1. Information we collect

We only collect the information we need to provide the App and to keep it secure.

• Account information: your full name, email address and sign-in method when you register or sign in.
• Wallet and transaction information: your wallet balance, top-up amounts, payment references, transaction dates and descriptions.
• Data drop information: the amount of data, the expiry period, the secure share token, the status of the drop, and any note you add for the recipient.
• Recipient information: the mobile phone number entered by the person claiming a data drop, and the time the drop was claimed.
• Payment information: payments are processed by our payment provider, PayFast. We receive confirmation of the payment and a payment reference, but we never see or store your card or bank account details.
• Messages you send us: the name, email address and content of any message you submit through our Contact page.
• Technical information: device type, browser, approximate location derived from IP address, and server log data, which our hosting provider records for security and reliability.

2. How we use information

We use the information described above to:

• Create and manage your account, wallet and transaction history.
• Create, share, expire and refund data drops, and deliver the data to the mobile phone number provided by the recipient.
• Process payments and confirm wallet top-ups.
• Send share links and status information you request.
• Prevent fraud, abuse, duplicate claims and misuse of the App, and keep our systems secure.
• Respond to your support requests and contact messages.
• Comply with legal, tax, accounting and regulatory obligations.
• Understand how the App is used so we can improve it.

3. Who we share information with

We do not sell your personal information and we do not share it with advertisers. We share information only with the parties needed to run the App, and only for the purposes described above:

• PayFast, our payment processor, to process wallet top-ups and to send us payment confirmations.
• Mobile network operators and data provisioning partners, who receive the recipient mobile phone number, the data amount and the carrier so the data can be delivered.
• Our hosting and infrastructure provider, which stores the App data on our behalf.
• Law enforcement, regulators or courts, where we are legally required to disclose information, or where disclosure is necessary to protect the rights, safety or property of our users or the public.

4. People who claim a data drop

Receiving a data drop does not require an account. If you open a share link and enter your mobile number, we use that number only to deliver the data and to record that the drop was claimed. The number is stored with the data drop record, which is visible to the person who created that drop, and is deleted when the drop or the account is deleted.

5. How long we keep information

We keep your account information, wallet records, data drops and transaction history for as long as your account is active. When you delete your account, your wallet, data drops and history are permanently removed from the App. Some records, such as payment and financial records, and server logs, may be retained for longer where we are legally required to keep them or where they are needed to resolve a dispute.

6. How we protect information

All traffic to and from the App is encrypted in transit (HTTPS), and data at rest is stored on access-controlled infrastructure. Share links are protected by a secure random token, so a drop can only be claimed by someone who has the link, and access to your wallet and drops is limited to you and to App administrators.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security; we work to protect your information using industry-standard safeguards.

7. Children's privacy

The App is not directed at children and is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Your privacy rights

Under South African law (the Protection of Personal Information Act, POPIA) you have the right to:

• Ask what personal information we hold about you and request a copy of it.
• Ask us to correct or update information that is inaccurate, irrelevant or misleading.
• Ask us to delete information that we are not legally required to keep.
• Object to processing, or withdraw consent where processing is based on consent.
• Complain to the Information Regulator of South Africa if you believe your information has been handled unlawfully.

9. Where information is stored

The App is hosted on cloud infrastructure and your information may be processed and stored on servers located outside South Africa. Where information is transferred across borders we take reasonable steps to ensure it remains protected to a standard comparable to POPIA.

10. Changes to this policy

We may update this Privacy Policy from time to time, for example when we add a feature or when the law changes. The revised policy will be published on this page with a new effective date, and material changes will be communicated in the App.