Privacy Policy

1. Who we are

Biemo is an AI-powered educational platform operated by Agilus (Pty) Ltd, registered in South Africa. This policy explains how we collect, use, and protect the personal information of our users in accordance with the Protection of Personal Information Act (POPIA).

For privacy queries contact us at privacy@biemo.ai.

2. Information we collect

Account information

• Name and email address (provided at registration)
• Password (stored as a bcrypt hash — never in plain text)
• Grade level and learner profile settings
• Role (learner, parent, or administrator)

Learning data

• Lessons completed and quiz scores
• Learning streaks and XP points
• Questions asked to the AI tutor
• Time spent on lessons and practice sessions

Payment information

We do not store card numbers or banking details. Payments are processed by PayFast, a PCI-DSS compliant payment processor. We store only the payment status and subscription period for billing purposes.

Technical data

• Session tokens (stored in secure, HttpOnly cookies)
• Basic usage logs (page visits, errors) for platform stability

3. How we use your information

• To operate your account and provide the Service
• To personalise lesson recommendations based on your progress
• To generate AI tutor responses contextualised to your grade and subject
• To send account-related emails (password resets, subscription receipts)
• To provide parents with visibility into their child's progress (with consent)
• To improve the platform through aggregated, anonymised analytics

We do not sell your personal information to third parties.

4. Children's privacy

Biemo is designed for learners aged 9 and above. For learners under 13, we require verifiable parental consent before an account is created. Parents may request access to, or deletion of, their child's data at any time by contacting us.

We collect only the minimum data necessary to provide the educational service and do not use children's data for advertising.

5. AI and data processing

When you interact with the AI tutor, your questions and the lesson context are sent to the Anthropic Claude API for processing. Anthropic's privacy policy governs how they handle API data. We do not use your AI tutor conversations to train models, and conversations are not shared with other users.

6. Data storage and security

Your data is stored on Microsoft Azure infrastructure hosted in South Africa or the nearest available Azure region. We use encryption in transit (HTTPS/TLS) and at rest. Access to production data is restricted to authorised personnel only.

7. Data retention

We retain your account and learning data for as long as your account is active. If you delete your account, your personal information is removed within 30 days. Anonymised, aggregated analytics data may be retained indefinitely.

8. Your rights (POPIA)

Under POPIA you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to the processing of your information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email privacy@biemo.ai.

9. Cookies

We use a single session cookie to keep you logged in. This cookie is HttpOnly (not accessible to JavaScript), Secure (HTTPS only), and SameSite=Lax. We do not use advertising or third-party tracking cookies.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or via a notice in the platform. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.