Legal

Privacy notice

Last updated: 27 August 2026 · Draft notice for NduLearn, operated by NDUNDECODE PTY LTD.

1. Who we are

NDUNDECODE PTY LTD (South Africa) operates NduLearn. We are not IRCC, an examination centre, or a certified score issuer. This page is a draft until a lawyer reviews it.

2. What we collect

Account (name, email, password hash, locale), exam choice, practice responses (including writing text and speaking audio), time-on-app, and billing tokens from the card processor. We do not collect passport scans, SIN, or children’s accounts.

3. Why we collect it

To run login, route the right exam items, evaluate practice, grant entitlements, and answer support. Original writing and audio are never overwritten by corrections.

4. Who processes it

Hosting, email, object storage for audio, and (when enabled) OpenAI for estimates and speech-to-text. Card data is handled by Paystack; we do not store raw card numbers. Subprocessors are named when accounts are live.

5. Your rights

You can see and correct profile fields. You can request account deletion; this release records the request — it is not an instant wipe of backups. We do not offer a full data-export pack in this release.

6. Contact

Privacy questions: NDUNDECODE PTY LTD.