Privacy Policy

Version 1.0 | Effective March 2026 | POPIA compliant | Governed by the laws of the Republic of South Africa

Who We Are

OmnitechWorks (Pty) Ltd ("the Company", "we", "us") is registered in South Africa (Reg No. 2026/197863/07) and operates the Braintiq academic platform. This Privacy Policy explains how we collect, use, store, share, and protect the personal information of users ("you") who access our services.

We are committed to full compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and all applicable South African data protection legislation.

Information We Collect

We collect information in the following categories:

• Account information: Name, email address, institution name, and password (stored in hashed form)
• Usage data: Study session duration, modules accessed, flashcard performance, AI query history, focus session logs, and progress metrics
• Device and technical data: Browser type, device type, operating system, IP address, and connection type
• Content you submit: Queries entered into the AI tutoring system, documents or text uploaded for analysis, and notes created within the platform
• Communication data: Emails sent to hello@omnitechworks.com and any form submissions on our website

We do not collect sensitive information such as race, ethnicity, health data, or biometric data.

How We Use Your Information

Your personal information is used for the following lawful purposes:

• Creating and managing your account and session
• Delivering personalised AI tutoring, spaced repetition, and study recommendations
• Operating the Natural Language Pipeline to understand and route your queries accurately
• Improving platform features, performance, and AI model accuracy
• Communicating updates, service changes, and support responses
• Complying with legal obligations and preventing fraud or misuse
• Generating anonymised analytics to understand platform usage patterns

We do not sell your personal data. Contextual or personalized advertisements displayed to free-tier users are delivered by third-party advertising partners such as Google AdSense in compliance with applicable privacy standards.

Natural Language Pipeline & AI Data Use

Queries you submit to Braintiq are processed through our Natural Language Pipeline. Please do not include sensitive personal information - such as ID numbers, banking details, or medical information - in your queries.

4.1 When you interact with Braintiq's AI tutor, your queries are passed through a Natural Language Pipeline that extracts intent, subject area, and contextual meaning before processing.

4.2 Query content may be used in anonymised and aggregated form to improve model accuracy and refine the platform's understanding of academic subject areas. Identifiable content is not shared with third parties for this purpose.

4.3 As stated in the User Agreement (Clause 7), you retain ownership of content you submit. You grant the Company a non-exclusive, royalty-free licence to use that content to deliver and improve the service.

Sharing Your Information

We share personal information only in the following limited circumstances:

• Service providers: Infrastructure and hosting partners (including Supabase) who process data on our behalf under data processing agreements
• Institutional partners: If your access is granted through an institutional licence, your institution may receive aggregated usage reports - not individual identifiable data
• Legal requirements: Where disclosure is required by law, court order, or regulatory authority
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred - you will be notified of any such change

We do not sell, rent, or trade your personal information to any third party for commercial purposes.

Data Retention

6.1 We retain your personal information for the duration of your active account.

6.2 Following account closure or termination, we retain records for up to 2 years for legal, compliance, and dispute resolution purposes, after which data is securely deleted or anonymised.

6.3 Anonymised and aggregated data may be retained indefinitely for platform analytics and improvement.

Security

7.1 We implement industry-standard security measures including end-to-end encryption in transit (TLS), hashed password storage, access controls, and regular security reviews.

7.2 While we take all reasonable precautions, no digital platform can guarantee absolute security. In the event of a data breach that is likely to harm you, we will notify affected users within the timeframe required by POPIA.

Your Rights Under POPIA

You have the following rights regarding your personal information:

• Right to access: Request a copy of the personal information we hold about you
• Right to correction: Request that inaccurate or outdated information be corrected
• Right to deletion: Request deletion of your personal information, subject to our legal retention obligations
• Right to object: Object to processing of your information where you have grounds to do so
• Right to complain: Lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated

To exercise any of these rights, submit a written request to hello@omnitechworks.com . Requests will be acknowledged within 7 business days and resolved within 20 business days.

Cookies, Advertising and Local Storage

9.1 Braintiq uses browser local storage and service workers (as part of the PWA architecture) to enable offline functionality and store session state on your device.

9.2 Third-party advertising partners, including Google AdSense, serve advertisements on the platform to support our free tier. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to Braintiq or other websites on the internet.

9.3 Google's use of advertising cookies enables it and its partners to serve ads to users based on their visits to our site and other sites on the internet.

9.4 Users may opt out of personalized advertising by visiting Google Ads Settings (https://policies.google.com/technologies/ads) or by visiting the Digital Advertising Alliance opt-out portal at https://www.aboutads.info/choices/.

9.5 You may also clear or block cookies and browser local storage through your browser settings, although certain platform features and offline functionality may be affected.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When material changes are made, we will notify users via the platform or by email. Continued use of the platform following notification constitutes acceptance of the updated policy.

Contact & Data Protection Officer

For all privacy-related enquiries, requests, or complaints, contact us at:

• Email: hello@omnitechworks.com
• Company: OmnitechWorks (Pty) Ltd
• Registration: 2026/197863/07
• Location: Pretoria, Gauteng, South Africa

For complaints that cannot be resolved directly, you may contact the Information Regulator of South Africa at inforeg.org.za.