Privacy first, matching second

Privacy Policy

This policy explains what May Cross Hub collects, why it is needed for educator transfer matching, what other users may see, and the choices available to each educator.

Effective from: 30 June 2026 Last updated: 30 June 2026 South Africa

Scope

This policy applies to May Cross Hub, an educator transfer matching platform operated by Mzwamadoda Mayaya in South Africa. It covers the public website, registration, educator profiles, match results, saved matches, match requests, accepted-request conversations, reports, blocks and feedback submissions.

May Cross Hub is not a provincial education department, employer or official transfer authority. A match found on the platform is only a possible connection between educators. Official departmental, employer and school transfer procedures still apply.

How the platform is built: May Cross Hub uses Firebase Authentication for accounts, Cloud Firestore for profiles and matching records, Google Analytics for website usage measurement, and Formspree for verified-user feedback.

Information May Cross Hub collects

May Cross Hub collects information needed to create an account, compare reciprocal transfer routes, assess professional compatibility, manage requests, support conversations and keep the service safe.

Account detailsTitle, first name, surname, email address, cellphone number, password handled by Firebase Authentication, verification status and sign-in activity.
Current postSchool, province, district, optional circuit or ward, quintile, phase, grades, subjects and post level.
Transfer preferencesDesired province, district, town, optional preferred school, nearby-area preference, optional transfer reason and availability for requests.
Match activityCompatibility scores, saved matches, sent requests, received requests, responses and accepted-request conversations.
Safety and supportReports, blocks, feedback messages, privacy requests and technical records needed to investigate service issues.
AnalyticsPage use and platform action events, without sending names, emails, phone numbers, school names or message contents to Analytics.

Information not requested for ordinary matching

May Cross Hub does not ask for identity numbers, payroll details, bank information, payment-card details, copies of identity documents or passwords outside the secure Firebase sign-in process.

How information is used

  • Create, verify and protect educator accounts.
  • Compare current and desired locations to identify reciprocal transfer routes.
  • Compare subjects, grades, phase and post level to estimate professional compatibility.
  • Show privacy-controlled match results and allow educators to send, accept, decline, cancel or archive match requests.
  • Open participant-only conversations after a request is accepted.
  • Send essential account verification and password-reset emails through Firebase Authentication.
  • Receive verified-user feedback through Formspree and review reports or blocks for safety.
  • Measure website use and completed platform actions with Google Analytics.
  • Comply with applicable law and respond to valid legal requests.

May Cross Hub does not sell personal information and does not use educator profile details for advertising personalisation.

What matched educators may see

The platform separates private account information from the match profile that other verified educators can see.

Shown for matchingSubjects, phase and gradesUsed to assess professional compatibility.
Shown for matchingProvince and districtUsed to compare reciprocal transfer routes without showing an exact address.
Shown for matchingPost level and availabilityHelps educators decide whether a request is realistic.
Shown after acceptanceTitle, initial and surnameThe only identity information revealed to the other educator after both sides accept a request.
Always privateSchool, email and cellphone numberStored in the private profile and not shown to another educator.
Private by defaultOptional transfer reasonStored with the private profile and not shown in match cards.

Accepted-request conversations are visible only to the two educators in that request. Messages cannot be edited or deleted after sending, so users should avoid sharing sensitive personal information.

Service providers, analytics and storage

May Cross Hub uses trusted service providers to run the platform. These providers process information only for the service functions described in this policy.

Provider or recipientInformation involvedPurpose
Firebase / Google CloudAuthentication details, private profiles, match profiles, requests, messages, reports and technical recordsAccount access, database storage, matching, security and platform operation.
Google AnalyticsWebsite usage and platform action eventsUnderstand how the website is used. Advertising storage and advertising personalisation are disabled.
FormspreeFeedback details submitted by a signed-in, verified educatorDeliver feedback and privacy concerns to the May Cross Hub operator without redirecting users away from the website.
Matched educatorsProfessional match details before acceptance; title, initial and surname after acceptance; participant messagesAssess compatibility, manage requests and communicate after acceptance.
Authorities or legal recipientsInformation required by a valid legal obligation or requestComply with applicable law and protect users or the service.

Some providers may process or store information outside South Africa depending on their infrastructure and account configuration. May Cross Hub will take reasonable steps to use providers with appropriate privacy and security safeguards.

Security, incidents and retention

May Cross Hub protects information by using verified authentication, separated private and match-safe profile documents, participant-only request access, participant-only conversations, immutable messages and Firestore security rules. Users are responsible for keeping their own passwords secure and for signing out on shared devices.

What happens after a security incident?

May Cross Hub will investigate the issue, take steps to contain it, document important decisions and give notices required by applicable law, including notices required under POPIA where relevant.

How long is information kept?

Active account and profile information is kept while the account is open. When a user deletes an account, the active private profile, public match profile and accepted-name identity profile are removed. Shared request history, conversation messages, safety reports and support records may be kept for up to 24 months, or longer where needed for security, dispute handling or legal obligations.

Does this website use cookies or browser storage?

Firebase Authentication uses necessary browser storage to keep users signed in securely. Google Analytics runs automatically where the browser supports it. Advertising storage and advertising personalisation are disabled.

Your choices and privacy rights

Subject to applicable law, educators may ask about personal information held by May Cross Hub and may exercise rights available under South Africa's Protection of Personal Information Act, 2013 (POPIA).

AccessAsk whether May Cross Hub holds personal information about you and request access to it.
CorrectionUpdate information that is inaccurate, incomplete, misleading or out of date.
DeletionDelete the active account and profile from the Profile page after password confirmation.
ObjectionObject to certain processing where POPIA gives you that right.
Withdraw choicesPause your profile, change request availability or update optional information from the Profile page.
ComplainRaise a concern with May Cross Hub or lodge a complaint with South Africa's Information Regulator.

May Cross Hub may need to confirm your identity before acting on a privacy request, but will request only what is reasonably necessary for verification.

Contact, complaints and official resources

Privacy questions, access requests, correction requests and complaints can be submitted through the May Cross Hub feedback form. Choose Privacy concern so the request can be identified and handled separately from ordinary feedback.

Responsible party:May Cross Hub, operated by Mzwamadoda Mayaya

Privacy contact:Mzwamadoda Mayaya

Privacy request channel:May Cross Hub feedback and privacy form

Service location:South Africa

Users may also contact South Africa's Information Regulator for official POPIA guidance, forms and complaint procedures.