Tap2Serve Privacy Policy
Effective Date: April 2026 | Last Updated: April 2026
Tap2Serve ("we", "us", "our") operates the Tap2Serve mobile application. This policy explains how we collect, use, and protect your personal information in compliance with the Protection of Personal Information Act (POPIA) of South Africa.
1. Information We Collect
- Account Information: Name, email, phone number, password (encrypted)
- Profile Information: Bio, address, profile photo, business name (providers)
- Location Data: GPS coordinates when creating bookings or setting service areas
- Payment Information: Processed securely via iKhokha; we do not store card details
- Verification Documents: SA ID, business registration, trade licenses (providers only)
- Usage Data: App interactions, booking history, chat messages, reviews
2. How We Use Your Information
- To create and manage your account
- To match customers with service providers based on location and category
- To process payments via iKhokha
- To verify provider identity and qualifications (KYC/FICA)
- To send push notifications about booking status updates
- To resolve disputes between customers and providers
- To improve our services and user experience
3. Information Sharing
We do not sell your personal information. We share data only with:
- Service providers/customers: Name, location, and contact details necessary to complete a booking
- iKhokha: Payment processing
- AWS: Cloud hosting and data storage
- Law enforcement: When required by South African law
4. Data Security
- Passwords encrypted with BCrypt
- JWT token-based authentication
- HTTPS encryption for all data in transit
- Verification documents stored securely with restricted access
5. Your Rights (POPIA)
Under POPIA, you have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your account and data
- Object to processing of your information
- Lodge a complaint with the Information Regulator
6. Data Retention
- Account data: Retained while account is active
- Financial records: 5 years (SARS requirement)
- Chat logs: 2 years
- Deleted accounts: Data removed within 30 days
7. Contact Us
For privacy inquiries: privacy@tap2serve.co.za
Information Officer: Tap2Serve (Pty) Ltd, South Africa