PRIVACY POLICY

Last updated: 30 September 2026

Who we are

Hacking Hub is a South African cybersecurity career accelerator. This policy covers the marketing site (hackinghub.co.za), the member web portal, and the Hacking Hub mobile app — all three share the same underlying account and data, so this one policy covers all of them. If you have questions, reach us at siya@hackinghub.co.za.

What we collect

What's collected depends on how you use Hacking Hub. The free tools on the public site (Salary Intel, the practice quiz, the role-fit quiz, the AI interview prep demo) don't require an account and don't collect personal information beyond standard, anonymized site analytics.

For members — on the web portal, the mobile app, or both — we collect:

Data	Why
Name and email address (via Google Sign-In)	Account identity, sign-in, communication
Profile details you add (LinkedIn, headshot, location, specialty, TryHackMe username, etc.)	Powers the Member Directory and your public reviewer profile, if you choose to add them
Roadmap progress (certifications, projects, checklist items)	Tracks your own career roadmap
Google Calendar (read-only)	Shows your next 1-on-1 mentor session in the app and portal — we never write to or modify your calendar
Job Board activity	Lets you browse and post listings
Event RSVPs	Tracks who's attending community events
Push notification token (mobile app only)	Sends you a streak reminder, a new Job Board post, or a 1-on-1 starting soon — nothing else
Billing details (member portal only)	Processed by PayFast for membership and merch orders — we don't store your card details ourselves

Third parties we rely on

• Google — Sign-In (identity) and Calendar (read-only, 1-on-1 Meetings only)
• Supabase — our database, authentication, and file storage provider
• Firebase Cloud Messaging — delivers push notifications on the mobile app
• PayFast — payment processing for membership and merch (web portal only)
• Netlify / Vercel — hosting for the site, portal, and app

We don't sell your data, and we don't use third-party advertising trackers anywhere across the site, portal, or app.

How your data is protected

Access to your data is enforced at the database level (Row Level Security) — you can only read or write your own records, with a narrow set of admin accounts able to see what's needed to run the community. Sensitive fields (like billing details) are restricted even further, to admin-only access via server-side functions rather than general table access.

Your choices

• Update or remove most of your profile details yourself, any time, from the portal or app
• Turn off push notifications from your device's system settings
• Revoke Google Calendar access at any time from your Google Account's third-party access settings — the 1-on-1 Meetings tab will just stop showing your next session
• Ask us to export or fully delete your account and data by emailing siya@hackinghub.co.za

Children's privacy

Hacking Hub isn't directed at children under 13, and we don't knowingly collect data from anyone under that age.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page. Continuing to use Hacking Hub after a change means you accept the updated policy.