Legal

Privacy notice

Last updated: 6 September 2026 · Privacy notice for NduLearn, operated by NDUNDECODE PTY LTD.

1. Who we are

NDUNDECODE PTY LTD (South Africa) operates NduLearn. We are not IRCC, an examination centre, or a certified score issuer. This notice explains how we collect, use, and protect personal information.

2. What we collect

Account details (name, email, password hash, locale, timezone), your exam choice and optional target, practice responses (including writing text and speaking audio), time-on-platform, and billing tokens from the card processor. We do not collect passport scans, SIN/ITN, full immigration files, or children’s accounts, and we do not store raw card numbers.

3. Why we collect it

To authenticate you, serve the correct exam content, evaluate your practice, manage entitlements, and provide support. Original writing and audio are never overwritten by corrections.

4. Who processes it

Hosting, email, and object storage for audio, and (when enabled) a named AI provider (such as OpenAI) for estimates and speech-to-text. Card payments are handled by Paystack; we do not store raw card numbers. Where personal data is processed outside South Africa, we rely on appropriate safeguards.

5. Your rights and retention

You may access and correct your profile fields. You may request deletion of your account; the request is recorded and processed within a defined period, subject to lawful retention and backups. Original responses are retained while your account is active unless you request deletion. A full data-export pack is not yet available in this release.

6. Contact

Privacy questions: NDUNDECODE PTY LTD.