Privacy Policy
Effective from 22 August 2026. Applies to students.katlegofinance.co.za and professionals.katlegofinance.co.za
1. Introduction and Scope
This Privacy Policy explains how Katlego Nexus (Pty) Ltd, trading as Katlego Finance, collects, uses, stores, and protects personal information through Katlego Students and Katlego Professionals (the Platforms), in line with the Protection of Personal Information Act, 2013 (POPIA).
2. Who We Are
The responsible party for the purposes of POPIA is:
Katlego Nexus (Pty) Ltd, trading as Katlego Finance
Information Officer email: support@katlegofinance.co.za
3. Information We Collect
| Category | Examples |
|---|---|
| Account information | Name, email address, date of birth, password (stored securely, never in plain text). |
| Guardian information (Katlego Students, under 18 only) | Guardian's name and email address, consent confirmation timestamp, any spending cap the Guardian sets. |
| Character and simulation data | Fictional Character details a user creates (archetype, custom allowance figures for the simulation, goals chosen). This data represents a fictional scenario, not the user's real financial position, unless the user has chosen to mirror their real numbers for their own purposes. |
| Take-Home Tool responses | Real figures a user chooses to enter about their own situation (for example, their own transport spend) in order to generate their own personal workbook. See Section 5. |
| Uploaded photographs | An optional personal photograph a user uploads to personalise a goal visualisation. |
| Purchase records | Which Modules or Bundles were purchased, the price paid, and the date. Full payment card details are handled by our payment provider and are not stored by us. |
| Usage data | Progress through Modules, quiz results, badges earned, and general device and browser information for performance and security purposes. |
4. Children's Personal Information
Special Conditions Apply
Katlego Students may be used by individuals aged 13 to 17 only with verified Guardian consent, in line with POPIA's special conditions for processing children's personal information (POPIA Section 35). No account may be created for anyone under 13. Where a user is between 13 and 17, we process their personal information only after a Guardian has confirmed consent, and we limit that processing to what is necessary to operate the Platform. A Guardian may withdraw consent at any time by contacting us, which will result in the closure of the minor's account.
5. Take-Home Tools: A Note on Real Personal Data
It is important to distinguish two kinds of data on these Platforms. The simulation itself uses a fictional Character and does not reflect a user's real financial position. Separately, the Take-Home Tool asks users to voluntarily enter their own real figures (for example, what they actually spend on transport) so that we can generate a real, personal workbook for their own use. This real data is processed only to generate that workbook and is not used to build a financial profile of the user, is not sold, and is not shared with any bank, insurer, lender, or other financial institution.
6. How and Why We Use Your Information
| Purpose | What We Use | Lawful Basis Under POPIA |
|---|---|---|
| Operating your Account and the simulation | Account information, Character and simulation data | Performance of a contract with you |
| Generating a Take-Home Tool workbook | Take-Home Tool responses | Consent, given at the point you choose to use the tool |
| Guardian consent and oversight | Guardian information | Legal obligation and consent (POPIA Section 35) |
| Processing purchases | Purchase records | Performance of a contract with you |
| Issuing and verifying Certificates | First name, track name, completion date | Performance of a contract with you |
| Improving the Platforms and preventing abuse | Usage data | Our legitimate interest, balanced against your rights |
| Sending direct marketing | Email address | Your opt-in consent, see Section 12 |
7. Who We Share Information With
We share limited information with:
- our payment provider, to process a purchase, limited to what is needed to complete the transaction;
- our cloud hosting and storage provider, to store Account, simulation, and workbook data securely;
- an email service provider, to send Account confirmations, Guardian consent links, and purchase notifications;
- an institution, where an Account was created through institutional licensing, limited to enrolment and completion status needed for that institution's reporting, never Take-Home Tool responses or uploaded photographs;
- a regulator, law enforcement body, or court, where we are legally required to do so.
We do not sell personal information, and we do not share Take-Home Tool responses or uploaded photographs with any third party for marketing or profiling purposes.
8. Where We Store Information and For How Long
Data is hosted in the Cape Town (af-south-1) region, keeping South African user data within South Africa. Purchase records, Certificates, and any workbook a user has downloaded are retained permanently, for as long as the user's Account exists, since these represent what the user has paid for and permanently owns, as described in our Terms and Conditions. Simulation progress data tied to the 12-month Module reactivation rule is retained on the same basis as the Module access it relates to. If a user closes their Account, we delete or anonymise personal information within a reasonable period thereafter, except where we are required by law to retain certain records for longer, such as financial transaction records.
9. Security Measures
We apply AES-256 encryption to data at rest and TLS 1.3 in transit, restrict access to personal information on a need to know basis, and never connect either Platform to a real bank account, real credit record, or any real financial account, since both Platforms operate as closed simulations. Uploaded photographs are stored privately and are never made public.
10. Your Rights Under POPIA
Subject to any applicable exceptions, you have the right to:
- request access to the personal information we hold about you;
- request correction of inaccurate or outdated information;
- request deletion of personal information we no longer have a lawful basis to hold;
- object to processing based on our legitimate interest;
- withdraw consent at any time, for any processing based on consent, without affecting processing already carried out;
- lodge a complaint with the Information Regulator of South Africa.
To exercise any of these rights, contact us at support@katlegofinance.co.za.
11. Guardian Rights
Where a user is between 13 and 17, their Guardian may request access to, correction of, or deletion of the minor's personal information on the minor's behalf, and may set or change a monthly spending cap on the minor's Account at any time, in addition to the rights described in Section 10.
12. Direct Marketing
We will only send you direct marketing communications, such as news about new Modules, if you have opted in to receive them. You can opt out at any time using the unsubscribe link included in every marketing email, or by contacting support@katlegofinance.co.za. Opting out of marketing does not affect essential account, purchase, or Guardian notification emails, which are necessary to operate the Platforms.
13. Cookies
Information about the cookies used on the Platforms, and how to manage them, is set out in our separate Cookie Policy.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified through the Platform or by email before they take effect.
15. Contact Us and Complaints
For any privacy question or request, contact:
Information Officer email: support@katlegofinance.co.za
If you believe we have not adequately addressed your concern, you may lodge a complaint with the Information Regulator of South Africa, whose contact details are available on its official website.