Privacy Policy

AmandlaSport Connect ("AmandlaSport", "we", "us") respects your privacy. This Policy explains what personal information we collect, why we collect it, and your rights under the Protection of Personal Information Act, 2013 ("POPIA") and the EU General Data Protection Regulation ("GDPR") where applicable.

1. Who we are

The Responsible Party (POPIA) / Data Controller (GDPR) is AmandlaSport Connect, South Africa. Our Information Officer can be reached at info@amandlasport.com.

2. Information we collect

• Account data: name, email, password hash, role, sport, province.
• Profile data: achievements, stats, photos, video, club history, school, position, age category.
• Verification data: identity documents, club confirmations and academic records you upload for verification.
• Guardian data: for users under 18, the consenting guardian's name and contact details.
• Communications: messages, posts, comments, reports.
• Usage data: log files, IP address, device type, pages viewed.
• Payment data: handled directly by Paystack, our payment service provider. We receive only the subscription status, plan and last four digits of the card.

3. Why we use it (lawful bases)

• To provide the service (contract): account creation, profile, messaging, discovery, subscriptions.
• To keep users safe (legitimate interest / legal obligation): verification, abuse prevention, moderation, child-safety controls.
• To communicate with you (consent / legitimate interest): transactional emails, product updates, optional digests and alerts.
• To improve the platform (legitimate interest): aggregated analytics, troubleshooting.

4. Children and minors

We treat user data with extra care for users under 18. Minors require verifiable guardian consent, default to restricted profile visibility, cannot be contacted by unconnected recruiters without guardian approval, and have additional content moderation applied.

5. Sharing

We share personal information only with:

• Other users to the extent your visibility settings allow (e.g. recruiters viewing your profile);
• Service providers who help us operate the platform (cloud hosting, email delivery, analytics, payments via Paystack);
• Authorities, when required by law or to protect users from imminent harm.

We do not sell personal information.

6. International transfers

Paystack is headquartered in Nigeria and processes payment data on servers that may be outside South Africa. Some of our other service providers (including our cloud infrastructure) may also process data outside South Africa. Where required by POPIA or GDPR, we use Standard Contractual Clauses or rely on adequacy decisions to safeguard your information.

7. Retention

We retain account data while your account is active and for up to 24 months after deletion for safety, audit and legal purposes. Verification documents are retained only as long as needed to maintain your verified status, and then permanently deleted.

8. Your rights

You have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Request deletion of your account and personal data;
• Object to processing or withdraw consent at any time;
• Lodge a complaint with the South African Information Regulator at inforegulator.org.za.

To exercise these rights email info@amandlasport.com.

9. Security

We use industry-standard safeguards including encryption in transit, hashed passwords, access controls and audit logging. No system is perfectly secure — please use a strong unique password and enable any additional protections we offer.

10. Cookies

We use essential cookies for authentication and session management, and limited analytics cookies to understand usage. You can control cookies through your browser settings.

11. Changes

We will notify you by email or in-app notice of any material changes to this Policy before they take effect.