Privacy Policy

Stokvel app, operated by QX Technologies (Pty) Ltd.
Last updated: 1 September 2026.

This policy explains what personal information the Stokvel mobile app ("the app") collects, why, how it is stored, and the choices you have. It is written to align with South Africa's Protection of Personal Information Act (POPIA).

Who is responsible for your information

QX Technologies (Pty) Ltd ("we", "us") is the responsible party.
Contact: privacy@qxtech.co.za
Address: [company address]

Information we collect

• Account details — your name, mobile number, and (optionally) email address, provided when you register.
• Profile photo — only if you choose to upload one.
• Stokvel activity — the stokvels you create or join, your role, contribution schedules, contribution and payout records, and the group's rules and agreement text.
• Device-only security settings — your unlock PIN and whether biometric unlock is enabled. These are stored only on your device and are never sent to us.
• Technical data — a login session token issued by our authentication provider, kept on your device to keep you signed in.

We do not collect your location, contacts, photos other than one you deliberately upload, advertising identifiers, or usage analytics.

How we use it

• To create and operate your account and your stokvels.
• To show each member their dues, payments, and payout schedule.
• To send you a one-time verification code by SMS when you register or recover access.
• To notify you within the app about contributions, confirmations, and payouts relevant to your stokvels.

We do not sell your personal information or use it for advertising.

Payments

The app currently records contributions and payouts that members arrange between themselves; it does not process card or bank payments. If in-app payments are added in future, this policy will be updated and the relevant payment provider's terms will apply.

Who we share it with

• Supabase — our database, file storage, and authentication provider. Your data is stored on Supabase infrastructure.
• Twilio — delivers the SMS verification code to your mobile number.
• Other members of a stokvel you belong to can see your name, profile photo, role, and contribution status within that stokvel.
• Law enforcement or regulators, only where we are legally required to disclose.

Where your data is stored

Data is hosted in the Supabase region configured for our project ( [region, e.g. Johannesburg / EU]). SMS delivery is routed through Twilio's global infrastructure.

How long we keep it

We keep your account and stokvel records for as long as your account is active. If you delete your account, we remove your personal profile information; contribution and payout records that other members rely on for their own history may be retained in anonymised form.

Your rights

You may request to access, correct, or delete your personal information, or object to its processing, by emailing privacy@qxtech.co.za. You can also lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).

Security

Access to stokvel data is restricted by row-level security so that you only see stokvels you belong to. Traffic between the app and our servers is encrypted in transit. You can add a PIN and biometric lock on your device for an extra layer.

Children

The app is intended for people aged 18 and over and is not directed at children.

Changes to this policy

We may update this policy. Material changes will be communicated in the app or by SMS, and the "last updated" date above will change.