PAIA manual
Last updated 5 October 2026
This manual is published under section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA), as amended by the Protection of Personal Information Act 4 of 2013 (POPIA). It explains how to ask Krikdex (Pty) Ltd for access to the records it holds about Khula, and how it processes personal information.
1. Contact details
Requests go to the Information Officer, who can be reached at:
- Name
- Krikdex (Pty) Ltd
- Legal status
- Private company registered in South Africa
- Registration number
- 2022/421139/07
- Director
- Leon Daniel Scheepers
- Physical address (also for legal notices)
- 22 Church Street, Graaff-Reinet, Eastern Cape, 6280
- Phone
- 077 438 9014
- hello@khulabucks.co.za
- Website
- khulabucks.co.za
- Information Officer
- Leon Daniel Scheepers (hello@khulabucks.co.za)
2. The Information Regulator's guide
The Information Regulator has published a guide on how to use PAIA and POPIA, available in all official languages. Ask the Information Regulator (South Africa) for it: inforegulator.org.za, enquiries@inforegulator.org.za, 010 023 5200, Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg.
3. Records available without a request
Anyone can read these on this website: the terms of service, the privacy policy, the cookie policy, the refund policy, this manual, and information about Khula and its prices.
4. Records kept under other laws
We keep records as required by, among others, the Tax Administration Act 28 of 2011, the Income Tax Act 58 of 1962, the Consumer Protection Act 68 of 2008, the Electronic Communications and Transactions Act 25 of 2002, POPIA and PAIA, and the Companies Act 71 of 2008 and the Value-Added Tax Act 89 of 1991 where they apply to us.
5. Records we hold
- Customer records: account details, the family records customers enter, subscription and billing records, consent records and correspondence.
- Financial records: payment records (through Paystack), receipts, accounting records and tax returns.
- Operational records: agreements with service providers, security and system logs, and website content.
- Business records: registration and statutory documents.
6. How to request access
- To see the personal information we hold about you, just email hello@khulabucks.co.za from the address on your account: no form is needed, and it is free (POPIA section 23).
- For any other record, complete Form 2 (Request for access to a record of a private body) from the Information Regulator's website and email it to the Information Officer at hello@khulabucks.co.za. Describe the record clearly, say how you would like access and how we should tell you the outcome, and include proof of identity (and of your authority, if you ask on someone else's behalf).
- The fees prescribed in the PAIA regulations may apply. There is no request fee when you ask for your own personal information.
- We decide within 30 days, or tell you within that time if we need up to 30 more. If we refuse, we explain why, and you may complain to the Information Regulator or apply to court.
7. How we process personal information
- Purposes: running Khula for families, billing subscriptions, account emails, keeping the service secure, analytics (only with consent), and meeting legal obligations.
- Whose information, and what: parents and guardians (account, billing, consent, correspondence and technical information); their children (first name, optional date of birth, avatar, chores, money records, school goals and a hashed PIN); and website visitors (technical information, and analytics with consent).
- Who receives it: our service providers Google (Firebase, Google Cloud and Gmail), Cloudflare, Resend and Paystack; Google Analytics with consent; and authorities when the law requires it.
- Transfers outside South Africa: sign-in (Firebase Authentication, United States), some scheduled jobs (Google Cloud, Belgium), email (Resend, United States), email you send us (Cloudflare, and Gmail outside South Africa), payments (Paystack) and analytics with consent (Google, mainly United States), all with protection that meets section 72 of POPIA.
- Security: encryption in transit and at rest, security rules that keep each family to its own data, hashed PINs, limited access to our systems, and breach notification under section 22 of POPIA.
The privacy policy has the details.
8. Where to find this manual
It is published at khulabucks.co.za/paia, and we will email a copy to anyone who asks.