POPIA and Privacy
What we process
AppForge AI Holdings (Pty) Ltd t/a malesedi.ai, 802 Wiedrigh Street, Moreleta Park, Pretoria, 0044, South Africa, operates MaLesedi and is the responsible party under POPIA for the personal information described in this notice.
We process account and authentication details, prompts, model replies, saved conversations, plan and subscription status, usage and cost records, consent records and limited security and operational logs. We use this information to provide the service, enforce plan limits, secure accounts, troubleshoot failures, meet legal obligations and improve reliability.
The 15-message trial route
The one-time trial uses the same zero-data-retention, no-prompt-training AI ladder as Lite. It stays free for 15 messages in total and does not renew.
We apply automated redaction and send only the latest trial prompt needed for the response, but automated redaction can miss content. Do not put personal, confidential, financial, medical, identity, account or other sensitive information into the trial.
AI routing for every plan
In the MaLesedi chat app, for the trial as well as for Lite, Plus, Pro and Max, we configure AI routing to use provider endpoints that declare zero data retention and no prompt training. Prompts and the context needed to answer them still pass through our AI gateway and selected model provider. This provider-routing policy does not mean MaLesedi immediately deletes account, conversation, historical consent, usage or operational records kept for the purposes in this policy.
Our developer API is a separate surface. If you call it with an API key, the model routing described above does not automatically apply, and the endpoint serving your request may retain data. Do not send personal or confidential information through the developer API on the assumption that zero-data-retention routing is in force.
PayFast and payment information
PayFast processes checkout, card details and recurring monthly or annual charges for paid plans. MaLesedi does not ask for or store your full card number or CVV. We may receive and store the PayFast payment and subscription identifiers, billing status, plan, amount, dates, account email and receipt records needed to activate, manage and reconcile your subscription. PayFast handles payment information under its own privacy and security terms.
Where information is processed
MaLesedi is built in South Africa, but we do not promise South African data residency. Cloud hosting, identity, database, payment, monitoring, AI gateway and model providers may process or store information outside South Africa. We handle cross-border processing subject to applicable POPIA requirements and available provider safeguards.
Cookies and operational telemetry
We do not use advertising trackers in the current launch. Authentication requires identity-provider cookies. Hosting, application and monitoring services may record IP address, browser details, request timing, errors and security events needed to run and protect the service.
See our Cookies and Consent notice for essential-cookie details and information about historical trial-route consent records.
Deferred products
BYOK, MCP, code, cowork and design products are not currently available, so MaLesedi does not currently collect provider API keys or runner data for those products. The MzansiMind and UbuntuMind skills libraries remain roadmap concepts and do not accept subscriptions or donations. We will update this notice before those data flows are enabled.
Retention and deletion
We keep personal information only for as long as it is reasonably needed to provide and secure the service, maintain required payment and consent records, meet legal obligations and resolve disputes. You may ask us to delete your account and associated personal information, subject to records we must lawfully retain.
Your rights
Under POPIA, you may request access to, correction of or deletion of your personal information and may object to or restrict certain processing where the law allows. Contact privacy@malesedi.ai. You may also lodge a complaint with the Information Regulator of South Africa.