Privacy & POPIA
Privacy Policy
Last updated: 18 June 2026
NexiStudy (“we”, “us”) is a study platform for South African learners, operated by Forge Systems. This policy explains what personal information we collect, how we use and protect it, and the rights you have under the Protection of Personal Information Act (POPIA). We only collect what we need to run NexiStudy, and we never sell your information.
1. Information we collect
- Account details — your name, email address and a securely hashed password (we never store your actual password). If you sign in with Google, we receive your name and email from Google.
- Learning profile — your grade, school (optional), subjects, preferred language, and the marks/APS you choose to enter.
- Learning activity — practice quiz results and the topic mastery we calculate from them, and (for teachers) class membership.
- Tutor conversations — the questions and any images you send to Nexi, our AI tutor, so it can respond.
- Reviews — if you submit one, your chosen display name, grade, rating and comment.
- Payment information — if you subscribe, payments are handled by PayFast. We do not see or store your card details; we keep only a subscription reference and status.
- Usage analytics — anonymous page-view counts with a random visitor identifier. This holds no name, email or IP address.
2. How and why we use it
We process your information to:
- create and secure your account and log you in;
- provide the tutor, practice, APS calculator, past papers and teacher tools;
- personalise your experience (e.g. your weak-spots map);
- process subscriptions and keep your plan up to date;
- understand overall usage so we can improve NexiStudy;
- respond to bug reports and messages you send us.
Under POPIA we rely on your consent (given when you create an account and use the service), the performance of our agreement with you, and our legitimate interest in running and improving a safe, working product.
3. Who we share it with
We don't sell your information. We share it only with the service providers that make NexiStudy work, and only as far as needed:
- Supabase — secure database hosting.
- Vercel — website hosting and delivery.
- PayFast — payment processing for subscriptions.
- Anthropic — powers the Nexi AI tutor; the messages you send to Nexi are processed by their API to generate a reply.
- Google— only if you choose “Sign in with Google” or a teacher shares a class link to Google Classroom.
Some of these providers process data on servers outside South Africa. Where that happens, we rely on providers that offer protection comparable to POPIA. We may also disclose information if required by law.
4. A note on the AI tutor
What you type or upload to Nexi is sent to our AI provider to generate an answer. Please don't share sensitive personal information (such as ID numbers, financial details or anyone's health information) in tutor conversations — keep it to your studies.
5. How we protect your information
Passwords are hashed, our database is locked down and reachable only through our secure server, traffic is encrypted over HTTPS, and access to systems is limited. No online service can promise to be completely unbreakable, but we take reasonable, up-to-date steps to keep your information safe and to act quickly if anything goes wrong.
6. How long we keep it
We keep your account information for as long as your account is active. If you ask us to delete your account, we remove your personal information except where we're legally required to keep certain records (for example, payment records for tax purposes).
7. Learners under 18
NexiStudy is used by school learners, many of whom are under 18. If you are under 18, please use NexiStudy with the knowledge and consent of a parent or guardian. A parent or guardian may contact us at any time to access, correct or delete their child's information.
8. Your rights under POPIA
You have the right to:
- ask what personal information we hold about you;
- ask us to correct or update it;
- ask us to delete your account and information;
- object to certain processing or withdraw your consent;
- lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).
To exercise any of these, email us at nexi@forgesystems.co.za.
9. Cookies & local storage
We use a small number of essential cookies to keep you signed in, and your browser's local storage to hold an anonymous identifier for page-view counting. We don't use third-party advertising or tracking cookies.
10. Changes to this policy
We may update this policy as NexiStudy grows. When we make a meaningful change, we'll update the date at the top of this page.
11. Contact us
Questions about your privacy, or want to exercise a right above? Email nexi@forgesystems.co.za or use our contact page.
This policy describes our current practices in good faith. It is provided for transparency and is not legal advice.