Cura Connect
Privacy and POPIA
How personal information is handled for this site and for the Cura Connect product, including the part everyone asks about first: voice recordings.
Who this covers
Cura Connect is a product of Industrial Growth Hub (Pty) Ltd, a company registered in South Africa and based in Cape Town. This notice explains how personal information is handled under the Protection of Personal Information Act, 2013 (POPIA).
It covers two different groups, and the distinction matters because our role is different for each.
- Visitors to this site. Industrial Growth Hub is the responsible party. We decide what is collected and why.
- Crews and supervisors using Cura Connect on a mine or plant. Their employer is the responsible party. Industrial Growth Hub acts as an operator, processing on the employer's instruction and under a written operator agreement.
If you are a worker and want to know what is captured about you, your employer holds that answer and has the agreement that governs it. We will always help them answer you, and we will not act on a request about an employer's data without that employer's instruction.
What we process
From this website
- What you type into the contact form: name, company, role, email, telephone if you give it, and your message.
- Standard server logs: IP address, browser and device type, pages requested, timestamps.
The capture demonstration on the home page is a scripted animation. It does not use your microphone, it records nothing, and it sends nothing anywhere.
From the product, on a site
- Audio of the words spoken while the headset button is held.
- Transcripts of that audio, and the structured fields extracted from it.
- Identifiers attached to each record: the signed-in user, the device, the site and section, the time it was spoken and the time it synced.
- Confidence scores and the identity of the recognition and language models used.
We do not process special personal information, we do not process children's information, and we do not use voice to identify or authenticate anyone. Speaker attribution comes from the signed-in session, not from the voice itself.
Voice recordings, specifically
This is the part people ask about first, so it is stated plainly.
- There is no wake word and no background listening. The microphone is opened only while the button on the headset is physically held, and closes when it is released.
- Audio is kept for 30 days by default, then deleted. The transcript stays attached to the record it created, because that is the operational and safety value.
- The retention period is the employer's to set. Thirty days is our default, not a limit we impose.
- Recordings are not used to monitor individual performance under our standard operator agreement, and are not used for disciplinary purposes unless the employer's own policy says so and workers have been told.
- We do not use customer audio or transcripts to train general-purpose models. Site-specific vocabulary tuning happens only with the employer's written instruction and stays with that employer.
Continuous voice capture in a workplace is a consultation matter as well as a legal one. We raise it with the employer and with organised labour before a deployment rather than after, and we expect to be asked to show this policy.
Why we process it
- To provide the service: turning speech into work orders, hazard reports and shift handovers, and writing them into the system of record.
- To keep an audit trail: so a record can be traced to who said it, when, and in what words. This supports the employer's obligations under the Mine Health and Safety Act, 1996.
- To improve accuracy on that site: measuring recognition error and tuning site vocabulary, on the employer's instruction.
- To respond to enquiries made through this website.
Lawful bases are the performance of a contract, our legitimate interests and the employer's legal obligations, depending on the case. We do not sell personal information and we do not use it for advertising.
How long we keep it
- Raw audio: 30 days by default, then deleted. Employer-configurable.
- Transcripts and structured records: for as long as the employer keeps the record they belong to, as safety and maintenance records carry their own statutory retention periods.
- Contact form submissions: 24 months from last contact, unless a commercial relationship starts.
- Server logs: 90 days.
Security
- Encryption in transit and at rest.
- No vendor API keys on any device. The device talks only to our service.
- Access to customer data is role-based, logged, and limited to staff who need it for support.
- Deletion is applied across the record store, the audio store and any queued copy on the device.
If a compromise affects personal information, we notify the responsible party and the Information Regulator as section 22 of POPIA requires.
Your rights
Under POPIA you may ask to see the personal information we hold about you, to have it corrected or deleted, to object to processing, and to complain.
If you are a site visitor, contact our Information Officer below. If you are a worker on a site using Cura Connect, your request goes to your employer as responsible party; we will support them in answering it.
You may also complain to the Information Regulator of South Africa at inforegulator.org.za.
Information Officer
Industrial Growth Hub (Pty) Ltd
Information Officer: [NAME]
Email: [EMAIL]
Postal address: [ADDRESS]
Cape Town, South Africa
Company registration: [REG NUMBER]
Changes
If this notice changes materially we will say so on this page and, for customers, in writing before the change takes effect. The effective date is at the top of the page.