Privacy Policy
At Kryzzo, your family's privacy is our highest priority. This Privacy Policy explains how Sweet Phoenix Creations Pty Ltd collects, uses, and safeguards your information when you use our platform. We are committed to full compliance with the Protection of Personal Information Act, 2013 (POPIA) and the Children's Online Privacy Protection Act (COPPA).
1. Who We Are
Kryzzo is operated by Sweet Phoenix Creations Pty Ltd, a company registered in the Republic of South Africa. We are the Responsible Party (as defined under POPIA) for personal information processed through the Kryzzo platform.
Company: Sweet Phoenix Creations Pty Ltd
Email: info@sweetphoenix.co.za
Country: Republic of South Africa
2. Information We Collect
We collect only the minimum information necessary to provide our service:
Account Information (Parent / Guardian)
Your email address, chosen password (hashed — never stored in plain text), and billing details (processed exclusively by Paystack — we never see, store, or handle your card number or banking credentials).
Child Profile Information
A display name (nickname) chosen by the parent, an approximate age range (used to tailor game difficulty), and avatar selection. We do not collect full legal names, photographs, or any government-issued identifiers for children.
Usage & Learning Data
Game scores, session durations, points earned, achievements unlocked, and feature interactions within the app. This data is used solely to power the app experience and parental reports.
Device & Technical Information
Device type, operating system version, browser type, and anonymised IP address. Collected automatically to maintain security and improve performance.
3. How We Use Your Information
- →To create, maintain, and secure your account and child profiles.
- →To provide and continuously improve the Kryzzo learning platform.
- →To send essential account communications (e.g. billing receipts, security alerts, policy updates).
- →To generate parental reports on children's learning activity and screen-time usage.
- →To analyse aggregated, anonymised usage data for product improvement.
- →To comply with our legal obligations under South African law.
We do notuse your information for advertising profiling, sell it to third parties, or use children's data for any marketing purpose whatsoever.
4. Children's Privacy (COPPA & POPIA)
Kryzzo is designed for children aged 5–12, and we take their privacy with the utmost seriousness. Our child-data practices:
- ✓We only collect children's personal information with verifiable parental consent. A parent or legal guardian must create the account.
- ✓We collect the minimum data necessary from child profiles — only a nickname and age range.
- ✓We do not serve behavioural advertisements to children.
- ✓We do not allow children to share personal information publicly.
- ✓Parents may request full deletion of all data associated with a child profile at any time by contacting info@sweetphoenix.co.za.
- ✓We do not knowingly collect personal information from children without parental involvement.
5. Data Sharing
We do not sell, rent, or trade your personal information. We share data only with the following trusted service providers, strictly necessary for operating Kryzzo:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Database & authentication hosting | Account & usage data (encrypted) |
| Paystack | Payment processing | Billing info only (we never see card details) |
| Google Analytics | Anonymised usage analytics | Anonymised, aggregated data only (IP anonymised) |
All third-party providers are contractually bound to process data only as directed by us and in compliance with applicable data protection laws.
6. Data Retention
We retain personal information for as long as your account is active and as required to provide our service. If you request deletion of your account:
- → We will delete all personal data within 30 days of your request.
- → Anonymised, aggregated analytics data (which cannot identify you) may be retained indefinitely.
- → We may retain minimal records where required by South African law (e.g. financial records for 5 years as required by the Companies Act).
7. Your Rights (POPIA / GDPR-Aligned)
Under POPIA and aligned international standards, you have the following rights regarding your personal information:
Right to Access
Request a copy of all personal data we hold about you.
Right to Rectification
Correct any inaccurate or incomplete personal data.
Right to Deletion
Request deletion of your personal data (subject to legal obligations).
Right to Object
Object to specific uses of your data, including direct marketing.
Right to Portability
Receive your data in a commonly used, machine-readable format.
Right to Complain
Lodge a complaint with the Information Regulator of South Africa.
To exercise any of these rights, contact us at info@sweetphoenix.co.za. We will respond within 30 days.
8. Cookies
Kryzzo uses minimal cookies to operate. We do not use advertising trackers or cross-site tracking cookies.
- →Session cookies: Required for authentication and secure login. These expire when you close your browser.
- →Google Analytics: Anonymised analytics cookies to understand aggregate usage patterns. IP addresses are anonymised. You can opt out via the Google Analytics Opt-out Browser Add-on.
9. Security
We implement industry-standard security measures to protect your personal information, including:
- ✓ End-to-end encryption (TLS 1.2+) for all data in transit.
- ✓ Encrypted storage via Supabase with Row-Level Security (RLS) policies.
- ✓ Passwords hashed using bcrypt — never stored in plain text.
- ✓ Regular security audits and vulnerability assessments.
- ✓ Strict access controls — only authorised personnel can access personal data.
No system can be 100% secure. If you believe your account has been compromised, contact us immediately at info@sweetphoenix.co.za.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you via email (to the address on your account) and update the "Last updated" date at the top of this page. Continued use of Kryzzo after the effective date constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related queries, requests, or complaints, please contact our Information Officer:
Sweet Phoenix Creations Pty Ltd
Attn: Information Officer
Email: info@sweetphoenix.co.za
Country: Republic of South Africa