Ambition International School (Pty) Ltd is a private company registered in South Africa. We operate MobyMax Reports, an educational progress reporting service for schools and homeschool families using the MobyMax learning platform, together with a related subscription service, Exceptional Results.
We operate the following four websites, all under this single company and governed by this single privacy policy:
All four domains are operated by Ambition International School (Pty) Ltd and process information in accordance with this policy. Different sites collect different information depending on their purpose — the reporting sites collect learning and report data, while exceptionalresults.co.za additionally collects subscription and billing information (see Section 3).
Our Information Officer, Tim Stiff, is registered with the South African Information Regulator under registration number 2026-016709. The Information Officer's registration certificate is available for download here: Download Registration Certificate (PDF).
This policy applies to:
We collect the following categories of personal information:
For families who subscribe through exceptionalresults.co.za, we also collect information needed to manage your subscription:
We do not collect or store your card number, CVV, or banking details. All card and payment processing is handled directly by PayFast (see Section 7). We only receive confirmation of payment status and the reference needed to manage your subscription.
Some information we collect may qualify as special personal information, specifically information about the health or family circumstances of children. We collect this only where it is voluntarily provided by a teacher or parent to help us produce accurate reports. Where it is provided, we treat it with the additional protections POPIA requires. This information is never displayed on any report or shared outside our service.
We process your information for the following purposes:
We do not use your information for any other purpose without your further consent.
We process your information based on:
You may withdraw your consent at any time. There are two ways to do this:
Important distinction: Your consent covers two related things. First, it permits us to operate our reporting service for your child. Second, it covers our administration of your child’s access to the MobyMax learning platform.
We hold a single master MobyMax account, and your child’s individual MobyMax login is created and managed by us under that account. This means we — not you — control whether your child’s MobyMax access is active, suspended, or restored. You do not hold a direct account relationship with MobyMax.
MobyMax itself is a separate company based in the United States. Their platform stores your child’s learning records under our master account. We can request changes to that data within the controls MobyMax provides, but we cannot dictate MobyMax’s own retention practices (see Section 9).
If you withdraw consent, we will stop generating and sending reports for your child, deactivate their MobyMax login, archive their report data in line with our retention policy (Section 9), and remove your login access to our reporting portal. Withdrawal does not affect lawful processing carried out before withdrawal.
We use AI services, specifically Anthropic's Claude AI, to interpret your child's learning data and to draft narrative descriptions for inclusion in their reports.
Declining AI-generated reports: Because our reporting service is built around AI-assisted narrative generation, declining consent for AI use means declining the reporting service as a whole. Your child's underlying MobyMax learning subscription is unaffected — they continue to use MobyMax normally. If you would prefer reports without AI-generated narratives, please contact us at info@mobymaxreports.co.za to discuss whether a non-AI alternative can be arranged.
We do not sell your information. We share it only with the following parties, and only as needed to deliver the service:
| Provider | Location | Purpose | Data Shared |
|---|---|---|---|
| MobyMax (Learning App, Inc.) | United States | Core learning platform; stores your child's learning records under our master account | Student name, login, learning activity, assessment and progress data |
| Anthropic, PBC | United States | AI narrative generation | Student name, performance data, profile context |
| API2PDF | United States | PDF generation | Full report HTML including student data |
| Brevo (Sendinblue) | European Union | Transactional email delivery | Parent/teacher email addresses, report PDFs |
| PayFast (by Network) | South Africa | Payment processing for Exceptional Results subscriptions | Parent name, email, payment amount and status (no card data is shared with us) |
| Domains.co.za | South Africa | Website hosting and database storage | All data we collect |
Each of these providers is bound by their own privacy commitments. We do not authorise any of them to use your information for purposes other than providing the service to us.
About MobyMax specifically: We operate a single master MobyMax account, under which each active student has a login. The learning data your child generates is stored by MobyMax in the United States. As the account holder, we retain access to this data for as long as MobyMax keeps it, which is what allows us to reactivate an inactive student. Because this data is held within MobyMax’s platform, our ability to permanently delete it is limited by MobyMax’s own systems and retention practices (see Section 9 and Section 10).
