Privacy Policy

1. Who We Are & Introduction

Doisk (PTY) LTD ("Company," "we," "our," or "us") is a South African software company that develops and operates digital products, including Stylit (a salon booking and management platform) and Enfant (an AI-powered baby monitoring and cry analysis app).

This Policy complies with global privacy laws, including POPIA (South Africa), GDPR (EU), COPPA (US), HIPAA (US health data), and CCPA/CPRA (California, US). For privacy matters, contact us at support@doisk.com.

2. Definitions

Personal Data: Any information relating to an identified or identifiable person.
Baby Data (Enfant): Cry recordings, sleep data, age, developmental notes, and other child-related health information.
Service: Refers to all platforms provided by Doisk, including Stylit and Enfant.
Controller: Doisk (PTY) LTD, responsible for determining how and why data is processed.
Parental Consent: Verifiable permission obtained from a parent or legal guardian for processing Baby Data.
Aggregated Data: Anonymized information not identifying any individual.

3. Information We Collect

We collect information when you register, use our apps, or interact with our Services. This includes:

General Identity & Contact Data: Names, usernames, email addresses, phone numbers, and passwords.
Stylit Specific Data: Appointment details, salon business information, location (optional, for nearby suggestions), photo gallery uploads (optional), and billing/payout addresses.
Enfant Specific Data (Baby Data): Cry recordings, sleep data, timestamps, and developmental notes.
Payment Data: Debit/credit card numbers and metadata, processed securely via third-party providers (e.g., Paystack). We do not store full card details on our servers.
Technical Data: IP addresses, browser details, device information, crash reports, and app usage data.

4. How We Use Information

To Provide Services: Delivering app features, processing Stylit salon bookings, managing availability, and operating Enfant’s core functionalities.
Transactions & Rewards: Processing Stylit payments (including calculating client service fees and facilitating professional payouts via Paystack) and administering rewards programs.
AI & Research (Enfant): Conducting AI cry analysis, improving AI pattern detection accuracy, and aggregated health research.
Communication: Sending appointment reminders, payout updates, Enfant insights, security alerts, and promotional offers (if opted-in).
Security & Compliance: Authenticating users, preventing fraud, and complying with legal, tax, and accounting obligations.

5. Legal Basis for Processing

Our processing is lawful based on:

POPIA: Lawful, minimal processing for specified purposes based on consent and legitimate interests.
GDPR: Consent, contractual necessity, legitimate interest, and strict protections for children’s data.
COPPA: Requiring verifiable parental consent before collecting Baby Data from children under 13.
HIPAA: Secure handling of health-related Baby Data where applicable.
CCPA/CPRA: Respecting rights for California residents, including access, deletion, and opt-out of data sharing.

6. Sharing of Information

We do not sell your personal data. We only share information with:

Service Providers: Hosting platforms, customer support tools, and payment processors (e.g., Paystack, strictly under their privacy policies).
Research Institutions: For Enfant, we only share anonymized, aggregated Baby Data.
Authorities: Regulators or law enforcement when strictly required by law.
Business Successors: In the event of a merger, acquisition, or sale of assets, provided successors agree to this Policy.

7. Cross-Border Transfers

Doisk is based in South Africa, but your data may be transferred globally. We enforce safeguards including Standard Contractual Clauses (SCCs) under GDPR, POPIA cross-border compliance, strict encryption, and participation in the EU-US Data Privacy Framework where applicable.

8. Data Retention

Enfant Baby Data: Cry recordings are deleted within 30 days unless extended with explicit parental consent.
Stylit Account Data: Retained to provide services. If deleted, data is removed or anonymized within 60 days, except where required by law.
General Account Data: Retained until account closure plus 12 months.
Payment Records: Retained as legally required for tax and audit obligations.
Aggregated Data: Anonymized datasets may be stored indefinitely.

9. Security & Data Breaches

We implement layered safeguards including transit encryption (TLS 1.2+), at-rest encryption (AES-256), role-based access control (RBAC), and routine security audits. While we strive to protect your data, no system is 100% secure.

Breach Policy: In the event of a security breach, users will be notified within 72 hours (GDPR standard). We will report the incident to relevant regulators (e.g., the Information Regulator in SA, EU DPAs) and provide mitigation steps.

10. Children’s Data & Parental Consent (Enfant)

We collect Enfant Baby Data only with verified parental consent (via ID/utility bill or COPPA-compliant credit card verification). Parents may review Baby Data at any time, request corrections, or withdraw consent (which results in data deletion within 30 days).

11. AI Transparency & Scientific Basis (Enfant)

Enfant utilizes AI-based cry analysis grounded in peer-reviewed academic research. We follow OECD AI Principles and UNICEF AI for Children guidelines. Disclaimer: AI outputs are probabilistic and do not constitute medical advice. Enfant is not a certified medical device; parents should consult professionals for health concerns.

12. Your Rights

Depending on your jurisdiction (GDPR, POPIA, CCPA, etc.), you have the right to:

Request access to the personal information we hold about you.
Request correction, deletion ("right to be forgotten"), or restriction of processing.
Object to specific processing activities, including opting out of targeted marketing.
Withdraw consent where processing relies on it (e.g., Baby Data).
Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at support@doisk.com.

13. Cookies and Analytics

We use cookies and similar technologies for core functionality, analytics, performance, and user experience improvements (e.g., remembering Stylit login states). You may manage or disable cookie settings through your browser, though this may limit app functionality. We do not place personal identifiers in cookies.

14. Policy Changes

We may update this policy to reflect product evolution. Material changes will be published on this page with an updated effective date. For significant changes (especially involving Enfant Baby Data), users will be notified at least 30 days before enforcement. Continued use of our Services constitutes acceptance of changes.

15. Contact Us

If you have questions, disputes, or require assistance updating your data, please contact our Data Protection Officer at Doisk (PTY) LTD:

Email: support@doisk.com