Privacy Policy

Bookworm Technologies (Pty) Ltd is responsible for Bkwrm. Contact us at info@usebkwrm.com or 40 Kotzee Road, Observatory, Cape Town, Western Cape, 7925, South Africa.

We process account details, profile and onboarding answers, concept maps, uploaded learning materials, YouTube URLs and retrieved metadata, learning responses, Smartcards, Insights reports, subscription status, support messages, device and security information, and cookie preferences.

If you use browser speech recognition, your browser or operating-system speech service converts speech to text. Bkwrm does not upload raw microphone audio; only the resulting transcript enters the learning workflow.

We process information to create and secure accounts, provide learning features, generate AI-assisted activities and feedback, store progress, supply support, administer subscriptions, meet legal obligations, and improve the service where you consent to analytics. Depending on context, our bases include performance of our contract, consent, legal obligations, and legitimate interests that do not override your rights.

We use Supabase for authentication, database and storage; Vercel for hosting; Azure OpenAI for AI processing; PostHog for consent-based product analytics; Creem as merchant of record for checkout, invoices, payment methods, refunds and applicable sales taxes; Resend for service email; browser speech-recognition services when you choose voice input; and YouTube to retrieve metadata for links you add.

We share only what is reasonably necessary for each provider to perform its function. We do not sell personal information or use it for third-party advertising.

Relevant map content and learning responses may be sent to Azure OpenAI to generate activities, evaluation, Smartcards and Insights. We do not log prompts or student content in cost telemetry; we retain only aggregate token totals by operation and day.

You control the content you submit. Do not upload confidential third-party information or content you are not entitled to use.

Our providers may process information outside South Africa. Where required, we use contracts and other safeguards intended to provide an adequate level of protection. Bkwrm is not hosted only in South Africa.

We keep account and learning information while your account is active and for only as long afterward as needed for security, legal, tax, dispute and backup purposes. Backups age out on provider schedules. When you delete your account, we initiate deletion of the account, associated database records and stored files, subject to limited legal or fraud-prevention retention. Billing records held by Creem are governed by Creem's legal obligations.

Subject to applicable law, including POPIA, you may ask to access, correct or delete personal information; object to or restrict processing; withdraw consent; request information about recipients; or complain to South Africa's Information Regulator. We may need to verify your identity before acting.

We use access controls, row-level database security, transport encryption, service-only secrets, monitoring and deletion controls. No online service can guarantee absolute security. Tell us promptly if you believe your account is compromised.

Bkwrm is intended for university-level learners and is not directed to children under 18. If we learn that a child provided personal information without valid guardian authority, we will take reasonable steps to delete it.

Material changes create a new dated version. Where required, we will request acceptance again rather than silently replacing the version you accepted.