Privacy Policy

Last updated 18 August 2026

Hartsrus holds two things that matter a great deal: your email address and your family's schedule. This page explains exactly what we do with both. It is written to meet our obligations under South Africa's Protection of Personal Information Act (POPIA).

Who we are

Hartsrus is operated by Antoinette Anderson, trading as Hartsrus, a sole proprietorship based in Pretoria-East, South Africa.

Our Information Officer is Antoinette Anderson, reachable at hallo@hartsrus.co.za. Any question about your information goes to that address and is answered by a person.

What we collect

When you join the waitlist or sign up

Your name and email address.
Which plan you chose, and when.

When you pay

Payment is processed by Paystack. We never see or store your card number. We keep a record that a payment succeeded, its amount and date, and a reference from Paystack.

When you upload a school document

The document itself — usually a school term programme.
The dates, events and details we read out of it, once you have checked and published them.
Anything you type in yourself: your own events, work commitments, tasks you assign to your family.

School documents often contain children's names, grades, classes and activities. That is information about a child, and the law treats it with extra care — so do we. See Children's information below.

Automatically

Basic technical information needed to serve the site securely, such as your IP address and browser type. We do not use advertising trackers and we do not sell anything to anyone.

Why we hold it, and on what basis

To give you the service you paid for — reading your documents, building your planner, sending reminders. This is necessary to perform our contract with you.
To contact you about Hartsrus — with your consent, which you can withdraw at any time.
To keep records the law requires — invoices and payment records, kept as long as tax and company law require.

Who else sees it

We use a small number of service providers to run Hartsrus. Each one sees only what it needs:

Paystack — processes payments.
Cloudflare — hosts the site and stores your data.
Resend — sends the emails you receive from us.
Anthropic — provides the AI that reads your uploaded documents.

Read this one properly. When you upload a school document, its contents are sent to an AI service to be read and turned into dates. That is how the reading happens — it is not done by a person sitting in an office. The document is processed and returned; it is not used to train anyone's AI model. If you would rather not have a document processed this way, don't upload it — you can add dates by hand instead.

Some of these providers are outside South Africa. POPIA permits this where the receiving country or the provider offers comparable protection, and we rely on the contractual protections each provider offers. We do not sell your information, and we do not share it for advertising.

Children's information

Hartsrus is used by parents, about their own children. When you upload your child's school programme, you are giving that information to us as that child's parent or guardian. We use it only to build your family's planner. We do not build profiles of children, do not market to children, and do not share children's information with anyone beyond the providers listed above.

Hartsrus is not intended for use by children themselves. If a family member is given access to a task or a reminder, they see only what you assign to them.

How long we keep it

Your account and planner — for as long as you are a member, and 90 days after you cancel, so that changing your mind is easy.
Uploaded documents — deleted 12 months after upload, or sooner if you delete them yourself.
Payment records — five years, as tax law requires.

You can ask us to delete everything sooner. We will, except for the payment records we are legally obliged to keep.

Keeping it safe

Your data is encrypted in transit and stored on infrastructure with access restricted to those who need it. No system is perfectly secure, and we won't pretend otherwise — but if a breach ever affected your information, we would tell you and the Information Regulator, as the law requires.

Your rights

Under POPIA you may:

Ask what information we hold about you, and get a copy.
Have anything inaccurate corrected.
Have your information deleted, subject to records we must legally keep.
Object to how we use it, or withdraw consent for emails.
Complain to the Information Regulator.

To exercise any of these, email hallo@hartsrus.co.za. We reply within 2 business days and act within 30 days.

The Information Regulator of South Africa can be reached at inforegulator.org.za.

Changes

If we change this policy in a way that affects you, we will email you rather than quietly updating the page. The date at the top always reflects the current version.