Privacy Policy

Last updated: 6 November 2026

TryStat ("we", "us", "our") is a service operated by Kruger Design Studio in South Africa. This Privacy Policy explains how we collect, use, store and protect personal information when you use the TryStat platform at app.trystat.co.za and the marketing site at trystat.co.za.

We comply with the Protection of Personal Information Act, 2013 (POPIA). By using TryStat, you consent to the practices described below.

1. Who is the Responsible Party

For the purposes of POPIA:

When you register a school on TryStat, your school becomes the Responsible Party for the personal information of its players, parents, coaches and staff. TryStat acts as the Operator processing data on the school's behalf.

2. Information We Collect

2.1 Account information

  • School name and contact details
  • Admin and coach names, email addresses, hashed passwords
  • User role (admin, coach, etc.)

2.2 Player information (entered by school staff)

  • Player name, jersey number, date of birth, position
  • Match performance statistics, awards, attendance

2.3 Usage and technical data

  • IP address, browser type, device type
  • Pages visited, actions performed, timestamps
  • Server logs for security and troubleshooting

2.4 Billing information

  • Payment references, invoice records, subscription history
  • We do not store full credit card numbers — these are handled by our payment processor.

3. How We Use Information

We use personal information to:

  • Provide the TryStat service to you and your school
  • Authenticate users and enforce permissions
  • Generate match reports, season summaries and player profiles
  • Process payments and send invoices
  • Respond to support requests
  • Improve the platform and detect abuse
  • Comply with legal obligations

4. Children's Information

TryStat is designed to be used by schools to record performance data of school-age rugby players, including minors. We do not knowingly collect personal information directly from children under 18.

Schools using TryStat are responsible for obtaining the necessary consent from parents or legal guardians before capturing player data, in accordance with POPIA's special protections for children's personal information.

5. Data Sharing

We do not sell personal information. We share information only:

  • With the school that owns the data (its admins and coaches)
  • With service providers necessary to operate TryStat (e.g. hosting, email, payment processing) — bound by confidentiality and POPIA-aligned contracts
  • When required by law, court order or to protect our legal rights

6. Data Storage and Security

TryStat is hosted on infrastructure located in South Africa. Personal information is stored in encrypted databases with restricted access. Passwords are stored using bcrypt hashing. We use HTTPS/TLS for all data in transit.

While we apply industry-standard security measures, no system is 100% secure. We will notify affected schools and the Information Regulator of any unauthorised access to personal information, as required by POPIA.

7. Data Retention

We retain personal information for as long as your school's account is active and for a reasonable period afterwards to comply with legal, accounting and operational requirements. On account closure, schools can request export of all data in CSV format and deletion of personal information from active systems.

Backups containing deleted information are retained for up to 90 days before being permanently overwritten.

8. Your Rights Under POPIA

Subject to POPIA, you have the right to:

  • Be informed about how we process your personal information
  • Request access to your personal information
  • Request correction or deletion of inaccurate information
  • Object to the processing of your information
  • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email hello@trystat.co.za. We respond within 30 days.

9. Cookies

TryStat uses cookies in the following categories:

  • Essential cookies — required for authentication and session management when you log in to the app.
  • Functional cookies — a small cross-subdomain cookie (trystat_known) is set after login and stores only the domain of your email address (e.g. example.co.za). It is used to streamline navigation between our marketing site and the app, so returning users can be routed directly to the application instead of seeing the public marketing page. No personal information beyond the email domain is stored in this cookie.

We do not use third-party advertising or tracking cookies. You can clear all cookies in your browser settings at any time without affecting your account.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. Significant changes will be communicated to school admins by email.

11. Contact

For privacy questions, data access requests or complaints:

You may also contact the Information Regulator of South Africa at inforegulator.org.za.