Your information, explained

Privacy notice

How DiverseFX English collects, uses, protects and responds to requests about personal information.

1. Information we process

Depending on how you use the platform, this may include account and contact details, country, your direct-account adult confirmation (without a date of birth), security and session records, course enrolment and progress, assessment evidence, certificate records, purchases and balances, Support requests, and technical records needed to keep the service secure.

We do not need your payment-card number in the DiverseFX English application. Payment details are handled through Peach Payments.

2. Why we use it

We process information to create and protect accounts; confirm eligibility for the adult direct-account route; provide courses and learning services; record progress, assessments and entitlements; support learners; prevent fraud and abuse; reconcile transactions; meet legal duties; and improve reliability. The lawful basis depends on the activity, including performance of a contract, legal obligation, legitimate interests or consent where required.

Optional public-page measurement

You can opt in using the checkbox in the footer of public information pages and withdraw there at any time. We count public-page views and approximate browser-tab sessions, grouped into broad traffic-source categories. This does not identify unique people or track you between DiverseFX sites. Your choice is remembered on this browser; a random tab identifier expires after 30 minutes of inactivity. Our measurement stores only daily-changing hashes for short-term duplicate prevention and aggregate counters, not raw IP addresses, user agents, referring URLs, query strings, names or emails. Duplicate-prevention hashes are retained for no more than 48 hours and aggregates for up to 395 days.

Measurement is off until you opt in. We respect Global Privacy Control and Do Not Track. Signed-in users, child learning, account, authentication, payment and private learning pages are excluded. Hosting and security providers may separately process operational logs as described under providers. The Owner can receive aggregate site activity through Main; no learner or child identities are included.

Parent-managed child learning

A parent or legal guardian provides versioned informed consent before creating an active child profile. We record the guardian relationship, consent version and time, and relevant management actions. The child uses a separate username and password without a personal email address. We collect their name and declared age with the declaration date, rather than a birth date; we do not require a child phone number, school, address, photograph or identity document. Child location is left unspecified.

To provide structured learning, we keep the child's course progress, activity and assessment responses, written work and revisions, speaking recordings they deliberately submit, results and completion certificates. These records belong to the child's learner identity. The adult owns the purchase and payment records; the order records which learner receives the course. Certificates preserve the name recorded at issuance; public verification does not display the learner's name.

My Learners shows the guardian broad course, progress and completion status, not the child's private recordings or written responses. Guardians can reset credentials, suspend access, correct display names or withdraw consent. Withdrawal stops future child access and submissions; it does not automatically erase legitimate learning, assessment, certificate or commercial history. See our retention policy below, or use My Support for access, correction, retention or deletion-review requests.

Children do not inherit guardian marketing consent. Emma, Amelia, Olivia and Human Tutors are unavailable in child accounts. Schools receive no child account or learning data through this pathway. The child learning workspace links to a shorter explanation of their learning information; guardians should explain the service in an age-appropriate way.

3. Emma, Olivia and Amelia information

For Amelia, we store your confirmed communication-language preference and each session’s target and communication languages. Learning profiles, goals, saved work, homework and History are separated by target language; the Amelia time balance is shared. Changing your preference applies to future sessions and does not rewrite historical session meaning.

Emma uses the message and page context needed to answer a site question. For contextual sales and site replies, relevant recent conversation and current English service facts are processed through our AI provider, OpenAI. We do not include payment credentials, raw teaching transcripts or other learners’ records. The application requests no stored Responses API conversation; provider security retention is separate. Emma conversation records are retained for a limited operational period, currently 30 days, unless a confirmed Support escalation or legal or security need requires related evidence longer.

Olivia and Amelia process live voice and text context to provide the requested learning interaction. The English application does not retain live Olivia or Amelia microphone audio. Olivia live captions are not retained after the page closes. Amelia offers optional transcript saving, off by default, selected before each session. Declining it does not prevent tutoring or structured educational history. Saved Amelia transcripts are available only to the owning learner through Session History, expire 30 days after the session starts and may be deleted sooner. They may contain omissions or transcription errors and are not formal assessment evidence. They are not automatically visible to Admin, Support or future Human Tutors. This is separate from speaking recordings or written work you deliberately submit in a course or assessment, which are retained as learning records. Provider processing is described separately below. Amelia may retain selected learning notes—such as goals, observations, plans and homework—to support later sessions, separately from optional transcript retention. Deleting or expiring a transcript does not delete those educational records or saved Teaching Board work, selected learning visuals and responses, vocabulary review choices, practice results or writing drafts and revisions. Saved transcripts are protected with access restrictions and encryption. Deleted or expired transcripts are no longer available through Session History. Provider retention is separate from this site policy.

Organisation and shared learning records

Employers manage their organisation account on DiverseFX Business. Staff retain individual learning accounts on this site. With the learner’s consent and valid organisation permissions, the central service can access the agreed learner identity, course progress and issued certificates. Learners can withdraw sharing through their account. This does not give employers access to private Amelia transcripts, child accounts or unrelated learner records. Approved visual activities and saved educational work remain within the authenticated learning service.

4. Providers and international processing

We use selected service providers for hosting, security, communications, payments and AI functionality. A provider receives only the information needed for its role. Some providers may process information outside South Africa. Provider processing and retention are separate from this site’s transcript policy. Contact us for service-specific information; we do not represent this notice as confirmation of any particular provider retention period or international-transfer arrangement.

We do not sell personal information. Direct adult accounts cannot be used as child accounts.

5. Retention and security

We keep information only for as long as reasonably needed for the purpose collected, legal and accounting duties, learning records, fraud prevention, dispute evidence and secure deletion. Different records require different periods; Support can explain the applicable period for a specific record.

Security controls include access restrictions, protected configuration, secure cookies, audit evidence and separation between customer-facing identifiers and sensitive internal records. No online system can promise absolute security.

Optional learning emails

Account creation does not opt you into marketing. Eligible adult learners can choose occasional course, continuation and learning-time emails in Email preferences. We record your choice and the notice version. Each marketing email includes an unsubscribe link; you can stop these emails without deleting your account or stopping essential security, order or service messages. Automated email delivery checks your current preferences and eligibility. A message already handed to the mail service may still arrive after you unsubscribe.

6. Your privacy choices

You may ask whether we hold personal information about you, request access or correction, object to certain processing, withdraw consent where processing depends on consent, or request deletion where the law permits. You may also request a practical export of applicable account information.

Use Contact or, when signed in, choose “Privacy or security” in My Support. We may need to verify your identity. You may also approach South Africa’s Information Regulator if you believe your privacy rights have not been resolved.

Representative referrals

If you arrive through a Representative link, we may retain that referral with your verified adult account. To validate the relationship, DiverseFX Main receives an opaque account reference, the Representative code and a one-way hash of your verified email address. It does not receive your password, child identity or learning records. Representatives receive aggregate statistics, not your name, email or child information. Registration and free learning do not create a commission; later qualifying voluntary contributions follow the separate verified payment process.