ZAMAH — Privacy Policy
Effective date: 8 July 2026 Last updated: 8 July 2026
This Privacy Policy explains how Jared Newton, operating as ZAMAH ("ZAMAH", "we", "us") collects, uses, shares, and protects your information when you use the ZAMAH mobile application and related services (the "Service"). By using the Service, you agree to this Policy.
Responsible party / data controller (and POPIA Information Officer): Jared Newton, operating as ZAMAH. Address: Ruimsig Athletics Stadium, Roodepoort, Gauteng, South Africa. Contact: jarednewton07@gmail.com · https://zamah.app
This Policy is designed to meet South Africa's Protection of Personal Information Act (POPIA) as our home law, and to give international users the protections of the EU/UK GDPR, the California CCPA/CPRA, and India's DPDP Act.
1. Age requirement (13+)
The Service is intended for users aged 13 and older. It is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. You must confirm you are 13 or older to create an account. If we learn we have collected data from a child under 13, we will delete it promptly — contact jarednewton07@gmail.com. Where local law sets a higher age of digital consent (e.g., 16 in parts of the EU), that age applies for consent-based processing.
2. Information we collect
a. Information you provide - Account data: email address, password (stored hashed by our authentication provider), display name, and profile/avatar selections. - Support/communications: messages you send us.
b. Information generated as you use ZAMAH (learning data) - Gameplay & learning activity: the choices you make in sessions, questions/scenarios answered, timing, outcomes, streaks, ratings, mastery, and derived skill signals (your "cricket learning profile"/fingerprint). - Coach interactions: your progress against goals and the feedback shown to you.
c. Purchase data - Subscription status/entitlement via our payments partner (RevenueCat). Your actual payment (card, billing address) is handled by Google Play or Apple — we never receive or store your card details.
d. Device & technical data - Device type, operating system, app version, language/region, and diagnostic/crash data.
e. Analytics & usage data - Events describing how you use the Service (screens viewed, features used, conversion actions), tied to a pseudonymous identifier via our analytics provider (Mixpanel).
We do not collect precise location, and we do not serve advertising.
3. How we use your information
- Provide and personalize the Service — run your sessions, adapt difficulty, power the coaching relationship, and track your progress (this personalization is algorithmic/AI-driven; see our separate AI Use & Disclosure Notice).
- Process subscriptions — grant and maintain access to paid features.
- Improve the Service — understand usage, fix bugs, develop new features.
- Communicate — service messages, and, where permitted, updates you can opt out of.
- Safety, security, legal — prevent abuse/fraud, enforce our Terms, and comply with law.
Legal bases / lawful grounds (GDPR & POPIA): performance of our contract with you (providing the Service and subscriptions); our legitimate interests (improving and securing the Service); consent (where required, e.g., certain analytics/marketing); and compliance with law. You may withdraw consent at any time.
4. How we share your information
We share personal data only with service providers ("operators"/"processors") that help us run the Service, each under contract and only for the purposes below. We do not sell your personal information.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Backend, authentication, database, hosting | Account + learning data |
| RevenueCat | Subscription management | Pseudonymous user id, purchase/entitlement data |
| Mixpanel | Product analytics | Pseudonymous id, usage events |
| Google Play / Apple | App distribution + payment processing | Purchase transaction data (they, not we, process payment details) |
| Anthropic | AI-assisted coaching/personalization (where enabled) | The learning-interaction data needed to generate coaching |
We may also disclose information to comply with law, enforce our Terms, protect rights and safety, or in connection with a business transfer (with notice where required).
5. International data transfers
The Service and our providers may process data in the United States and other countries that may not offer the same level of protection as South Africa or your home country. Where we transfer personal information across borders, we rely on appropriate safeguards required by applicable law (including POPIA's conditions for trans-border transfers and, for EU/UK data, mechanisms such as Standard Contractual Clauses).
6. Data retention and deletion
We keep personal data for as long as your account is active or as needed to provide the Service, then delete or anonymize it, unless a longer period is required by law (e.g., financial/tax records). You can delete your account and associated personal data at any time from within the app (Settings → Delete account) or at https://jarednewton07-commits.github.io/zamah-legal/delete.html or by emailing jarednewton07@gmail.com. See our Data & Account Deletion page.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, port, and restrict/object to processing of your data, and to withdraw consent. - South Africa (POPIA): you may access and correct your information, object to processing, and lodge a complaint with the Information Regulator (South Africa) — enquiries@inforegulator.org.za / https://inforegulator.org.za. - EU/UK (GDPR): the rights above, plus the right to lodge a complaint with your local supervisory authority. - California (CCPA/CPRA): rights to know, delete, correct, and to opt out of "sale"/"sharing" (we do not sell or share personal information as defined by the CPRA), and to limit use of sensitive data; you won't be discriminated against for exercising rights. - India (DPDP Act): rights to access, correction, erasure, grievance redressal, and nomination. To exercise any right, email jarednewton07@gmail.com. We will verify your request and respond within the timeframes required by law.
8. Security
We use technical and organizational measures (encryption in transit, access controls, reputable infrastructure providers) to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information and will notify you and the relevant regulator of breaches where required by law (including POPIA's breach-notification duties).
9. Children
See Section 1. The Service is for users 13+ and is not directed to children under 13.
10. Changes to this Policy
We may update this Policy. Material changes will be notified in-app or by email, and the "Last updated" date will change. Continued use after changes take effect constitutes acceptance.
11. Contact
Jared Newton, operating as ZAMAH — Ruimsig Athletics Stadium, Roodepoort, Gauteng, South Africa — jarednewton07@gmail.com — https://zamah.app.
← Back to home