Privacy Policy

This Privacy Policy explains how Sure Applications (Pty) Ltd ("SÜRE", "we", "us", "our") collects, uses, stores and protects your personal information when you use the SÜRE platform, website (suretechapp.com) and mobile applications (collectively, the "Platform"). We are committed to processing your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA") and other applicable South African laws.

Responsible party: Sure Applications (Pty) Ltd, CIPC registration 2026/284243/07.

Physical address: 9 20th Street, Menlo Park, Pretoria, 0081, South Africa.

Information Officer: Mduduzi Brandon Tshabangu, contactable at support@suretechapp.com, or by post at 9 20th Street, Menlo Park, Pretoria, 0081, South Africa.

• Identity and contact details: full name, email address, mobile number, physical address.
• Gender (service providers only). We ask service providers whether they are male or female when they complete their profile. Customers see it beside the provider's rating when the provider sends them a quote. You cannot change it yourself in the app once it is given.
• KYC information (service providers and sellers only): South African ID number, proof of address, trade qualifications or licences where required. Service providers can upload their proof of address and qualification certificates as PDF files, and give the name of each qualification.
• Location data. How we collect location depends on how you use SÜRE.
  • Customers. We collect your device's location while you are actively using the app, so that we can match you with nearby providers and stores, set a service or delivery address, and show you your provider's live position as they travel to you. We do not collect a customer's location when the app is closed or running in the background.
  • Service providers and couriers. In addition to the above, we collect your device's precise location in the background — that is, while the SÜRE app is not open on your screen — but only while you have an active job in progress. Background collection begins when you accept a service call-out or a delivery, and stops as soon as that job is completed or cancelled. We do not collect your location in the background while you are merely online and waiting for work, and we do not collect it at all while you are offline.
  • Why we need this. Continuous location is what allows a customer to watch their provider approach in real time, and what allows a buyer and a store owner to follow a delivery from pickup to doorstep. Without background collection, tracking would freeze the moment a courier's screen locked or they opened another app — which is precisely when they are driving.
  • Your control. You may grant, restrict or withdraw location permission at any time in your device settings. On Android, an ongoing notification is shown whenever background location is active, so you always know when it is running. Withdrawing background permission will prevent you from accepting jobs that require live tracking.
• Payment information: payment card details are collected and tokenised directly by Paystack. SÜRE never stores raw card data on its own systems.
• Camera. We use your device camera to capture identity and verification documents during KYC (service providers and sellers only), and to capture proof-of-delivery photographs at the point of hand-over. We do not access your camera at any other time.
• Images you upload. Profile photographs, product listing images, and delivery confirmation photographs.
• Content you post. Chat messages exchanged with other users, ratings and written reviews, service and product listings, and any images attached to them.
• Transaction history: records of bookings, orders, invoices, payments and chat messages.
• Your wishlist. The products you save to your wishlist, and when you saved them.
• Device and usage data: device type, operating system, IP address, app version and crash logs.

• To create and manage your account.
• To process bookings, orders, payments and payouts.
• To match customers with nearby verified providers and stores.
• To prevent and detect fraud, abuse and unlawful activity.
• To provide customer support and respond to enquiries.
• To comply with our legal and regulatory obligations, including FICA record-keeping.
• To improve and secure the Platform.

We rely on the following lawful bases under POPIA:

• Contract: processing necessary to provide the Platform you have signed up for.
• Legitimate interest: fraud prevention, security and product improvement.
• Consent: marketing communications, optional features and access to device location.
• Legal obligation: record-keeping under FICA and other South African laws.

• Paystack — payment processing, card tokenisation, refunds, and payouts to providers and sellers.
• Mapbox — map rendering, geocoding and route calculation. Location coordinates are transmitted to Mapbox in order to draw maps and routes.
• SkyNet — delivery of marketplace orders. To price a delivery at checkout, SkyNet receives only the suburbs and postal codes of the store and the customer. To deliver an order, SkyNet receives the store owner's name, phone number and email address with the store's pickup address, and the customer's name, phone number and email address with the delivery address, including the exact location pinned on the map.
• Supabase — database services, secure data hosting and login.
• Resend — delivery of transactional and account-related email.
• Google Firebase Cloud Messaging — push notifications. It receives your device's push token and the content of each notification. On iPhones, notifications are delivered through Apple's push notification service.
• Cloudflare — hosting of the website and the app.
• Sentry — application error and crash monitoring, hosted in the European Union. Configured to capture errors only, with personal information removed before transmission.
• Google — where you choose to sign in with a Google account, Google authenticates you and provides us with your name and email address.
• Apple — where you choose to sign in with an Apple Account, Apple authenticates you and provides us with your name and email address. If you use Apple's Hide My Email option, Apple gives us a private relay address instead of your real one, and forwards our messages to you without disclosing your address to us.
• Law enforcement and regulators — only where required by law, or to protect the rights, property or safety of our users or of third parties.

We do not sell your personal information, and we do not share it with advertisers.

We retain account and transaction data for the duration of your active account and for five (5) years after account closure, in line with section 23(1) of the Financial Intelligence Centre Act, 38 of 2001. Marketing data is retained only while your consent is active and is deleted within thirty (30) days of consent withdrawal.

Deleted accounts. When your account is deleted, we do not keep any details that would stop you from signing up again.

Payment records held by Paystack. When your account is deleted, we deactivate the payment cards saved to it at Paystack, so they can no longer be charged. Paystack keeps the email address we gave it, the details of those cards, and the records of your payments. If you are a service provider or seller, Paystack also keeps the bank details used for your payouts. We cannot delete these records ourselves, and Paystack does not document a way for us to change the email address on them. You can ask Paystack to delete them, or email support@suretechapp.com and we will pass your request on to Paystack. Paystack may keep information it is legally required to retain.

• Right of access — request a copy of the personal information we hold about you.
• Right to correction — request that we correct inaccurate information.
• Right to deletion — request deletion subject to our regulatory retention obligations.
• Right to data portability — receive a copy of your data in a portable format.
• Right to withdraw consent — at any time, where processing is based on consent.
• Right to lodge a complaint with the Information Regulator of South Africa.

Submit requests to support@suretechapp.com.

The Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it.

The website uses only essential cookies required for the site to function. We do not use analytics or advertising cookies. You can control cookies through your browser settings.

Our main service providers process personal information outside South Africa, including in the European Union: the database and email in Ireland, and error monitoring in Germany. Where data is transferred outside South Africa (for example, by certain service providers), we ensure that the receiving party is subject to laws, binding rules or contracts that provide an adequate level of protection consistent with POPIA.

We implement reasonable technical and organisational measures to protect your personal information against loss, unauthorised access and disclosure, including TLS encryption in transit, encryption at rest, role-based access controls and regular security reviews.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or by email. Continued use of the Platform after changes take effect constitutes acceptance.

Privacy enquiries: support@suretechapp.com.

Information Regulator (South Africa): inforegulator.org.za.