Privacy Policy

1. Who we are

Oke Studio ("we", "our", "us") is a music-education platform operated by Auxo Digital (Pty) Ltd, South Africa. This policy explains how we collect, use, store and protect personal information in terms of the Protection of Personal Information Act, 2013 (POPIA), and applies to the Oke Studio web and mobile apps and the okestudio.co.za website.

Our appointed Information Officer is Jabu, reachable at support@okestudio.co.za.

2. Information we collect

• Account details: name, email address, date of birth, role (student or teacher), and a password (stored only as a secure hash by our authentication provider).
• Profile information you choose to add: favourite artists, songs and colour, goals, and a profile picture.
• Learning content: songs you track, practice notes, shared resources, lesson bookings, and progress activity.
• Subscription & payment status: your plan, subscription status and renewal date. We never see or store card numbers — payments are processed entirely by Paystack.
• For users under 18: a parent/guardian's consent and their email address (see section 3).
• Usage data: an activity log of in-app actions (for example songs added or lessons booked) used to power teacher dashboards and progress insights.

3. Children's information

Many of our users are music students under 18. In line with POPIA, we only process a child's personal information with the consent of a parent, guardian or other competent person. At signup we ask for the user's date of birth; users under 18 must confirm that a parent/guardian consents and provide that person's email address, which we record with the consent. A child's personal information is visible only to the child and the teacher they have chosen to link with — never to other users. A parent or guardian may contact us at any time to review, correct or delete their child's information.

4. How we use your information

• To provide the service: song tracking, notes, lesson booking, teacher-student collaboration.
• To process subscriptions and payments (via Paystack).
• To generate AI features you request: the AI Lyric Finder sends the song title and artist you enter to Google's Gemini AI; progress insights send activity summaries.
• To send service emails (bookings, account) and, only with your consent, marketing messages. You can withdraw marketing consent at any time in Settings.
• To keep the platform safe (abuse prevention, audit trail).

5. Who processes your information (operators)

We use these service providers, each acting under contract and appropriate safeguards:

• Google Firebase / Google Cloud — authentication, database, file storage and server functions (data hosted in the EU, europe-west1).
• Google Gemini AI — processes the specific text you submit to AI features.
• Paystack — payment and subscription processing (PCI-DSS compliant).
• Netlify — website and app hosting/CDN.

Your information is stored on servers in the European Union. POPIA permits this cross-border transfer because these providers are bound by laws and contracts that offer an adequate level of protection substantially similar to POPIA.

6. How long we keep it

We keep your personal information for as long as your account is active. If you delete your account, your profile and subscription are removed and any active subscription is cancelled immediately; remaining content linked to your account is purged from our systems within 30 days, except where we are required by law to keep specific records (for example financial transaction records).

7. Security

All traffic is encrypted in transit (TLS). Access to data is enforced server-side with per-user security rules — for example, a student's information is only readable by that student and their linked teacher. Payment credentials never touch our systems. Secrets and API keys are stored in a managed secret store, and subscription entitlements can only be written by our servers after cryptographically verified payment notifications.

8. Your rights under POPIA

• Access the personal information we hold about you.
• Ask us to correct or delete it (account deletion is available directly in Settings).
• Object to processing or withdraw consent (including marketing).
• Complain to the Information Regulator of South Africa: complaints.IR@justice.gov.za.

To exercise any of these rights, use your account settings or contact our Information Officer at support@okestudio.co.za.

9. Cookies and local storage

We use local storage and cookies only to keep you signed in and remember your preferences (like your theme). We do not use third-party advertising or cross-site tracking cookies.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app or by email before they take effect, and the "Last updated" date below will always reflect the current version.

11. Contact us

Questions about this policy or your personal information: support@okestudio.co.za (attention: Jabu, Information Officer).