Privacy Policy

ThinkActuary (Pty) Ltd ("ActSci^AI", "we", "us", "our") operates the ActSci^AI platform at thinkactuary.com. We are the Responsible Party as defined under the Protection of Personal Information Act 4 of 2013 (POPIA).

Our Information Officer can be contacted at: privacy@thinkactuary.com

We collect the following categories of personal information:

• Account information: Email address, display name, and (optionally) university and year of study — provided at registration.
• Usage data: Exam answers you write, AI feedback you receive, marks awarded, practice session timestamps, and AI usage counts. This is essential to the service.
• Billing data: Payment confirmation details processed by PayFast. We do not store card numbers — payment processing is handled entirely by PayFast.
• Technical data: IP address, browser type, device identifiers, and session cookies — collected automatically for security and performance.

We do not collect special personal information (as defined by POPIA section 26) such as biometric data, health information, or political opinions.

We process your personal information on the following lawful grounds:

• Contract performance: To provide the ActSci^AI exam preparation service you signed up for — creating your account, generating AI feedback on your answers, tracking your progress.
• Legitimate interest: To improve the platform, detect fraud, ensure security, and send product updates directly related to the service.
• Legal obligation: To comply with financial record-keeping requirements under South African law.
• Consent: To send marketing emails (you may withdraw consent at any time).

When you use AI features (live feedback, the AI Co-Pilot, or final marking), your exam answer text and the question are sent to Anthropic PBC's API for processing. Anthropic processes this data under their own privacy terms. We do not use your exam answers to train AI models.

AI-generated feedback is for study purposes only and does not constitute a formal actuarial examination result.

We share personal information only with:

• Supabase Inc. — database and authentication infrastructure (data stored in EU/US regions).
• Anthropic PBC — AI inference for feedback, co-pilot, and marking features.
• PayFast (DPO Group) — payment processing for South African card and EFT payments.
• E2B Technologies — sandboxed code execution for mathematical verification in marking.

We do not sell your personal information to third parties.

Some of our service providers are based outside South Africa (United States and European Union). We rely on contractual safeguards (standard contractual clauses) to ensure an adequate level of protection in line with POPIA section 72.

• Account data: Retained for as long as your account is active, then deleted within 30 days of account closure.
• Exam sessions and answers: Retained for 3 years to allow you to review your progress history, then deleted.
• Billing records: Retained for 5 years as required by South African tax law.
• AI usage logs: Retained for 90 days for rate-limiting and fraud prevention.

As a data subject, you have the right to:

• Access the personal information we hold about you.
• Correction of inaccurate or incomplete information.
• Deletion of your personal information (subject to legal retention requirements).
• Objection to processing for direct marketing purposes.
• Withdrawal of consent where processing is based on consent.
• Complaint to the Information Regulator of South Africa if you believe your rights have been violated.

To exercise any of these rights, email privacy@thinkactuary.com. We will respond within 30 days.

Information Regulator contact: inforeg@justice.gov.za | +27 10 023 5200

We implement appropriate technical and organisational measures including TLS encryption in transit, encrypted storage at rest, row-level security on the database, and regular access reviews. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security but we maintain industry-standard safeguards.

We use session cookies strictly necessary for authentication. We do not use third-party tracking cookies or advertising cookies. By using ActSci^AI you consent to these strictly necessary cookies.

We may update this policy from time to time. We will notify you of material changes by email or a prominent notice on the platform at least 14 days before changes take effect. The effective date above will be updated accordingly.

For any privacy-related questions or to exercise your rights:

ThinkActuary (Pty) Ltd
Information Officer
privacy@thinkactuary.com