Privacy Policy

1. Who we are

Mazisi App (Pty) Ltd ("Mazisi", "we", "us") operates the Mazisi platform — a community safety and marketplace application available at mazisi.app and via mobile web. This Privacy Policy applies to all personal information collected through our platform and is governed by the Protection of Personal Information Act 4 of 2013 (POPIA).

2. Information we collect

• Account information — name, email address, password (hashed), and phone number provided at registration.
• Location data — location used to show relevant safety alerts and listings, place incident reports, support geofencing, and send Panic Button alerts. The available precision depends on the feature and your device permissions.
• User-generated content — safety incident reports, listings, and survey responses you choose to submit.
• Usage data — pages visited, features used, and timestamps, collected to improve the platform and detect abuse.
• Payment information — subscription payments are processed by Paystack. We store subscription status and payment references needed to operate the service; we never see or store your full card details.

3. How we use your information

We use your information to operate the Mazisi platform, send you safety alerts relevant to your area, process your Pro subscription, award and track Mazisi Points, and communicate service updates. We do not sell your personal information to third parties.

4. Sharing of information

We share information only where necessary: with Paystack to process payments; with eligible nearby community members when safety features send local alerts; with recipients you configure for relevant features; and with law enforcement where required by South African law.

5. Your rights under POPIA

You have the right to access, correct or delete your personal information at any time by contacting us at privacy@mazisi.app. You may also request that we restrict processing or object to direct marketing. We will respond within 30 days.

6. Data retention

Account data is retained while your account is active and for 12 months after deletion. Location retention depends on the feature and operational or legal requirements. Anonymised usage analytics are retained indefinitely.

7. Security

Passwords are stored using bcrypt hashing. All data in transit is encrypted via TLS. We apply the principle of least privilege to internal data access. No system is perfectly secure; please report suspected vulnerabilities to security@mazisi.app.

8. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via the app or by email. Continued use after the effective date constitutes acceptance.

9. Contact

Questions? Email privacy@mazisi.app or write to Mazisi App (Pty) Ltd, Johannesburg, South Africa.