Privacy Policy (POPIA)

Placeholder — lawyer review required before launch

Who we are. ZakGeld is operated from South Africa. We are the responsible party for personal information processed through this service, as defined in the Protection of Personal Information Act, 2013 (POPIA).

What we collect

• Account: email address, chosen password (stored only as a cryptographic hash), display name.
• Family data: the family name you choose, the names of the people you add as family users, and the names of kids you track.
• Financial activity within the app: the allowance transactions (amounts, reasons, timestamps) you record.
• Payment: PayFast transaction reference and status for the once-off access fee. We do not store your card details.
• Operational: IP address, browser user-agent, session timing — kept for security and abuse prevention.

What we do with it

• Provide and improve the service.
• Send account email (password reset, receipts, security alerts).
• Comply with legal obligations (e.g. financial record-keeping for the once-off fee).

We do not sell your personal information. We do not show you ads. We do not share your family's data with third parties except the minimum processors we need to run the service (PayFast for payment, SendGrid for email, our hosting provider for storage).

Your rights under POPIA

• Access: request a copy of what we hold about you — use Settings → Export my data.
• Correction: update any field from Settings.
• Deletion: delete your family account from Settings. We soft-delete immediately (you can recover within 30 days) and hard-delete after that.
• Object / restrict: email us at hello@zakgeld.co.za.
• Complain to the Information Regulator: inforegulator.org.za.

Retention

We keep your family's data for as long as your account is active. After you delete, data is hard-removed 30 days later. Payment records are retained for the period required by South African tax law (currently 5 years).

Security

Passwords are hashed with argon2id. Sessions are server-side and revocable. We use TLS for all traffic. We only store information we actually need to run the service.

Changes

We'll tell you by email if we change this policy in a way that materially affects you.

Questions? hello@zakgeld.co.za