Privacy Policy

Alogi is built and operated by Smaks Enterprise (Pty) Ltd, registration number 2024/634827/07, a company registered in South Africa. Under POPIA we are the responsible party for the personal information described here.

Our Information Officer is Richard Semakaleng Ndweni. For anything in this policy, including a request to see or erase your data, write to support@alogi.tech.

This policy covers the Alogi application at app.alogi.tech and the Alogi website.

It does not cover Aqilo, Oriva or Tomara. Those are separate applications with their own accounts, their own databases and their own privacy policies, even though the same company builds them. Nothing you put into Alogi appears in any of them.

Only what the product needs to do its job. In categories:

• Your account — name, email address, the course and institution you tell us about.
• Academic — modules, assignments, exams, assessments, marks, notes and past papers you add or upload.
• Money — budget entries, allowance settings, and records of your subscription and payments.
• Career — skills, CV content, experience, career assessments, saved opportunities and interview practice.
• Wellbeing and habits — the daily check-in, and the habits you choose to track.
• Productivity — planner blocks and focus sessions.
• Community — study groups and anything you post in them.
• Assistant conversations — what you type to the AI assistant, and its replies.
• Technical — sign-in events, and push-notification subscriptions if you enable them.

Alogi does not run advertising, does not sell your information, and does not build a profile of you for anyone else.

The daily check-in asks how you are doing. Answers of that kind can say something about your health, and POPIA treats health information as special personal information — a stricter category with extra conditions attached.

We treat it that way in practice: it is visible only to your own account, it is never surfaced in any staff dashboard, and it is deleted with everything else when you delete your account. Whether the check-in meets the legal definition, and what that requires of us, is To be confirmed — the legal status of wellbeing check-in data as special personal information under POPIA s.26, for a South African privacy lawyer.

To run the product you signed up for — showing your dashboard, tracking your deadlines, matching you to funding, and answering you when you ask the assistant something. Under POPIA that is processing necessary to perform our agreement with you.

We also process a small amount for security and to keep the service working: sign-in events, and records of failed payments. That rests on our legitimate interest in running a service that is not being abused.

When you use the assistant, your message and the relevant context from your account are sent to Anthropic, which runs the Claude models Alogi uses, so that a reply can be generated.

Anthropic does not train its models on this. Its published policy for the commercial API is explicit: “We do not use API data for training.” How long Anthropic itself keeps the request before deleting it is To be confirmed — Anthropic's retention period for commercial API requests — not published as a figure; ask Anthropic if a definite period is required.

Five companies, each doing one job. We do not send your information anywhere else.

Your card details are never seen by Alogi. Payment happens on PayFast’s own checkout, and what comes back to us is the result, not the card.

Yes, some of it goes. Your Alogi data lives in a database hosted in Ireland, not South Africa. The assistant, our email and our hosting run through companies based in the United States. Payments stay in South Africa with PayFast.

POPIA permits transfers like these on specific bases, and the basis that applies to this particular arrangement is To be confirmed — the applicable POPIA s.72 basis for the Supabase, Anthropic, Resend and Vercel transfers — for a South African privacy lawyer.

While your account is open, we keep what you put in — that is the point of a command centre. There is no timer quietly deleting your notes.

You can delete your account yourself, from Settings. It is not a request that goes into a queue. Doing so erases your personal data across every table that holds it — 33 of them — and signs you out. It cannot be undone.

One thing survives, in a changed form: the payment ledger. We keep the record that a payment happened, with your identity removed from it, because financial records have to be retained for accounting and tax. It can no longer be linked back to you.

How long backups and server logs hold a copy after that is To be confirmed — backup and server-log retention periods at Supabase and Vercel for this configuration.

Every table in the Alogi database has row-level security switched on. That means the rule “only your account can read your rows” is enforced by the database itself, not merely by the app in front of it — so a bug in the application cannot hand your marks to somebody else.

The site is served over HTTPS only, with strict transport security. We do not claim to be unbreakable, because nobody honestly can.

Rarely, and never silently. Support staff can open an account to investigate a problem you have reported, and that access is written to an audit log that records who looked and when. Where a staff member needs to view the app as you see it, that session is recorded too.

Staff can also write notes about a support conversation. Our analytics show counts and trends only — never the content of your notes, your check-ins or your assistant conversations.

You can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete your account and everything in it;
• stop processing your information for a particular purpose.

Write to support@alogi.tech. If you are not satisfied with how we handle it, you can complain to the Information Regulator of South Africa, which oversees POPIA.

Alogi is built for tertiary students, and most people using it are adults. If you are under 18, POPIA requires the consent of a parent or guardian before we may process your information. The way we verify that is To be confirmed — the verification mechanism for under-18 consent under POPIA s.35 — process not yet defined.

If this policy changes, the date at the top changes with it. If Alogi starts collecting something it does not collect today, this page will say so before that begins.

support@alogi.tech

Smaks Enterprise (Pty) Ltd · Registration 2024/634827/07 · South Africa