Cookie Policy
This policy explains how KAZI, operated by Kazi Ai (Pty) Ltd, uses cookies and similar technologies, what each cookie does, and how you can control or withdraw your consent.
Key points
- Strictly-necessary cookies are required to log in and keep KAZI secure. They are always on.
- Analytics and marketing cookies are set only after you opt in via our cookie banner, never before, and never pre-ticked.
- We use one first-party attribution cookie and no third-party advertising or retargeting cookies.
- Reject-all is as easy as accept-all, and you can change or withdraw consent anytime.
On this page
1. What Are Cookies?
Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They are widely used to make websites work more efficiently and provide information to website owners.
KAZI uses strictly-necessary cookies to run the service and, only with your consent, analytics and first-party attribution cookies to understand and improve how KAZI works. We do not use third-party advertising cookies.
2. Your Choices & The Law (GDPR + POPIA)
KAZI is operated by Kazi Ai (Pty) Ltd. We serve users in South Africa, the European Union, the United Kingdom, the United States and elsewhere, and we apply the strictest of the applicable standards to everyone.
- Consent-first (opt-in): Under the EU GDPR and ePrivacy Directive, the UK GDPR/PECR, and South Africa's Protection of Personal Information Act (POPIA), non-essential cookies are placed only after you actively opt in, and nothing is pre-ticked. Where a measurement script does load up front (Google Analytics via Consent Mode v2, and our product analytics), it starts in a consent-denied state: it sets no cookies and stores no personal data until you opt in.
- Reject is as easy as accept: Our banner offers Accept all and Reject all with equal prominence, plus granular per-category controls.
- Strictly-necessary basis: Essential cookies rely on our legitimate interest / the necessity of providing the service you requested (POPIA s11; GDPR Art. 6(1)(b)/(f)) and do not require consent.
- Withdraw anytime: Withdrawing consent is as easy as giving it. See How to Manage or Withdraw Consent. Withdrawal does not affect processing already carried out.
- Direct marketing (POPIA s69): We do not use cookies for unsolicited electronic direct marketing. Our one marketing cookie is first-party campaign attribution only and is never shared with advertisers.
- Consent expiry: Your choice is stored for up to 12 months, after which we ask again.
You also have the right to lodge a complaint with a supervisory authority: in South Africa, the Information Regulator; in the EU/UK, your local data protection authority.
3. Types of Cookies We Use
Essential Cookies (Strictly Necessary)
These cookies are required for the Platform to function and cannot be disabled in our systems. They are usually set in response to actions you take, such as logging in or filling in forms.
| Cookie Name | Purpose | Duration |
|---|---|---|
| sb-*-auth-token | Supabase authentication & session | Up to 1 year |
| __Secure-next-auth.session-token | Sign-in session (NextAuth) | 30 days |
| ff_sso_session | Enterprise single sign-on session | 7 days |
| cookie-preferences (localStorage) | Remembers your cookie choices. Stored in browser localStorage, not an HTTP cookie | Until cleared / re-asked at 12 months |
Functional Cookies
These cookies enable enhanced functionality and personalization, such as remembering your preferences and settings.
| Cookie Name | Purpose | Duration |
|---|---|---|
| kazi-locale | Remember your language / region | 1 year |
| sidebar_state | Remember sidebar collapsed/expanded state | 1 year |
| theme | Remember dark/light mode preference | 1 year |
Analytics Cookies
These help us understand how visitors use the Platform so we can improve it. The cookies below are set only after you grant analytics consent in our cookie banner. Google Analytics loads on every page via Consent Mode v2 but runs cookieless in a consent-denied state until then; our PostHog and first-party analytics load but capture nothing and set no cookies until you opt in.
| Cookie Name | Purpose | Duration |
|---|---|---|
| ph_* (PostHog) | Product analytics & funnels | Up to 1 year |
| kazi_aid | First-party analytics: a random ID that counts unique visits/usage in our own analytics store (not shared with third parties) | 1 year |
| _ga, _ga_* | Google Analytics (if enabled): distinguish users | 2 years |
| _clck, _clsk | Microsoft Clarity (if enabled): usage insights | 1 year / session |
| device_id (localStorage) | First-party analytics device identifier: set only after you grant analytics consent | Until cleared |
| event_tracker_queue (localStorage) | Temporary batched queue of first-party analytics events awaiting send, after consent | Until sent / cleared |
| kazi_sid (sessionStorage) | First-party analytics session identifier: set only after you grant analytics consent | Current browser session |
Marketing Cookies
Set only after you grant marketing consent. We use a single first-party attribution cookie. No third-party advertising cookies.
| Cookie Name | Purpose | Duration |
|---|---|---|
| kazi_attr | First-party campaign attribution (UTM, referrer, landing page) so we can measure which channels bring users, not shared with advertisers | 90 days |
No third-party advertising cookies
KAZI does not use third-party ad-network or retargeting cookies. If that ever changes, we will update this policy and request your consent first.
4. Third-Party Cookies
Some cookies are placed by third-party services that appear on our pages. We have no control over these cookies. These third parties include:
- Supabase: Authentication and database services
- Paystack: Payment processing (cookies set on Paystack checkout pages)
- Vercel: Hosting and performance analytics
These third parties have their own privacy policies and cookie policies:
5. How to Manage or Withdraw Consent
You have the right to decide whether to accept or reject non-essential cookies, and to change your mind at any time. Withdrawing consent is as easy as giving it.
In KAZI (recommended)
Use the button below to re-open the cookie preferences centre and switch any category on or off. Your new choice takes effect immediately, and disabling a category stops the matching cookies from being used.
Signed-in users can also manage this from Privacy settings.
Browser Settings
Most web browsers allow you to control cookies through their settings. Here's how to manage cookies in popular browsers:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data
For more information, visit AboutCookies.org or AllAboutCookies.org.
Opt-Out of Analytics
To opt out of Google Analytics, install the Google Analytics Opt-out Browser Add-on.
Impact of Disabling Cookies
Disabling cookies may affect your ability to use certain features of the Platform. Essential cookies are required for basic functionality and cannot be disabled without affecting your user experience.
6. Do Not Track & Global Privacy Control
Because KAZI is opt-in by default (no analytics or marketing cookies run until you actively consent), a "Do Not Track" (DNT) or Global Privacy Control (GPC) browser signal has the same practical effect as declining: no non-essential cookies are set unless you choose to enable them in our banner. If you never opt in, nothing beyond strictly-necessary cookies is used.
7. Mobile Device Identifiers
When you use our mobile applications, we may collect mobile device identifiers and use mobile analytics software to understand usage patterns. You can manage these through your device settings:
- iOS: Settings → Privacy → Tracking → Allow Apps to Request to Track (toggle off)
- Android: Settings → Google → Ads → Opt out of Ads Personalization (toggle on)
8. Updates to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our business practices. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date.
We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies.
9. Contact Us
If you have any questions about our use of cookies or this Cookie Policy, please contact us at:
- Entity: Kazi Ai (Pty) Ltd (operator of KAZI)
- Email: legal@kazii.ai
- Subject: "Cookie Policy Inquiry"
- Website: Contact Form