Your family's privacy
The short version
- No cookies, no tracking pixels, no consent banner. Nothing on your device follows you around the web.
- We never sell your family's details, and we never hand them to advertisers.
- Your child's work is used to teach and mark your child, and to report to you. It is not used to train anyone's AI.
- We never hold your passwords. Google's Firebase does, hashed, and we can't read them.
- The tutor is never told your child's name. It sees the question, the answer and its own notes.
- Ask, and we'll show you everything we hold, correct it, or delete it.
Who we are
Studywork is developed and run by Zandeo (Pty) Ltd, a South African company. Hex Novoa is the founder and our information officer under POPIA (the Protection of Personal Information Act). Zandeo (Pty) Ltd and Studywork are built to comply with POPIA, and designed to the standard of Europe's GDPR (General Data Protection Regulation) and the United States' COPPA (Children's Online Privacy Protection Act). Anything on this page, or anything not on it, you can ask at: info@zandeo-ai.com.
What we collect, and why
Your account
Your first name and your email address, which is your login. Your surname and cell number are optional. We use these to run your account, to send you account and billing emails, and to send you your child's reports.
Your child's profile
First name, a username and password, grade, language of instruction, and their school and province. Surname and birthday are optional. We use these to serve the right curriculum and to greet your child in the app. Everything inside Studywork is keyed on an internal ID, never on a name.
Your child's work
The answers your child gives, whether typed, spoken or photographed; their conversation with the tutor; their marks and progress; and the tutor's notes on how your child learns, such as what they struggle with and what finally clicked. This is what lets the tutor mark, guide, report to you, and make the next session fit your child. A spoken answer is turned into text as it is spoken, and the audio is not kept. A photographed answer is stored in a private store that only we can open, so the tutor can read the handwriting.
Payment
Paystack processes your payment and pays us. Your card number never reaches us. We keep Paystack's reference for your subscription and the plan you're on, and nothing else about your card.
Technical records
Our server keeps a log of what the app did, keyed by internal ID and never by name. It includes your child's answers and the mark given, so we can review a wrong mark, and the internet address of visits to our public pages, so we can stop abuse. Log lines are deleted after 90 days.
Bug reports
When your child taps Report a bug, we receive what they wrote, the screen they were on and the app's own error messages. No screenshot is taken.
What stays on your device
Your sign-in, so you don't have to log in every time. The child's app also remembers a few settings: the reading mode, the voice speed, which term is open, and whether the breathing exercise has run today. The account page remembers when you were last active, so it can sign you out when idle. None of this is a cookie, none of it identifies you to anyone else, and none of it leaves your device.
The Try Studywork page keeps nothing at all. Nothing you type there is stored.
Who else handles it
Five companies touch your data, each for one job. This is the whole list.
Google Cloud
Hosts Studywork and its database in Google's data centres in Iowa, in the United States. The tutor's model, Gemini, runs in Google's Belgium region through Vertex AI, where Google does not use what we send it to train its models. Google also turns your child's speech into text and the tutor's words into speech. POPIA allows data to be held abroad where the host is bound to protect it to a similar standard, and Google's terms do that.
Paystack
Takes your card details and your monthly payment. We never see the card.
Gmail
Sends our emails from info@zandeo-ai.com. There is no open tracking and no click tracking in anything we send.
Claude
Claude, made by Anthropic, is the AI we build Studywork with. It writes and checks the code, and it runs our daily checks on the live system under Hex's or Hannes's login. When it does, the records it reads pass through Anthropic's servers in the United States, under terms that do not use what it reads to train Anthropic's models. Claude never speaks to your child: the tutor in the app is Gemini.
Meta, only if you came from one of our adverts
If you tapped a Studywork advert on Facebook or Instagram, Meta puts an ID for that click in the link. Our server then tells Meta when that visit tapped Start on the Try Studywork page, reached the first question, reached Create account, or signed up, so we can see which adverts work. Meta receives the click ID, your internet address, your browser type and the page address. It never receives your name, your email, or anything about your child, and nothing is placed on your device. If you didn't arrive from an advert, Meta hears nothing from us.
We use no analytics service, no advertising network, and nobody else.
Children
Studywork is for children, and a parent or guardian creates every account. When you add your child, you give consent on their behalf, as POPIA requires. Children see no advertising anywhere in Studywork, and the tutor sticks to schoolwork. The tutor's notes about how your child learns are for you and for the tutor; your child never sees them, because a note that says "struggles with fractions" is not something a child should read about themselves. You will be able to read and delete those notes from your account page; until that is built, ask and we'll do it for you.
Your rights, and how long we keep things
You can ask to see everything we hold about your family, to correct it, to delete it, or to object to how we use it. Message us at info@zandeo-ai.com and it is done; no forms. Deleting an account deletes the children's profiles, their work and the tutor's notes. We keep invoices for as long as tax law requires.
We keep your account while it is open. If you cancel, we keep it so your child can pick up where they left off if you come back. Ask, and we delete it.
If you feel we have not handled your information properly, you can complain to the Information Regulator of South Africa at inforegulator.org.za. But we would rather hear from you first.
How we keep it safe
- Every connection to Studywork is encrypted.
- Passwords are held by Google's Firebase as hashes. We never see them and cannot read them.
- Card details are held by Paystack. They never pass through us.
- Photographed answers sit in a private store that is never public.
- The marking model is given the question, the answer and the marking guidance, never a name.
- Access to the database is limited to the co-founders, Hex Novoa and Hannes Oelofse, behind two-factor authentication.
- If something ever goes wrong, we will tell you promptly and plainly.
When this page changes
This page was last updated on 12 October 2026. If a change matters to you, we email every account holder. Questions, about this page or anything else: info@zandeo-ai.com