Privacy Note
Short and plain. Version 2026-11-v2. Last updated: 1 November 2026. [LAWYER REVIEW BEFORE PUBLISHING: delete this marker when done]
This note covers the early-access waitlist on this site. If you later take part in an interview, we give you a separate notice and ask for your consent separately.
Who is responsible for your data
BLAH-BLAH COM (Pty) Ltd (registration number 2026/262065/07), South Africa. [CONFIRM EXACT REGISTERED NAME: CIPC documents show "BLAH-BLAH COM" without "(Pty) Ltd"; LAWYER REVIEW] We are the "responsible party" under POPIA (the Protection of Personal Information Act 4 of 2013) and the "controller" under the GDPR and the UK GDPR.
Contact for all privacy questions and requests, including to our Information Officer: master@blah-blah.co.za. Our Information Officer is registered with the Information Regulator (South Africa) under registration number 2026-061960.
[LAWYER REVIEW: if GDPR/UK GDPR applies and no exemption is available, add the name and address of our EU and UK representative here, or delete this line]
What we collect
- Your name, email address and country.
- Your parent's age range (a range only; we do not ask for their name, contact details or health information). Please do not type health information about anyone, or your parent's name, into the form.
- The time and the version of the wording of the consent you gave, so we can show you agreed.
- Anything you choose to write to us if you email us. We use it only to answer you.
We do not collect your IP address in our own database. The hosting service that delivers this page may keep normal server or security logs (see "Where it is stored").
We do not collect "special personal information" such as health, religion, race, biometric or criminal-record information, and we do not collect location data. Providing the details above is voluntary. If you do not provide them, we cannot add you to the waitlist.
Why we use it
Only to contact you about this early-access test of an AI helper for parents: to invite you to a small free pilot, to ask you some questions about your experience, and to understand how many people in which countries are interested. We do not sell your data, do not use it for advertising, and do not share it with advertisers. We do not make automated decisions about you and do not profile you.
Our basis for using it
Your consent: POPIA section 11(1)(a), and GDPR and UK GDPR Article 6(1)(a). For the emails we send, your consent is also the basis required for electronic direct marketing under POPIA section 69. You give consent by ticking the box. It is not pre-ticked, and the form does not work without it. You can withdraw it at any time by emailing us, and it is as easy to withdraw as to give.
Who sees it
Only authorised people at BLAH-BLAH COM (Pty) Ltd. Our hosting and database provider, Cloudflare, Inc., handles it on our behalf as our service provider ("operator" under POPIA, "processor" under the GDPR) and may use its own approved sub-processors. We do not give your details to anyone else unless the law requires it.
Where it is stored, and other countries involved
- Waitlist entries are stored in our own account with Cloudflare, Inc. (hosting and database), in a database set up to be located in the European Union. [CONFIRM AFTER SETUP: database created with the EU jurisdiction]
- The EU location applies to where the database is kept. When you submit the form, the request is handled by Cloudflare's global network and may pass through data centres in other countries, including the United States. Cloudflare is a US company, and its staff and systems in other countries may be able to access data it handles for us. We access the data from South Africa.
- This means your details may be transferred outside your country and outside South Africa. The safeguards we rely on: our agreement with Cloudflare (its Data Processing Addendum, which includes the EU Standard Contractual Clauses and the UK Addendum, and states that Cloudflare complies with the EU-US Data Privacy Framework and its UK Extension). Data in the EU is also covered by the GDPR, which gives protection substantially similar to POPIA. We also rely on your consent for these transfers. You can ask us for a link to the safeguards at any time.
- The hosting service may log visitor IP addresses for security and operations. We do not use these logs to identify visitors.
Cookies and trackers
This site does not set cookies of its own and uses no analytics, advertising or social-media trackers, and loads no outside fonts or scripts. [CONFIRM BEFORE PUBLISHING: in the Cloudflare dashboard no analytics or cookie features are switched on]
How long we keep it
Until you ask us to delete it, or at the latest 12 months after you sign up, whichever comes first. We then delete your name, email, country and parent age range and our record of your consent. [LAWYER REVIEW: keep a minimal "do not contact" record if someone unsubscribes, so we do not email them again]
How we protect it
Access to the database is limited to authorised people at BLAH-BLAH COM (Pty) Ltd, with a protected login. Data travels over encrypted connections. If there is a security breach that affects your details, we will tell you and the Information Regulator as the law requires.
Your rights
You can ask us to show you what we hold about you, correct it, delete it, restrict or stop our use of it, object to our use of it, or send you a copy you can reuse. You can withdraw consent at any time. Withdrawing does not affect what we did before. Just email master@blah-blah.co.za. We answer within one month, and we do not charge for this. We may need to check it is really you.
Under POPIA these include the right of access (section 23), the right to ask for correction or deletion (section 24) and the right to object (section 11(3)).
Complaints
- South Africa: Information Regulator, inforegulator.org.za. General enquiries: enquiries@inforegulator.org.za, 010 023 5200. POPIA complaints: POPIAComplaints@inforegulator.org.za. Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg 2191.
- UK: the Information Commissioner's Office, ico.org.uk.
- EU: the data protection authority in the country where you live or work.
We would appreciate the chance to fix a problem first, but you do not have to contact us before complaining.
Adults only
This waitlist is for people aged 18 or older. We do not knowingly collect information from children. If you think a child has given us their details, email us and we will delete them.
About your parent
We ask only for your parent's age range, as a general statistic. We do not ask for their name or contact details. Signing up does not give consent on your parent's behalf. If we ever ask your parent to take part in a pilot, we will ask them for their own consent and tell them what the family can see.
Safety notice
This early test is not an emergency service. In an emergency call 112 from a mobile phone, 10111 (police) or 10177 (ambulance) in South Africa; 999 or 112 in the UK; 911 in the US; 112 in the EU. The test does not ask for health information and collects your country only, not your precise location.
Changes to this note
If we change how we use your details, we will update this note and, where the law requires, ask for your consent again.