Privacy Policy

This Privacy Policy explains how Sure Applications (Pty) Ltd ("SÜRE", "we", "us", "our") collects, uses, stores and protects your personal information when you use the SÜRE platform, website (suretechapp.com) and mobile applications (collectively, the "Platform"). We are committed to processing your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA") and other applicable South African laws.

Responsible party: Sure Applications (Pty) Ltd, CIPC registration 2026/284243/07.

Physical address: 9 20th Street, Menlo Park, Pretoria, 0081, South Africa.

Information Officer: Mduduzi Brandon Tshabangu, contactable at support@suretechapp.com, or by post at 9 20th Street, Menlo Park, Pretoria, 0081, South Africa.

• Identity and contact details: full name, email address, mobile number, physical address.
• KYC information (service providers and sellers only): South African ID number, proof of address, trade qualifications or licences where required.
• Location data. How we collect location depends on how you use SÜRE.
  • Customers. We collect your device's location while you are actively using the app, so that we can match you with nearby providers and stores, set a service or delivery address, and show you your provider's live position as they travel to you. We do not collect a customer's location when the app is closed or running in the background.
  • Service providers and couriers. In addition to the above, we collect your device's precise location in the background — that is, while the SÜRE app is not open on your screen — but only while you have an active job in progress. Background collection begins when you accept a service call-out or a delivery, and stops as soon as that job is completed or cancelled. We do not collect your location in the background while you are merely online and waiting for work, and we do not collect it at all while you are offline.
  • Why we need this. Continuous location is what allows a customer to watch their provider approach in real time, and what allows a buyer and a store owner to follow a delivery from pickup to doorstep. Without background collection, tracking would freeze the moment a courier's screen locked or they opened another app — which is precisely when they are driving.
  • Your control. You may grant, restrict or withdraw location permission at any time in your device settings. On Android, an ongoing notification is shown whenever background location is active, so you always know when it is running. Withdrawing background permission will prevent you from accepting jobs that require live tracking.
• Payment information: payment card details are collected and tokenised directly by Paystack. SÜRE never stores raw card data on its own systems.
• Camera. We use your device camera to capture identity and verification documents during KYC (service providers and sellers only), and to capture proof-of-delivery photographs at the point of hand-over. We do not access your camera at any other time.
• Images you upload. Profile photographs, product listing images, and delivery confirmation photographs.
• Content you post. Chat messages exchanged with other users, ratings and written reviews, service and product listings, and any images attached to them.
• Transaction history: records of bookings, orders, invoices, payments and chat messages.
• Device and usage data: device type, operating system, IP address, app version, crash logs and product analytics.

• To create and manage your account.
• To process bookings, orders, payments and payouts.
• To match customers with nearby verified providers and stores.
• To prevent and detect fraud, abuse and unlawful activity.
• To provide customer support and respond to enquiries.
• To comply with our legal and regulatory obligations, including FICA record-keeping.
• To improve and secure the Platform.

We rely on the following lawful bases under POPIA:

• Contract: processing necessary to provide the Platform you have signed up for.
• Legitimate interest: fraud prevention, security and product improvement.
• Consent: marketing communications, optional features and access to device location.
• Legal obligation: record-keeping under FICA and other South African laws.

• Paystack — payment processing, card tokenisation, refunds, and payouts to providers and sellers.
• Mapbox — map rendering, geocoding and route calculation. Location coordinates are transmitted to Mapbox in order to draw maps and routes.
• Supabase, provided through Lovable — secure data hosting, database services, and the delivery of transactional and account-related email.
• Sentry — application error and crash monitoring, hosted in the European Union. Configured to capture errors only, with personal information removed before transmission.
• Google — where you choose to sign in with a Google account, Google authenticates you and provides us with your name and email address.
• Law enforcement and regulators — only where required by law, or to protect the rights, property or safety of our users or of third parties.

We do not sell your personal information, and we do not share it with advertisers.

We retain account and transaction data for the duration of your active account and for five (5) years after account closure, in line with section 23(1) of the Financial Intelligence Centre Act, 38 of 2001. Marketing data is retained only while your consent is active and is deleted within thirty (30) days of consent withdrawal.

Ban-enforcement identifiers. Where an account is closed following a serious breach of our Terms of Use, we retain a limited set of identifying details indefinitely, for the sole purpose of preventing that person from re-registering. This is done to protect other users. These details are not used for any other purpose, are not used for marketing, and are not shared except as described in this policy.

• Right of access — request a copy of the personal information we hold about you.
• Right to correction — request that we correct inaccurate information.
• Right to deletion — request deletion subject to our regulatory retention obligations.
• Right to data portability — receive a copy of your data in a portable format.
• Right to withdraw consent — at any time, where processing is based on consent.
• Right to lodge a complaint with the Information Regulator of South Africa.

Submit requests to support@suretechapp.com.

The Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it.

The website uses essential cookies required for the site to function and analytics cookies that help us understand how visitors use the site. You can control cookies through your browser settings. The mobile app uses analytics SDKs to capture anonymised usage events for product improvement.

Where possible, your personal information is processed within South Africa. Where data is transferred outside South Africa (for example, by certain service providers), we ensure that the receiving party is subject to laws, binding rules or contracts that provide an adequate level of protection consistent with POPIA.

We implement reasonable technical and organisational measures to protect your personal information against loss, unauthorised access and disclosure, including TLS encryption in transit, encryption at rest, role-based access controls and regular security reviews.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or by email. Continued use of the Platform after changes take effect constitutes acceptance.

Privacy enquiries: support@suretechapp.com.

Information Regulator (South Africa): inforegulator.org.za.