Legal

PAIA Manual

Last updated: 19 July 2026· Version 1.0

This is the manual required by section 51 of the Promotion of Access to Information Act, 2 of 2000 (“PAIA”), read with the Protection of Personal Information Act, 4 of 2013 (“POPIA”). In plain English: it explains what records our company holds, and how anyone can formally request access to them.

1. Who we are

  • Name: KJ AND CO (Pty) Ltd, trading as StudyLens (“the Company”)
  • Registration number: 2025/613256/07
  • Registered office: 1 Hotel Street, Persequor Park, Pretoria, Gauteng, 0020, South Africa
  • Website: studylens.co.za
  • Nature of business: AI-assisted study tools for South African school students.

2. Information Officer

The person legally responsible for handling information requests and POPIA compliance.
  • Information Officer: Anika Morgan (Director)
  • Email: hi@studylens.co.za
  • Postal address: 1 Hotel Street, Persequor Park, Pretoria, Gauteng, 0020

The Company and its Information Officer are registered with the South African Information Regulator.

3. The Regulator's guide (section 10 of PAIA)

The Information Regulator has published a guide, in all official languages, on how to use PAIA — including how to complete request forms and what to do if a request is refused. The guide is available free of charge from the Information Regulator:

4. Records we hold

The categories of records the Company keeps. Requesting one doesn't guarantee access — PAIA has grounds for refusal (like other people's privacy) — but this is what exists.
  • Company records — CIPC registration documents, company resolutions, statutory registers.
  • Financial records — accounting records, invoices, bank statements, tax records (SARS).
  • User records — account details, subscription and billing history, support correspondence.
  • Study content — material users upload and the study sets generated from it (each user can already access and delete their own from their dashboard — no PAIA request needed).
  • Operational records — supplier agreements (hosting, payments, AI providers), website analytics (aggregated), security logs.
  • Marketing records — mailing lists (with opt-outs), promotional material.

Records automatically available (no PAIA request needed)

5. How to request access to a record

Fill in the official form, send it to our Information Officer, and we respond within 30 days.
  1. Use Form 02 (Request for Access to Record), available from the Information Regulator's website.
  2. Describe the record clearly, state which right you need it to exercise or protect, and how you'd like to receive it (copy, inspection, etc.).
  3. Send the completed form to hi@studylens.co.za (subject: “PAIA request”) or to our registered office.
  4. Prove your identity (a certified copy of your ID may be required).
  5. We will respond within 30 days — granting access, or explaining the legal ground for refusal, or (in limited cases) extending by up to 30 more days with reasons.

Fees: the prescribed PAIA fees apply — a request fee (currently R140 for private bodies, unless exempt), plus reproduction costs where applicable, as set out in the PAIA regulations. Personal requesters asking for their own personal information pay no request fee.

6. How we process personal information (POPIA summary)

The condensed POPIA picture — the full detail lives in our Privacy Policy.
  • Purpose of processing: providing AI-generated study material, managing accounts and subscriptions, payments, support, security, and legal compliance.
  • Categories of data subjects: students (including children under 18, with parent/guardian consent), parents/guardians, and business contacts.
  • Categories of information: names, email addresses, school/grade details (optional), uploaded study material, generated study data, payment confirmations, and technical metadata.
  • Recipients: our vetted processors only — Supabase (database, EU), Clerk (authentication, USA), Vercel (hosting), Google Gemini and Anthropic Claude (AI processing, USA), Paystack (payments). We do not sell personal information.
  • Cross-border transfers: some processors operate outside South Africa (EU/USA) under contractual safeguards — see the Privacy Policy, section 13.
  • Security measures: encryption in transit and at rest, row-level database security, access controls, and no card data on our servers.
  • Retention: deleted within 30 days of account closure (90 days for backups); tax records kept 5 years as required by law.

7. Remedies if your request is refused

  1. Ask us to reconsider — email hi@studylens.co.za; we'd rather fix it directly.
  2. Complain to the Information Regulator: complaints.IR@justice.gov.za · inforegulator.org.za.
  3. Apply to a court with jurisdiction.

8. Availability of this manual

This manual is available free of charge on this page, and on request from our registered office or hi@studylens.co.za. It is updated whenever our details or processing practices materially change.