BRIGHT STEP LEARNING
Privacy notice
Your optional saved courses, last-opened lesson, narration speed and weekly target are stored privately in your account. Weekly progress counts newly passed lesson practices from this update onward using South African weeks. A free learning-record PDF and receipts are available only to the account owner; they are not publicly verified or published. See study planner details.
Private learner notes and bookmarks are saved to your account when you choose Save. Lesson problem reports are visible to the reporting learner and authorised admins. Reviews are optional, require course completion and explicit publication consent, and show only the chosen alias, rating, text and course version after moderation. Editing or withdrawing a review removes its published version. See learning tools and privacy details.
Optional affiliate referrals use consent-based device storage for up to 30 days and a server account attribution before first checkout. Affiliates see commission amounts and references, not learner identities. See affiliate terms and privacy details.
This first-version notice must be finalised with the legal provider’s details before public launch. The contact page identifies the configured provider and support address.
Information we use
We store your email address, name, account identifier, enrolments, lesson progress, assessment attempts and results, certificate and confirmation-letter records and payment references. Passwords are handled by Firebase Authentication. Payments are processed by Paystack; our application does not collect full card details. Request rate counters use hashed request identifiers.
Purpose and access
We use these records to provide accounts, learning, support, payment confirmation and certificates, and to prevent abuse. Authorised administrators can access records for these purposes. No advertising-personalisation trackers or marketing mailing lists are included. Optional Google Analytics is described below.
Certificate disclosure
A certificate link reveals holder initials, course, completion date and status. It does not reveal full name, email, assessment score or payment details. Share your certificate link only if you accept that someone with it can check this information.
Confirmation-letter disclosure
Anyone with a letter reference can check holder initials, course, completion date, letter issue date and current status. Full names, email addresses, scores and payment details are not published on the verification page. The downloaded PDF includes your full name; share it deliberately.
Optional lesson narration
When you press Play, your browser or operating system reads public lesson text aloud using an available English voice. Some voices use an online speech service; voices labelled on device may work locally. No microphone is used and Bright Step does not create or store audio recordings. Voice availability, data use and operation depend on your device and its provider. You may read the text without enabling narration.
Instructor submissions
Instructor profiles store a public name, teaching-background statement, guidelines acceptance, private drafts and review feedback. Only approved courses expose the instructor name publicly. Authorised admins review submitted content and private assessment answers. Instructor earnings records identify the course and payment reference without revealing learner names or email. Drafts and earnings are accessible through authenticated server endpoints, not public database reads.
Optional Google Analytics
With your consent, Google Analytics measures eligible public-page visits, course selections, start-learning actions and resource clicks. Our custom events omit names, emails, notes, assessment answers/scores, payment references, referral codes, full referrer URLs and search text. Page queries and fragments are removed from the locations we send. Google receives browser/device information and pseudonymous cookie identifiers and may process information outside South Africa. These reports are not a complete count of learners or an authoritative payment record. Advertising storage, Google signals and ad personalisation are disabled by this implementation. Enhanced measurement must remain off for this configured stream.
Your analytics choice is stored on the device for up to 180 days. Declining does not affect learning. Withdrawal blocks our tracking, attempts to clear this property’s first-party Analytics cookies and reloads an active tracked page to unload the tag. It does not erase information already received by Google. Contact support for applicable data requests. Browser restrictions, ad blockers and declined consent reduce the measured sample.
Service providers and transfers
Firebase/Google and Paystack process relevant data. Data may be processed outside South Africa. Before launch, the provider must document hosting locations, operator terms and lawful cross-border safeguards, and publish a retention schedule.
Your requests
Contact support to request access, correction, export, deletion or account closure. Some payment, fraud or dispute records may need to be retained for legal reasons. Account deletion is handled by an administrator rather than an automated button in this first version. You may raise unresolved POPIA concerns with South Africa’s Information Regulator.
Essential authentication storage keeps your session signed in. Optional Google Analytics cookies are used only after you allow them and the site configuration is enabled. No analytics tag is loaded before that choice. Change or withdraw your choice at Analytics choices. There is no marketing consent bundled with registration.