Privacy Policy

1. Who we are

Ask Carri is operated by Carri, a paediatric OT with years of experience supporting children's development. We are the responsible party for the personal information collected through this platform.

Contact: hello@askcarri.com

2. What information we collect

We collect the following categories of personal information:

• ·Account information: your name and email address (via Clerk authentication)
• ·Child information: your child's name, date of birth, and areas of developmental concern
• ·Questionnaire responses: your answers to our developmental check-in questionnaire
• ·Video footage: short clips you voluntarily upload as part of a check-in submission
• ·Usage data: pages visited, interactions, and device/browser information (via Vercel Analytics)
• ·Payment information: processed securely by Stripe - we do not store card details

3. Why we collect it

We process your personal information only for these purposes:

• ·Providing the service: reviewing your check-in and preparing personalised Progress Notes and home programmes
• ·Account management: creating and managing your subscription
• ·Communication: sending progress notes and service-related emails
• ·Improving the platform: understanding how the service is used so we can make it better
• ·Legal compliance: meeting our obligations under POPIA and other applicable law

4. Information about children

Information about children (including videos) is collected and processed solely to provide the OT guidance service. We treat this information with the highest level of care. It is never shared with third parties for marketing or profiling, and is only accessed by Carri in the course of reviewing your submission.

By submitting a check-in, you confirm that you are the parent or legal guardian of the child and that you consent to the processing of their information for this purpose.

5. Who we share it with

We use the following trusted third-party service providers, each of whom processes your data only as necessary to deliver their service:

We do not sell your personal information. We do not share it with advertisers.

6. How long we keep it

• ·Account and child profile data: retained while your account is active
• ·Check-in submissions and progress notes: retained for 3 years to support continuity of care
• ·Video footage: retained for 12 months after submission, then deleted
• ·Payment records: retained for 5 years as required by South African tax law

You may request deletion of your account and associated data at any time - see section 8.

7. Security

All data is transmitted over HTTPS. Passwords are never stored by us - authentication is managed by Clerk. Video files are stored in a private Supabase bucket with access restricted to authenticated users and Carri only. We take reasonable and appropriate technical and organisational measures to protect your personal information.

8. Your rights under POPIA

As a data subject under POPIA, you have the right to:

• ·Access the personal information we hold about you
• ·Request correction of inaccurate or incomplete information
• ·Request deletion of your information (subject to legal retention requirements)
• ·Object to or restrict the processing of your information
• ·Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at hello@askcarri.com. We will respond within 30 days.

9. Cookies

We use strictly necessary cookies for authentication (Clerk session cookies) and optional analytics cookies (Vercel Analytics). You can decline analytics cookies using the banner shown on your first visit. Declining analytics cookies does not affect your ability to use the platform.

10. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated by email. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.