Privacy Policy

IgniteMD ("we", "us", "our") operates the IgniteMD Connect online learning platform for South African high school learners. We are the responsible party for the personal information processed through this platform under the Protection of Personal Information Act, 2013 ("POPIA"). Use of the platform is also subject to our Terms and Conditions.

Information Officer contact: support@ignitemd.co.za

When you register or use the platform we collect:

• Identity and contact details: name, email, phone, date of birth, ID number, school, grade, province.
• Account credentials: PIN (stored hashed) and authentication tokens.
• Educational records: subjects, grades, assignment submissions, attendance, tutor notes.
• Payment information: amount, date, reference (we do not store card details, these go directly to Paystack).
• Usage data: pages visited, login times, device type, for security and product improvement.

• To create and operate your learner account.
• To deliver tutoring, assignments, grading and exposure programmes.
• To process registration and subscription payments.
• To send service communications (announcements, reminders, password resets).
• To comply with legal obligations (tax records, child-safety reporting).
• To detect fraud and abuse, and to improve the platform.

We process your information based on (a) your consent given at registration, (b) the performance of our contract with you to provide tutoring, (c) compliance with legal obligations, and (d) our legitimate interest in operating a safe, working platform.

If you are under 18, a parent or legal guardian must consent to your registration and to our processing of your personal information. By registering, you confirm that such consent has been given. We will provide parental access to academic records on request.

We share personal information only with:

• Service providers who help us run the platform (Google Firebase for hosting and database, Resend for email, BulkSMS for SMS, Paystack for payments). Each is bound by data processing terms.
• Your assigned tutors and mentors, limited to what they need to support you.
• Regulators or law enforcement where we are legally required to do so.

We do not sell your personal information, and we do not share it with advertisers.

Some of our service providers host data outside South Africa (e.g. Google Cloud regions in the EU/US). Where this happens, we rely on providers that have binding data protection commitments equivalent to POPIA.

We retain your account and academic records for as long as your account is active and for up to 5 years after deactivation, to support records requests and comply with tax and consumer-protection law. You may request earlier deletion (see section 10).

We use encrypted transport (HTTPS), role-based access controls, least-privilege service accounts, audit logging, and regular reviews of our infrastructure. PINs are hashed and never stored in clear text. Only authorised IgniteMD staff can access learner records.

Under POPIA you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion or destruction of your information (subject to legal retention).
• Object to processing for direct marketing.
• Withdraw consent at any time (this does not affect past lawful processing).
• Lodge a complaint with the Information Regulator (South Africa).

To exercise any of these rights, email support@ignitemd.co.za.

Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 · inforeg@justice.gov.za

We use first-party cookies and local storage for authentication and session management. We do not use third-party advertising trackers.

We may update this policy as our services evolve. Material changes will be announced on the platform and dated above. Continued use of IgniteMD after a change means you accept the updated policy.