POPIA Privacy Policy

How we collect, use, store, share and protect your personal information

Last Updated: 01 December 2025

BuddyApp (Pty) Ltd ("BuddyApp", "we", "us", "our") is committed to protecting personal information and complying with the Protection of Personal Information Act, 2013 (POPIA).

This Privacy Policy explains how we collect, use, store, share and protect personal information in accordance with POPIA and the Conditions for Lawful Processing under Chapter 3 of the Act.

This Policy applies to:

  • • All users of the BuddyApp platform (Clients and Buddies)
  • • Visitors to our website
  • • Users of our mobile applications
  • • Anyone who interacts with BuddyApp electronically

By using the Platform, you acknowledge and consent to the processing of your personal information in accordance with this Policy.

1The Responsible Party

BuddyApp (Pty) Ltd is the Responsible Party under POPIA. We determine the purpose and means for processing personal information.

Company

BuddyApp (Pty) Ltd

Location

Pretoria, Gauteng, South Africa

2Definitions (POPIA)

"Personal Information"

Any information relating to an identifiable, living natural person or existing juristic person.

"Data Subject"

The person to whom the personal information relates (Clients and Buddies).

"Processing"

Includes collecting, recording, storing, updating, destroying, transmitting or using personal information.

"Operator"

A third-party service provider who processes information on our behalf.

"Responsible Party"

BuddyApp (Pty) Ltd.

3What Personal Information We Collect

In line with POPIA, we collect only the information necessary for providing our services.

3.1 Information Provided by You

  • • Names and surnames
  • • Phone numbers
  • • Email address
  • • Residential or job location
  • • Identity verification details (ID/passport)
  • • Bank account details (for Buddy payouts)
  • • Payment and transaction details
  • • Profile photos (optional)
  • • Job descriptions and notes

3.2 Information Collected Automatically

  • • Device information
  • • IP address
  • • Location data (if permission granted)
  • • App usage data
  • • Cookies and analytics tracking

3.3 Information from Third Parties

We may receive information from verification partners, payment processors, and fraud prevention partners.

We do not collect unnecessary or excessive personal information (POPIA: Condition 3 – Purpose Limitation).

4Purpose of Processing

POPIA Condition 2 – Purpose Specification

We process personal information strictly for the following lawful purposes:

4.1 Core Platform Functions

  • • Creating and managing user accounts
  • • Matching Clients with Buddies
  • • Facilitating communication
  • • Processing bookings, payments and payouts

4.2 Safety, Security & Verification

  • • Identity verification
  • • Fraud detection and prevention
  • • Handling complaints, disputes and safety reports

4.3 Platform Improvement

  • • Analytics and performance monitoring
  • • Feature updates and system improvements

4.4 Legal Requirements

  • • Record keeping
  • • Compliance with applicable laws

We will not use your information for purposes unrelated to BuddyApp unless required by law or with your explicit consent.

5Lawful Basis for Processing

POPIA Condition 1 – Accountability

BuddyApp processes personal information using the following lawful grounds:

Consent

When you create an account or use the app.

Contractual Necessity

To deliver services through the platform.

Legal Obligation

Compliance with POPIA, tax laws, financial regulations.

Legitimate Interest

Fraud prevention, platform security, improving functionality.

We ensure compliance with all 8 POPIA Conditions for Lawful Processing.

6Sharing of Personal Information

POPIA Condition 7 – Security Safeguards

We do NOT sell your personal information.

We may share information only with:

• Payment processors
• Identity verification providers
• Cloud hosting providers
• Communication service providers (SMS, email, WhatsApp)
• Law enforcement (only when legally required)
• Buddies or Clients as needed for bookings

Every Operator is contractually required to comply with POPIA.

7Security of Personal Information

Security Safeguards

BuddyApp implements appropriate, reasonable technical and organisational safeguards, including:

Encryption
Secure servers
Access controls
Authentication procedures
Regular security audits

While no system is completely risk-free, we take all steps required by POPIA to protect information.

8Cross-Border Transfers

POPIA Chapter 9

If personal information is stored or processed outside South Africa:

  • We ensure the foreign country has adequate protection, or
  • We use POPIA-compliant contractual safeguards.

9Data Retention

POPIA Condition 3 – Retention & Restriction

Personal information is kept only as long as:

  • • Required to provide services
  • • Required by law
  • • Needed to resolve disputes

Deletion may be requested.

10Your POPIA Rights

You have the right to:

Access your information
Request correction
Request deletion (where lawful)
Object to processing
Withdraw consent
📝Lodge a complaint

11Cookies & Tracking

We use cookies for essential functions and analytics. For more details, see our Cookie Policy.

12Marketing Communication

Users may opt out of marketing communications at any time via account settings or unsubscribe links.

13Children's Personal Information

BuddyApp is not intended for users under 16 years of age. We do not knowingly collect personal information from children.

14Changes to This Policy

Updated versions of this Privacy Policy will be posted on the Platform with a new "Last Updated" date. Continued use of the Platform constitutes acceptance of any changes.

15Contact Information

Company

BuddyApp (Pty) Ltd

Location

Pretoria, Gauteng, South Africa

© 2025 BuddyApp (Pty) Ltd. All rights reserved.