For students enrolled at a registered school using our service (such as Ambition International School), we may be required by the South African Schools Act 84 of 1996 and provincial education legislation to share certain student records — typically enrolment information, attendance records, and assessment results — with the relevant Provincial Education Department (in our case, the Western Cape Education Department) or the national Department of Basic Education. This sharing is a legal obligation under POPIA s11(1)(c) and is not subject to consent. We share only the minimum information required by law.
For homeschool families and independent learners, we do not share any data with the Department of Basic Education. Homeschool reporting obligations remain the responsibility of the parent or guardian.
We do not share your information with advertisers, marketers, or any other third parties.
Some of the service providers listed above process your information outside South Africa, specifically in the United States (MobyMax, Anthropic, API2PDF) and the European Union (Brevo).
POPIA permits this transfer where:
We rely on a combination of your consent and contractual safeguards in our agreements with these providers.
| Data Category | Retention Period |
|---|---|
| Active student learning data | Duration of enrolment |
| Student data after leaving service | Anonymised within 90 days, fully deleted within 12 months |
| Student data where parent has declined consent (POPIA-archived) | Marked as POPIA-archived immediately. Anonymised within 90 days. Fully deleted within 12 months. Historical reports generated before opt-out are retained for 7 years per the row below. |
| Student learning data held within the MobyMax platform | Retained by MobyMax under MobyMax’s own retention practices, which may extend for several years. We deactivate the student’s login when their subscription ends, but the underlying records remain with MobyMax. We cannot guarantee permanent deletion of MobyMax-held data (see Section 10). |
| Parent/teacher account data | Until account is closed, then 12 months |
| Generated reports (PDFs) | 7 years (for educational record purposes) |
| Consent records | Indefinitely (legal proof requirement under POPIA) |
| Audit logs of system access | 24 months |
| Email logs | 24 months |
After the retention period, data in our own systems is either anonymised (made impossible to link to an individual) or permanently deleted.
Under POPIA you have the right to:
To exercise any of these rights, contact us at info@mobymaxreports.co.za. We will respond within a reasonable time, not exceeding 30 days.
For withdrawal of consent specifically: You may withdraw consent at any time by logging into our reporting portal and selecting "Decline" on the consent screen. This immediately stops the reporting service and deactivates your child’s MobyMax login.
To re-enable reports after declining: Email us at info@mobymaxreports.co.za. We will manually re-enable your account and you can accept consent on your next login.
If you are unhappy with how we handle your information, please first contact us at info@mobymaxreports.co.za. We will do our best to resolve your concern.
If you remain unsatisfied, you may complain to the Information Regulator:
We protect your information using:
No system is perfectly secure, but we treat security seriously and respond promptly to any incident.
Most of the information we process relates to children. POPIA s34-35 provides extra protection for children's personal information. We collect children's information only with the consent of a competent person (a parent or legal guardian) and use it only for the educational purposes described in this policy.
If you are a child reading this policy, please show it to your parent or guardian. They will deal with us on your behalf.
Our websites use cookies for:
You can disable cookies in your browser, but parts of the service may stop working. We do not use advertising or tracking cookies from third parties.
We may update this policy from time to time. When we make significant changes, we will:
The latest version is always available at /privacy-policy/.
We respect your right to opt out of our reporting service at any time. This section explains how the opt-out works and what happens to your information.
When you next log into our reporting portal, you will see a consent screen. Click "Decline" to immediately opt out. You will be logged out and your access to the reporting service will be paused. You will receive no further reports.
Your child's MobyMax login is part of our master account. When you opt out or your subscription ends, we deactivate that login. The underlying learning records remain stored with MobyMax (see Section 9), and we retain access to them as the account holder. We do not need you to contact MobyMax — we administer the account on our side.
If you return after a period away, your child's historical MobyMax records may still exist, but we will normally set your child up with a fresh placement assessment rather than simply resuming old progress. After time away, a child's actual learning level changes, and a fresh assessment places them correctly so they build from the right foundation. This gives the best educational outcome on return. To re-enable, email us at info@mobymaxreports.co.za. We will reactivate your child's account and create a fresh login for the portal. On your next login, you will see the consent screen again and can accept.
When you opt out, we send an internal notification to our Information Officer (Tim Stiff) so we can complete the technical archival steps promptly. We may reach out to you by email to confirm the action or to ask if there is anything we could do better.