Privacy Notice

Johan Hartzenberg, based in South Africa, is the responsible party (data controller) for the personal information collected through the South Africa Guide & Planner. We follow the Protection of Personal Information Act (POPIA) and, where it applies, the GDPR.

What we collect and why

• Account details (name, email, sign-in credentials) — to create and run your account. Basis: contract.
• Purchase records (product, amount, order reference) — to unlock what you bought. Basis: contract and legal obligation.
• Trip plans and AI conversations — to provide the Planner and the AI travel guide. Basis: contract.
• Support messages — to help you. Basis: contract and legitimate interests.
• Technical data (IP address, device and browser details, error logs) — for security, fraud prevention and fixing problems. Basis: legitimate interests.

Card details are collected by Paddle, not by us.

Who we share it with

• Service providers who host the app, store data and run the AI features, under contract.
• Paddle, our Merchant of Record, for selling the products, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities, where the law requires it.

We never sell your personal information.

International transfers

Some providers process data outside South Africa and the EEA. Where that happens we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Account, trip and conversation data is kept while your account is active and deleted within 90 days of you asking us to close it. Purchase records are kept as long as tax and accounting law requires. Data we no longer need is deleted or anonymised.

Security

We use encryption in transit, access controls and per-user data isolation to protect your information.

Cookies and local storage

We only use essential storage: keeping you signed in, your chosen currency, and your trip in progress. We do not use advertising cookies.

Your rights

You can ask to access, correct, delete, restrict or export your information, object to processing, or withdraw consent. Email johanhartz@icloud.com; we reply within one month. You can also complain to South Africa's Information Regulator (inforegulator.org.za) or your local data protection authority.