Effective date: 1 June 2026 · Last updated: 27 May 2026
Destiny Workshop is operated by WarinHari Learn NPC, a non-profit company registered in South Africa. References to “we”, “us” or “our” in this policy refer to WarinHari Learn NPC.
We are the Responsible Party as defined by the Protection of Personal Information Act 4 of 2013 (“POPIA”). Our designated Information Officer can be reached at privacy@warinhari.online.
We collect the following categories of personal information when you use Destiny Workshop:
| Account data | Name, email address, password (bcrypt-hashed — we never store plaintext passwords) |
| Assessment responses | Your answers to all personality, values, IQ, EQ and strength assessments within the workshop |
| AI-generated content | Likes/dislikes synthesis, destiny portrait, vision caption and career suggestions generated by Claude AI based on your inputs |
| Vision board | The image you draw during the Vision module (stored as a data URL in your account) |
| Career data | Career suggestions, milestone roadmap and progress tracking |
| Goals | Personal mission statement and 1-, 2-, 5- and 10-year goals you enter |
| Payment information | Transaction reference numbers and subscription status — we do not store card details; all card processing is handled by PayFast |
| Usage data | Last module completed, completion date, workshop run history |
We apply multiple layers of security to protect your personal information:
| Encryption at rest | All sensitive assessment responses, AI-generated content, goals and career data are encrypted with AES-256-GCM before being written to the database |
| Password hashing | Passwords are hashed using bcrypt (cost factor 12) — we cannot retrieve your plaintext password |
| Transport security | All communication between your browser and our servers uses TLS 1.2+ |
| Authentication | Sessions are protected with signed JWT tokens (HS-256, 30-day expiry) |
| Access control | Database access is restricted to the API server; no direct public access is permitted |
| PayFast | Processes ZAR payments. Subject to PayFast’s own Privacy Policy. We receive only a transaction reference, not your card details. |
| Anthropic Claude | Generates personalised insights from your assessment responses. Data is transmitted over TLS and processed under our API agreement. |
| Resend | Transactional email delivery (receipts, results). Only your email address and relevant message content are shared. |
We do not sell, rent or share your personal information with any other third parties.
We retain your personal information for as long as your account is active. If you request deletion of your account, your personal data will be permanently removed within 30 days, except where retention is required by law (e.g. financial records for tax purposes, which are kept for 5 years).
You have the right to access, correct, or request deletion of your personal information at any time. Please see our POPIA Compliance Notice for a full statement of your data-subject rights under South African law.
Destiny Workshop uses only functional cookies strictly necessary for authentication (storing your JWT token in an HTTP-only cookie or local storage). We do not use advertising or tracking cookies.
Destiny Workshop is intended for users aged 16 and older. Users under 18 require parental or guardian consent. We do not knowingly collect personal information from children under 13.
We may update this policy from time to time. We will notify you by email or an in-app notice at least 14 days before any material change takes effect.
Questions or concerns about your privacy? Contact our Information Officer:
privacy@warinhari.online