Privacy Policy

This Privacy Policy explains how Mariëtte van Niekerk, an individual trading as StickyPaper (“StickyPaper”, “we”, “us” or “our”), handles personal information when you use StickyPaper Weekly Planner at app.stickypaper.co.za.

We are the responsible party for personal information we decide to collect and use for StickyPaper, and our Information Officer is the person named at the end of this policy. We handle personal information under the Protection of Personal Information Act, 4 of 2013 (POPIA).

1. Information we handle

The information we handle depends on how you use the Service. It may include:

• Account information, such as your email address and account sign-in details.
• Family profile information that you choose to add, such as a family member’s name, profile photo, birthday, colour, role and an optional profile PIN.
• Planner information that you add, such as calendar events, tasks, chores, reward records, meal plans, grocery lists, recipes and water tracking.
• Recipe links you paste to import a recipe. Our server opens the public web page to read the recipe, and we save the recipe and its link in your planner.
• Information shared within your family planner, including information made available to people you invite or who join using your family code.
• Calendar information from a Google or Microsoft calendar, if you choose to connect one.
• Payment and transaction information needed to manage a subscription, such as the plan, payment status and PayFast references. PayFast processes payments; we do not see or store your full card or bank details.
• Email addresses of people you invite, which we use only to send the invitation.
• Messages you send us, such as support or refund requests.

We use Google Firebase to store and process Service information: Firebase Authentication for sign-in, Cloud Firestore to store your planner, and Cloud Functions for payments, invitations and recipe import. The StickyPaper website and app pages are hosted on GitHub Pages.

2. Why we use information

We use personal information to:

• create and manage your account and family planner;
• provide calendars, lists, recipes, family profiles and other features you use;
• share planner information with the family members you invite;
• process subscription payments and handle cancellations or refunds;
• send invitations, annual renewal reminders and other service messages;
• respond to support requests;
• protect the Service, investigate misuse and fix technical problems; and
• meet legal obligations.

We process information where it is needed to provide the Service you requested, where you have given consent, or where another lawful basis under POPIA applies. We do not use your information for advertising and we do not make automated decisions about you.

3. Children’s information

A parent or guardian must create and manage an account. Children may use profiles managed by that adult.

A parent or guardian should add only the child information needed for the family’s use of StickyPaper. By creating a child profile, the parent or guardian confirms that they are authorised to provide that information and consents to its processing for the purposes described in this policy.

Parents or guardians can contact us to review, correct or request deletion of information in a child’s profile.

4. Calendar connections

If you choose to connect a Google or Microsoft calendar, we use the access you grant to provide the calendar features you request. We read your events and, when you ask, add or change events. Your connection stays active in your browser until you disconnect it or sign out. You can disconnect the calendar at any time through the Service or the relevant provider’s settings.

After disconnection, StickyPaper will no longer access that calendar through the connection. Information already copied into StickyPaper, or changes already made to the calendar, may remain until you remove them or request account or data deletion. For the family calendar, StickyPaper keeps a copy of upcoming events so every family member can see them.

Google and Microsoft handle information under their own terms and privacy policies.

5. When information is shared

We do not sell your personal information.

We may share information:

• with family members you invite or who join your family planner;
• with Google Firebase to host and operate the Service;
• with GitHub, which hosts the website and app pages;
• with PayFast to process payments and subscription transactions;
• with our email provider, to send invitations;
• with Google or Microsoft when you choose to connect a calendar; or
• when required by law or necessary to protect the Service, our users or another person.

Our service providers may process information for us under their own privacy and security obligations. Some of them, including Google, Microsoft and GitHub, may store or process information on servers outside South Africa. Where that happens, we rely on providers that are bound by data-protection commitments that give your information a level of protection similar to POPIA, or we rely on your consent or the need to provide the Service you asked for.

6. How long we keep information

We keep account and planner information while your account is active and as needed to provide the Service.

If your 14-day trial ends without a subscription, your planner is kept so you can subscribe later. We do not currently delete trial accounts automatically, and you can ask us to delete your account at any time (see section 8).

If you request account deletion, we will delete or de-identify information that we no longer need, subject to information we must keep for legal, payment, security or dispute purposes, such as payment records. Information in backups, if any, may take additional time to be removed.

7. Security

We use reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration or disclosure. These include sign-in through Firebase Authentication and encrypted connections. No online service can guarantee absolute security. A profile PIN in StickyPaper is a convenience to keep younger family members out of parent screens, not a security feature, so please do not rely on it to protect sensitive information.

If a security compromise affecting personal information occurs, we will take steps required by POPIA, including notifying the Information Regulator and affected people where required.

8. Your rights

Subject to applicable law, you may ask us to:

• confirm whether we hold personal information about you;
• provide access to your information;
• correct or update inaccurate information;
• delete information we no longer have a lawful reason to keep; or
• stop processing information where you withdraw consent or have another valid objection.

To make a request, email info@stickypaper.co.za. We may ask for information to confirm your identity before acting on a request.

You may also raise a concern with the Information Regulator of South Africa at inforegulator.org.za.

9. Cookies and technical information

StickyPaper does not use advertising or analytics cookies or trackers.

The app uses your browser’s storage to keep you signed in, remember which family profile you last used, and keep a connected calendar active. You can clear this storage in your browser settings, but you will then be signed out and any calendar connection will need to be set up again.

When you open StickyPaper, your browser contacts our hosting provider (GitHub) and services we use to load the page, such as Google (sign-in, fonts and Firebase), Microsoft (Outlook calendar sign-in) and a content delivery network (jsDelivr) for a software library. These providers receive technical information such as your IP address and device or browser type, as with any website.

10. Changes to this policy

We may update this Privacy Policy as StickyPaper changes. We will update the “Last updated” date and give notice of significant changes by email or in the Service.

11. Contact

StickyPaper is operated by Mariëtte van Niekerk, an individual trading as StickyPaper.
Information Officer and privacy contact: Mariëtte van Niekerk, info@stickypaper.co.za
Website: app.stickypaper.co.za
Our full contact and legal-notice details are in section 15 of our Terms & Conditions.