not collect sensitive information such as race, ethnicity, health data, or biometric data.

How We Use Your Information

Your personal information is used for the following lawful purposes:

• Creating and managing your account and session
• Delivering personalised AI tutoring, spaced repetition, and study recommendations
• Operating the Natural Language Pipeline to understand and route your queries accurately
• Improving platform features, performance, and AI model accuracy
• Communicating updates, service changes, and support responses
• Complying with legal obligations and preventing fraud or misuse
• Generating anonymised analytics to understand platform usage patterns

We do not use your personal information for advertising, and we do not sell your data to third parties.

Natural Language Pipeline & AI Data Use

4.1 When you interact with Braintiq's AI tutor, your queries are passed through a Natural Language Pipeline that extracts intent, subject area, and contextual meaning before processing.

4.2 Query content may be used in anonymised and aggregated form to improve model accuracy and refine the platform's understanding of academic subject areas. Identifiable content is not shared with third parties for this purpose.

4.3 As stated in the User Agreement (Clause 7), you retain ownership of content you submit. You grant the Company a non-exclusive, royalty-free licence to use that content to deliver and improve the service.

Sharing Your Information

We share personal information only in the following limited circumstances:

• Service providers: Infrastructure and hosting partners (including Supabase) who process data on our behalf under data processing agreements
• Institutional partners: If your access is granted through an institutional licence, your institution may receive aggregated usage reports — not individual identifiable data
• Legal requirements: Where disclosure is required by law, court order, or regulatory authority
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred — you will be notified of any such change

We do not sell, rent, or trade your personal information to any third party for commercial purposes.

Data Retention

6.1 We retain your personal information for the duration of your active account.

6.2 Following account closure or termination, we retain records for up to 2 years for legal, compliance, and dispute resolution purposes, after which data is securely deleted or anonymised.

6.3 Anonymised and aggregated data may be retained indefinitely for platform analytics and improvement.

Security

7.1 We implement industry-standard security measures including end-to-end encryption in transit (TLS), hashed password storage, access controls, and regular security reviews.

7.2 While we take all reasonable precautions, no digital platform can guarantee absolute security. In the event of a data breach that is likely to harm you, we will notify affected users within the timeframe required by POPIA.

Your Rights Under POPIA

You have the following rights regarding your personal information:

• Right to access: Request a copy of the personal information we hold about you
• Right to correction: Request that inaccurate or outdated information be corrected
• Right to deletion: Request deletion of your personal information, subject to our legal retention obligations
• Right to object: Object to processing of your information where you have grounds to do so
• Right to complain: Lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated

To exercise any of these rights, submit a written request to hello@omnitechworks.com. Requests will be acknowledged within 7 business days and resolved within 20 business days.

Cookies and Local Storage

9.1 Braintiq uses browser local storage and service workers (as part of the PWA architecture) to enable offline functionality and store session state on your device.

9.2 We do not use third-party advertising cookies or cross-site tracking technologies.

9.3 You may clear your browser's local storage at any time through your browser settings, though this will remove your locally stored session data.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When material changes are made, we will notify users via the platform or by email. Continued use of the platform following notification constitutes acceptance of the updated policy.

Contact & Data Protection Officer

For all privacy-related enquiries, requests, or complaints, contact us at:

• Email: hello@omnitechworks.com
• Company: OmnitechWorks (Pty) Ltd
• Registration: 2026/197863/07
• Location: Pretoria, Gauteng, South Africa

For complaints that cannot be resolved directly, you may contact the Information Regulator of South Africa at inforeg.org.za.