Privacy Policy | shell I/O

1. Introduction

SHELL IO (PTY) LTD (CIPC Registration: 2026/033650/07), trading as shell I/O ("we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at shell-io.cloud and app.shell-io.cloud (the "Service").

We comply with the Protection of Personal Information Act, 2013 (POPIA) of South Africa and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

When you use our Service, we may collect:

Account Information: Name, email address, and password when you create an account
Profile Information: Display name and learning preferences
Payment Information: Billing details processed securely through Paystack (we do not store full card numbers)
Communications: Messages you send us, feedback, and support requests

2.2 Information Collected Automatically

When you access our Service, we automatically collect:

Usage Data: Lessons completed, XP earned, time spent learning, commands entered in the terminal simulator
Device Information: Browser type, operating system, device type
Log Data: IP address, access times, pages viewed
Cookies: Session cookies and authentication tokens

2.3 Analytics

We use Google Analytics 4 to understand how users interact with our Service. This helps us improve the learning experience. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

3. How We Use Your Information

We use your information to:

Provide, maintain, and improve our Service
Process your subscription and payments
Track your learning progress and award achievements
Send you important updates about your account and the Service
Respond to your inquiries and provide support
Analyze usage patterns to improve our curriculum
Detect, prevent, and address technical issues or security threats
Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Service Providers: Third parties that help us operate our Service (e.g., Firebase for authentication, Paystack for payments, Google Cloud for hosting)
Legal Requirements: When required by law, court order, or governmental authority
Business Transfers: In connection with a merger, acquisition, or sale of assets
With Your Consent: For any other purpose disclosed at the time of collection

5. Data Storage and Security

5.1 Storage

Your data is stored on secure servers provided by Google Cloud Platform and Firebase. Data may be transferred to and processed in countries outside South Africa, including the United States, where our service providers operate.

5.2 Security Measures

We implement appropriate security measures including:

Encryption of data in transit (HTTPS/TLS)
Secure authentication with Firebase Auth
HttpOnly session cookies
Regular security reviews

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

Learning progress and anonymized usage statistics may be retained indefinitely for analytical purposes.

7. Your Rights

Under POPIA and other applicable laws, you have the right to:

Access: Request a copy of your personal information
Correction: Request correction of inaccurate information
Deletion: Request deletion of your personal information
Portability: Receive your data in a portable format
Objection: Object to certain processing of your information
Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at hello@shell-io.cloud. We will respond to your request within 30 days.

8. Cookies and Tracking

8.1 Essential Cookies

We use essential cookies for authentication and session management. These are necessary for the Service to function and cannot be disabled.

8.2 Analytics Cookies

We use Google Analytics cookies to understand how you use our Service. You can manage your cookie preferences through your browser settings.

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

10. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: hello@shell-io.cloud
Website: https://shell-io.cloud

You may also lodge a complaint with the Information Regulator of South Africa if you believe your privacy rights have been violated.