PRIVACY POLICY

2. Categories of information we may collect

• Account and contact information: name, surname, telephone number, profile photograph and account identifiers.
• Passenger and trip information: pick-up and destination details, ride requests, ride history, timestamps, fare, cancellation records, complaints, trip status and location information necessary to match and complete a ride.
• Driver and vehicle information: driver name and profile photograph, licence or verification information where required, vehicle registration number, vehicle details, owner/driver relationship or authorisation, and information used to approve or manage access.
• Payment and transaction information: payment status, fare, refund, voucher recharge, balance, settlement and transaction reference. Payment card credentials should be handled by the relevant payment provider where possible; Jikeleza should not retain full card details unless specifically necessary, lawful and appropriately secured.
• Technical information: device and app information, logs, diagnostic information, approximate or precise location when required for ride functionality, and security events. The exact categories depend on the app permissions and the features enabled.

3. Why we use information and our lawful basis

We use information to create and administer accounts; match passengers and drivers; identify the correct vehicle and driver; coordinate and support rides; calculate and record fares; process payments, refunds, vouchers and settlements; provide customer support; investigate complaints, fraud and safety incidents; secure and improve the Platform; and comply with legal obligations.

Under POPIA, processing must have a lawful justification and be reasonable, specific and proportionate. Depending on the purpose, the justification may include performing a contract with you, complying with a legal obligation, protecting a legitimate interest, or consent where consent is the appropriate basis. Where consent is relied on, it may be withdrawn subject to legal limits and processing already lawfully undertaken.

4. Location information and ride visibility

Location data may be used to help a passenger request a ride, help a driver reach a pick-up point, show trip progress, support dispatch and safety, and investigate reported incidents. Location access may require device permissions and may be affected by GPS accuracy, connectivity and settings.

If a trip-sharing feature is enabled, selected ride details or a live tracking link may be shared with people chosen by the user. Users should share such links carefully. The app should explain what information is visible through the link and for how long it remains accessible.

5. Who may receive information?

Information may be shared, to the extent necessary, with the passenger and assigned driver for a ride; the relevant vehicle owner for legitimate operational purposes; payment processors and financial institutions to process transactions; technology providers that host, maintain or secure the app; SMS/OTP providers; mapping/location providers; customer-support or safety personnel; and regulators, law-enforcement bodies or other parties where required or permitted by law.

Jikeleza does not authorise drivers or vehicle owners to use passenger information for independent marketing or unrelated purposes. We do not sell personal information. Any sharing must be limited to a lawful, stated purpose and protected by appropriate safeguards.

6. Cross-border processing

Some technology providers may store or process information outside South Africa. Before launch, Jikeleza must identify its actual hosting, analytics, mapping, SMS, payment and support providers and confirm that any cross-border transfers meet POPIA requirements, including applicable safeguards under section 72.

7. Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including service delivery, dispute resolution, fraud prevention, accounting and legal compliance. Retention periods vary by category and applicable law.

Jikeleza should adopt and publish a retention schedule covering account records, trip/location data, payment records, support tickets, verification documents and security logs. When information is no longer needed and no lawful retention duty applies, it should be securely deleted, destroyed or de-identified.

8. Security

We use reasonable technical and organisational safeguards intended to protect information against loss, unauthorised access, disclosure, alteration or destruction. Measures should include access controls, limited staff permissions, secure authentication, appropriate encryption, secure backups, vendor controls, staff confidentiality and a process for handling security incidents.

No electronic system can be guaranteed completely secure. If a security compromise occurs, Jikeleza will assess and notify affected people and the Information Regulator where required by POPIA.

9. Your rights

Subject to applicable law and verification of identity, you may ask whether Jikeleza holds your personal information, request access to it, ask for correction or deletion of inaccurate or unlawfully held information, object to certain processing, or withdraw consent where consent is the basis. These rights are not absolute; legal retention duties and other lawful grounds may limit a request.

You may also lodge a complaint with the Information Regulator of South Africa. Current contact information and complaint procedures should be checked on the Regulator’s official website before this policy is published.

10. Children

Jikeleza should not knowingly collect children’s personal information unless the app’s intended use, the applicable legal basis and any required consent or authorisation have been assessed under POPIA. Before publication, Jikeleza must set and communicate a minimum age or a parent/guardian authorisation process appropriate to the service and its intended users.

11. Marketing and communications

Service messages may be sent where necessary for account verification, ride updates, safety, payment, support or legal notices. Promotional communications must comply with applicable law and any required consent or opt-out rules. Users should be given a clear way to stop optional marketing messages.

12. Third-party services and links

The app may rely on app stores, payment providers, maps, messaging services, device operating systems and other third parties. Jikeleza does not control all processing performed independently by those parties. Users should review the applicable third-party privacy notices where relevant.

13. Changes to this policy

We may update this policy to reflect changes in the app, our practices or the law. The current version and effective date should be displayed in the app or another readily accessible place. Material changes will be communicated where required or reasonably appropriate.

14. Contact and privacy requests

For privacy questions, access/correction requests or complaints, contact Jikeleza at 084 887 0539. Jikeleza should designate and register its Information Officer as required, publish an appropriate privacy contact channel, and provide a secure process for receiving and verifying requests.