Privacy Policy

The Class Mom (“we”, “us”, “our”) is operated by Hotspot Digital (Pty) Ltd, a company registered in South Africa. This policy describes how we collect and use personal information when you use theclass.mom and the app at app.theclass.mom.

We comply with the Protection of Personal Information Act, 2013 (“POPIA”). For POPIA purposes, Hotspot Digital (Pty) Ltd is the Responsible Party.

We collect the minimum information needed to run the service:

• Account information — your name, email address, and the school/class details you choose to add.
• Parent roster — names and WhatsApp numbers of parents in your class, which you add in order to send them reminders.
• Message content — the events, reminders, and digests you choose to send via WhatsApp.
• Technical information — standard request logs (IP address, browser, timestamps) for security and reliability.

We do not collect payment card details. We do not run advertising trackers on the marketing site or in the app.

• To provide the service you signed up for.
• To deliver WhatsApp messages you have asked us to send, via the Meta Business API (operated by Meta Platforms Ireland Limited).
• To communicate with you about your account, changes to the service, and security matters.
• To prevent fraud, abuse, and security incidents.

We do not sell your personal information or the personal information of parents on your roster.

We rely on the following grounds to process personal information:

• Performance of a contract — to deliver the service you have signed up for.
• Legitimate interests — to secure our systems and improve the service, balanced against your privacy rights.
• Consent — for optional features that require explicit opt-in.

When you add parents to your roster, you confirm that you have the right to share their contact details with us for the purpose of sending class communications on their behalf.

We share personal information only with processors required to run the service:

• Supabase — our database and authentication provider.
• Vercel — hosting and content delivery.
• Cloudflare — DNS and email routing.
• Twilio & Meta (WhatsApp Business) — to deliver messages you send via WhatsApp.

Each of these providers acts as an Operator (POPIA) / Sub-processor (GDPR) under appropriate contractual safeguards.

Our providers may store data outside South Africa (including in the United States and the European Union). Where this happens, we rely on standard contractual protections and the POPIA provisions that allow cross-border transfers where the recipient is bound by equivalent data-protection rules.

We keep account information for as long as your account is active. If you close your account, we will delete or anonymise personal information within 90 days, except where we are required to keep it longer to comply with law, resolve disputes, or enforce our agreements.

Under POPIA you have the right to:

• Ask what personal information we hold about you.
• Ask us to correct information that is inaccurate.
• Ask us to delete information (subject to legal limits).
• Object to processing based on legitimate interests.
• Lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

To exercise any of these rights, email us at hello@theclass.mom.

We use industry-standard technical and organisational measures to protect your data — including encryption in transit (TLS), encryption at rest on our databases, role-based access control, and two-factor authentication on our operational accounts. No system is 100% secure; if we become aware of a breach that affects you we will notify you and the Information Regulator as required by POPIA.

The Class Mom is used by parents and teachers to coordinate communications about children, but the service itself is intended for adult users (class liaisons and parents). We do not knowingly collect personal information directly from children.

We may update this policy from time to time. We will post the updated policy on this page and update the “Effective” date above. Material changes will be notified by email.

Questions about this policy or your personal information? Email the Information Officer at hello@theclass.mom.

Hotspot Digital (Pty) Ltd
South Africa