Privacy Policy

This Privacy Policy explains how Sure Applications (Pty) Ltd ("SÜRE", "we", "us", "our") collects, uses, stores and protects your personal information when you use the SÜRE platform, website (suretechapp.com) and mobile applications (collectively, the "Platform"). We are committed to processing your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA") and other applicable South African laws.

Responsible party: Sure Applications (Pty) Ltd, CIPC registration 2026/284243/07, Pretoria, South Africa.

Information Officer: Mduduzi Brandon Tshabangu, contactable at support@suretechapp.com.

• Identity and contact details: full name, email address, mobile number, physical address.
• KYC information (service providers and sellers only): South African ID number, proof of address, trade qualifications or licences where required.
• Location data: device location while the app is in use, to match you with nearby providers or stores and to enable real-time tracking.
• Payment information: payment card details are collected and tokenised directly by Paystack. SÜRE never stores raw card data on its own systems.
• Transaction history: records of bookings, orders, invoices, payments and chat messages.
• Device and usage data: device type, operating system, IP address, app version, crash logs and product analytics.

• To create and manage your account.
• To process bookings, orders, payments and payouts.
• To match customers with nearby verified providers and stores.
• To prevent and detect fraud, abuse and unlawful activity.
• To provide customer support and respond to enquiries.
• To comply with our legal and regulatory obligations, including FICA record-keeping.
• To improve and secure the Platform.

We rely on the following lawful bases under POPIA:

• Contract: processing necessary to provide the Platform you have signed up for.
• Legitimate interest: fraud prevention, security and product improvement.
• Consent: marketing communications, optional features and access to device location.
• Legal obligation: record-keeping under FICA and other South African laws.

• Paystack — payment processing, card tokenisation and payouts.
• Mapbox — map rendering and turn-by-turn navigation.
• Supabase — secure data hosting and database services, configured in line with POPIA cross-border transfer requirements.
• Email service providers — transactional and account-related email delivery.
• Law enforcement and regulators — only where required by law or to protect the rights of users or third parties.

We retain account and transaction data for the duration of your active account and for five (5) years after account closure, in line with section 23(1) of the Financial Intelligence Centre Act, 38 of 2001. Marketing data is retained only while your consent is active and is deleted within thirty (30) days of consent withdrawal.

• Right of access — request a copy of the personal information we hold about you.
• Right to correction — request that we correct inaccurate information.
• Right to deletion — request deletion subject to our regulatory retention obligations.
• Right to data portability — receive a copy of your data in a portable format.
• Right to withdraw consent — at any time, where processing is based on consent.
• Right to lodge a complaint with the Information Regulator of South Africa.

Submit requests to support@suretechapp.com.

The Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it.

The website uses essential cookies required for the site to function and analytics cookies that help us understand how visitors use the site. You can control cookies through your browser settings. The mobile app uses analytics SDKs to capture anonymised usage events for product improvement.

Where possible, your personal information is processed within South Africa. Where data is transferred outside South Africa (for example, by certain service providers), we ensure that the receiving party is subject to laws, binding rules or contracts that provide an adequate level of protection consistent with POPIA.

We implement reasonable technical and organisational measures to protect your personal information against loss, unauthorised access and disclosure, including TLS encryption in transit, encryption at rest, role-based access controls and regular security reviews.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or by email. Continued use of the Platform after changes take effect constitutes acceptance.

Privacy enquiries: support@suretechapp.com.

Information Regulator (South Africa): inforegulator.org.za.