Legal
Privacy Policy
Last updated: 30 April 2026 · Effective: 30 April 2026
1. Who We Are
Ikigai Growth Consulting (Pty) Ltd is the responsible party (data controller) for personal information collected through the Ikigai platform.
Contact: hello@ikigaigrowthconsulting.co.za
Tel: +27 68 695 9713
South Africa
2. Information We Collect
Account information: Name, email address, and authentication data provided during sign-up (via Google OAuth through Supabase).
Usage data: Pages visited, features used, intelligence queries submitted, and interaction logs. This is used to improve platform performance and user experience.
Payment data: Billing information is processed by Paystack and is not stored on our servers. We only receive confirmation of successful payment.
API keys: If you provide an Anthropic API key, it is stored encrypted in your user profile and used solely to route your intelligence queries. We do not read, share, or use your key for any other purpose.
Conversation memory: When you interact with our AI executives (JARVIS, HAWKEYE, and team), conversation context may be stored temporarily in our Supabase database to maintain conversation continuity. This data is associated with your account and is not shared with third parties.
3. How We Use Your Information
- To deliver the intelligence platform services you subscribed to
- To authenticate your account and maintain session security
- To process payments and manage your subscription
- To send transactional emails (receipts, account notices, password resets)
- To improve our AI models and platform quality (aggregated, anonymised usage patterns only)
- To comply with legal obligations under South African law
We do not sell your personal information. We do not use your data for advertising profiling.
4. Third-Party Services
We use the following third-party services, each with their own privacy policies:
- Supabase — authentication and database (supabase.com/privacy)
- Vercel — platform hosting and edge deployment (vercel.com/legal/privacy-policy)
- Anthropic — AI model inference via your own API key (anthropic.com/privacy)
- Groq — AI inference for Telegram bots and vibe coding (groq.com/privacy)
- Paystack — payment processing (paystack.com/privacy)
- Telegram — AI executive messaging bots (telegram.org/privacy)
5. Data Retention
We retain your account data for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law (e.g., financial records under the Companies Act). Anonymised usage analytics may be retained indefinitely.
6. Your Rights (POPIA / GDPR / CCPA)
Depending on your jurisdiction, you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request erasure of your personal data ("right to be forgotten")
- Portability — receive your data in a machine-readable format
- Objection — object to processing of your data for specific purposes
- Withdraw consent — where processing is based on consent, withdraw at any time
To exercise any of these rights, email hello@ikigaigrowthconsulting.co.za. We will respond within 30 days.
7. Cookies
We use essential cookies only — for authentication session management and basic functionality. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You can disable cookies in your browser, but this may prevent you from logging in.
8. Security
We implement industry-standard security measures including HTTPS everywhere, encrypted storage for sensitive data (API keys), Supabase Row Level Security (RLS) for database access control, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Children
Ikigai is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us immediately at hello@ikigaigrowthconsulting.co.za.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users at least 14 days before taking effect. The "last updated" date at the top of this page reflects the most recent revision.
11. Complaints (POPIA)
If you believe we have not handled your personal information in accordance with POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa:
www.justice.gov.za/inforeg/
Email: inforeg@justice.gov.za