Privacy Policy

1. Introduction

Velaphi ("we", "us", "our") operates the Velaphi Go mobile application and the Velaphi website (together, the "Services"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your choices.

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

2. Who is responsible for your data

For the purposes of the Protection of Personal Information Act, 2013 (POPIA) and other applicable laws, Velaphi is the responsible party for personal information processed through the Services.

Contact us about privacy at support@velaphi.co.za.

3. Information we collect

We may collect the following categories of information:

• Account information: name, email address, phone number, and password (or authentication via third-party sign-in).
• Profile and delivery details: delivery addresses, order history, preferences, and notes you provide for an order.
• Location information: approximate or precise location when you allow it, to show nearby restaurants, calculate delivery, and support order tracking.
• Payment information: payments are processed by our payment partners (for example Paystack). We do not store full card numbers on our servers; we receive transaction references and payment status.
• Device and technical data: device type, operating system, app version, IP address, and push notification tokens (for order updates).
• Communications: messages you send to support and records of notifications we send to you.
• Usage data: how you interact with the app and website (for example pages viewed, features used) to improve the Services.

4. How we collect information

We collect information when you register or sign in, place an order, update your profile, enable location or notifications, contact support, or use features of the Services.

We also receive information from service providers that help us operate the Services (see Section 6).

5. How we use your information

We use personal information to:

• Create and manage your account and authenticate you (including Google Sign-In where you choose it).
• Process orders, payments, refunds, and delivery logistics.
• Send order status updates, including push notifications and in-app messages.
• Provide customer support and respond to your requests.
• Improve, secure, and troubleshoot the Services.
• Comply with legal obligations and protect our rights, users, and partners.
• Send service-related communications. Marketing messages, if any, will be sent only where permitted by law and with your consent where required.

6. Sharing with third parties

We do not sell your personal information. We share information only as needed to run the Services, including with:

• Restaurants and delivery partners involved in fulfilling your order.
• Payment processors (for example Paystack) to process transactions securely.
• Cloud and technology providers (for example hosting, Firebase / Google for push notifications, and mapping services) that process data on our behalf under contractual safeguards.
• Authentication providers (for example Google) when you sign in with those services, subject to their policies.
• Professional advisers and authorities when required by law or to protect safety and security.

7. Legal basis (where applicable)

Under POPIA and similar laws, we process your information based on one or more of: performance of a contract (providing the Services), your consent (for example location or marketing where required), legitimate interests (improving and securing the Services), and legal obligations.

8. How long we keep information

We keep personal information only as long as needed for the purposes described in this policy, including to meet legal, tax, and accounting requirements. When data is no longer required, we delete or anonymise it where reasonably possible.

9. Security

We use technical and organisational measures designed to protect personal information, including encryption in transit (HTTPS/TLS) for communications with our servers. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

10. Your rights and choices

Depending on applicable law (including POPIA), you may have the right to access, correct, delete, or restrict processing of your personal information, object to certain processing, withdraw consent where processing is consent-based, and lodge a complaint with the Information Regulator (South Africa).

You can update some details in the Velaphi Go app. For other requests, contact support@velaphi.co.za. We may need to verify your identity before responding.

You can disable push notifications or location in your device settings. Disabling some permissions may limit app features.

11. Children

The Services are not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

12. Cross-border processing

Our service providers may process data in countries other than South Africa. Where this occurs, we take steps required by applicable law to ensure appropriate protection for your information.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date. Material changes may also be communicated through the app or by email where appropriate.

14. Contact us

For privacy questions or requests:

Email: support@velaphi.co.za

Website: https://www.velaphi.com