Pathfinder privacy policy

Policy version 1. Date: 30 October 2026.

Pathfinder is an app for occupational therapists and for parents of children they assess. It is a test version, for invited testers. It is for adults, not children.

Who is responsible

Beyond Data (Pty) Ltd, trading as Dithutlwa Digital, runs Pathfinder. Contact: dithutlwadigital@gmail.com.

Children's information and health information are special personal information under the Protection of Personal Information Act (POPIA). The registration of our Information Officer with the Information Regulator is pending. For account, sign-in and Circle information we are the responsible party. For a therapist's own client records and sittings, the therapist is the responsible party and we process them for the therapist as an operator.

What we collect

• Your name and email address from your Google account, when you sign in.
• Children's names and dates of birth.
• Reports, photos, scans and notes that users add.
• A therapist's clients (a label and a date of birth) and assessment sittings (answers and scores).
• The names, emails and labels of people a parent adds to a child's Circle.
• A log of who added, shared, opened, revoked and deleted each item. The responsible parent can see it. It cannot be switched off.
• Usage data: the screens you open, the time on each, and the actions you take. It is tied to your account. You can switch it off in Settings. The app tells you about this when you first sign in.
• Errors and crashes: the error type and where in the app it happened, never the message.

Why

To run Pathfinder: sign-in, child records, sharing, reports and sync. To keep the sharing log, and to find and fix faults. We do not sell information, show ads, share it for marketing, or use children's information to train AI. The app has no AI feature.

Who sees what

• The responsible parent (who set up the child's record) sees all of it, including the log.
• Other Circle members see the items shared with them and the items they added.
• Everyone in a Circle sees the list of members, with names, emails and labels, but not what other members see.
• A report a therapist sends to an email address is visible only to that therapist and to the person who signs in with that address, until they accept it into a record.
• Therapists see the items they created or were given, and their own clients and sittings.
• Anyone else sees nothing, not even that a child exists.
• The people who run Pathfinder control the server, its database and the secret that protects file keys. Their admin tools show names and the sharing log. We use this access only to run the service, fix faults and answer requests from you.

How it is protected

• All connections use HTTPS.
• Each file is encrypted on your phone with its own random key (AES-256-GCM). The app's files on your phone are encrypted with a key kept in the Android Keystore. Signing out deletes them.
• The server stores each file's key locked with a secret it holds. It unlocks the key only for people allowed to see that file. Notes and sittings are encrypted with that secret too.
• Names, dates of birth and other fields are database text, protected by Cloudflare's encryption at rest.
• The server checks every request against the sharing rules.

This is not end-to-end encryption. The server can unlock files for the people who may see them, so the people who run the server could, in principle, open stored files.

Where it is kept

• Cloudflare, Inc. hosts our server as our service provider. The database is in the European Union.
• Encrypted files may be copied to Cloudflare locations outside the EU. Cloudflare processes them under its data processing terms, which give them protection equal to POPIA's.
• Our server stores no IP addresses. Cloudflare handles connection data under its own terms.
• Google handles sign-in under its own privacy policy.

How long we keep it

Until you, or the parent who set up the record, deletes it. Deleting a child's record also deletes its log. Usage data is kept for 12 months after they are recorded. Deleting an account deletes its usage data.

How to delete

• In the app: Settings, then Delete account.
• By email: dithutlwadigital@gmail.com.
• The page at https://dithutlwadigital.com/delete-account explains the steps. It does not delete anything itself.

Your rights

Under POPIA you can ask what we hold about you, ask us to correct or delete it, and object to how we use it. You can complain to the Information Regulator of South Africa at https://inforegulator.org.za.

Changes

When this policy changes, we raise the version number and the date. A significant change is shown in the app before it takes effect.