BursaryFlow (“we”, “us”) helps students in South Africa find bursaries, track applications and manage the documents they need. This policy explains what personal information we process, why, who we share it with, and your rights under the Protection of Personal Information Act, 2013 (POPIA).
Who is responsible
- Responsible party
- Delton Novela, trading as BursaryFlow
- Information Officer
- Delton Novela
- Contact email
- hello@bursaryflow.co.za
- Country
- South Africa (a physical address is available on request by email)
Information we collect
- Account details: first name, last name, email address and a securely hashed password (we never store your password in readable form).
- Profile details you choose to add: phone number, date of birth, citizenship, gender, province and city, institution, student number, course, year of study, average mark, household income, and similar information used to match you to bursaries.
- Documents you upload or create: for example ID copies, academic transcripts, CVs, proof of income and motivation letters.
- Application activity: bursaries you save or apply for, their status and notes.
- Usage information: when you are signed in we record visit times so we can understand how long the platform is used, and our servers keep technical logs (for example IP address and errors) for security and troubleshooting.
Why we use it
- To create and secure your account and sign you in.
- To match you to bursaries, check your eligibility and show deadlines.
- To store your documents privately and help you check and improve them.
- To send account emails such as password-reset links.
- To keep the platform safe, prevent abuse and fix problems.
We rely on your consent, on performing the service you asked for, and on our legitimate interest in keeping the platform secure.
AI features
Some features (the Delton AI assistant, document review and enhancement) send the text or images you submit, and relevant parts of your profile, to an AI service provider so it can generate a response. Depending on how the platform is set up, this is one of Groq, Google (Gemini), Anthropic (Claude) or OpenAI. This may involve processing outside South Africa.
Storage and security
Documents are stored privately and are only served to the signed-in owner. Passwords are hashed, connections use HTTPS, and access to administration features is restricted. No system is perfectly secure; if there is a breach that affects you we will notify you and the Information Regulator as POPIA requires.
How long we keep it
We keep your information while your account is active. You can delete documents yourself at any time, and you can ask us to delete your account and data (see below). We may keep limited records where the law requires.
Your rights
You may ask us to confirm what we hold about you, to correct or delete it, to restrict or object to its use, or to withdraw your consent.
Email hello@bursaryflow.co.za. If you are unhappy with our response you may complain to the Information Regulator (South Africa): inforegulator.org.za.
Children
BursaryFlow is intended for students who are 18 or older, or younger users whose parent or guardian has agreed to their use of the service.
Changes
If we change this policy we will update the date at the top and, for important changes, tell you in the app.
Questions about this page?
Write to Delton Novela at BursaryFlow and we will get back to you.