TagMyKid (Pty) Ltd ("we," "us," or "our") is committed to protecting your privacy in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African laws.
1. Information We Collect
1.1 Parent/Guardian Information
- Full name and surname
- Email address
- WhatsApp-enabled phone number
- Account credentials (encrypted)
1.2 Child Information
- First name and surname
- School name
- Grade and class
- Unique tag code (generated by system)
1.3 Automatically Collected Information
- Device information (model, OS version)
- App usage data
- Tag scan events (timestamp, location if provided)
- Error logs and diagnostics
2. How We Use Your Information
We use collected information to:
- Provide emergency contact functionality when tags are scanned
- Generate and manage QR tags
- Process subscription payments via Paystack
- Send email notifications when tags are scanned
- Improve and maintain the Service
- Comply with legal obligations
- Prevent fraud and abuse
3. Legal Basis for Processing (POPIA Compliance)
We process your information based on:
- Consent: You explicitly agree during registration
- Contract: To provide the Service you subscribed to
- Legitimate Interest: To improve our Service and prevent fraud
- Legal Obligation: To comply with South African law
4. Data Storage and Security
4.1 Where We Store Data
- Hosted on Google Firebase servers (international data centers)
- Encrypted in transit using HTTPS/TLS
- Encrypted at rest using industry-standard encryption
- Access restricted to authorized personnel only
4.2 Security Measures
- Firebase Authentication with secure password hashing
- Role-based access controls
- Regular security audits
- Automated backups
4.3 Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion at any time by contacting us at support@tagmykid.co.za.
5. Information Sharing
We share your information only in these limited circumstances:
5.1 With Finders (When Tags Are Scanned)
- Child's first name and surname
- School name
- Grade and class
- Tag code
- Your email is NEVER directly visible to finders
5.2 With Service Providers
- Google Firebase: Data hosting and authentication
- Paystack: Payment processing (they never see card details stored on our servers)
- Formspree: Email notification delivery
5.3 Legal Requirements
We may disclose information if required by South African law, court order, or government regulation.
6. Your Rights Under POPIA
You have the right to:
- Access: Request a copy of your personal information
- Correction: Update incorrect or incomplete information
- Deletion: Request deletion of your account and data
- Objection: Object to processing of your information
- Portability: Request your data in a portable format
- Withdraw Consent: Revoke consent for data processing
To exercise these rights, email us at support@tagmykid.co.za
7. Children's Privacy
- TagMyKid is designed for parents and guardians (18+)
- We collect minimal information about children (name, school, grade)
- Parents control all child information
- Children cannot create accounts or use the app directly
- No behavioral tracking or profiling of children
8. International Data Transfers
Your data may be stored on servers located outside South Africa (Google Firebase uses international data centers). We ensure appropriate safeguards are in place through:
- Google's compliance with international data protection standards
- Encryption in transit and at rest
- Contractual data protection clauses
9. Cookies and Tracking
Our website uses:
- Essential cookies: For website functionality
- Analytics: To understand how users interact with our site (anonymous)
- No advertising cookies or trackers
The mobile app does not use cookies but may collect device and usage analytics through Firebase.
10. Data Breach Notification
In the event of a data breach that compromises your personal information, we will:
- Notify affected users within 72 hours
- Report to the Information Regulator of South Africa
- Take immediate steps to contain and remediate the breach
- Provide guidance on protective measures you can take
11. Third-Party Links
Our Service may contain links to third-party websites (e.g., WhatsApp). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before sharing information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via:
- Email notification
- In-app notification
- Website banner
Continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact Information
For privacy-related questions, concerns, or requests:
14. Consent
By using TagMyKid, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please do not use our Service.