This notice summarises how Mobistride processes personal information under the Protection of Personal Information Act, 4 of 2013 (POPIA). It should be read with our full privacy policy and terms and conditions.

1. Responsible party

Mobistride operates www.mobistride.app, a South African marketplace that connects e-hailing and delivery drivers with vehicle owners and fleets. We are the responsible party for personal information processed on this platform.

Privacy and POPIA requests: privacy@mobistride.app or our contact form (info@mobistride.app).

2. What we process and why

We process personal information to:

• create and secure your account (name, email via Google, Apple or Facebook, phone, city, photo);
• show listings and enable in-app chat between drivers and owners;
• run chat passes and listing plans (payments via Paystack);
• verify identity or platform experience when you submit documents;
• send transactional emails (messages, verification results, listing moderation);
• keep the marketplace safe (reports, abuse prevention, legal compliance).

Lawful bases include the contract to provide the service, our legitimate interests in operating a safe marketplace, and consent where you upload optional verification documents or marketing preferences (we do not sell your data for advertising).

3. Operators and third parties

We use service providers who process data for us under instruction, including:

• Supabase (hosting, database, authentication, storage);
• Google, Apple and Facebook (sign-in);
• Google (address / maps lookup where used);
• Paystack (payments);
• email delivery via our SMTP provider for transactional mail.

We do not sell personal information.

4. Your rights under POPIA

You may ask us to:

• confirm whether we hold personal information about you;
• access or correct it;
• delete it — use Account → Profile → Delete account when signed in, or email privacy@mobistride.app (see the privacy policy).
• object to certain processing, where the law allows;
• withdraw consent where processing was based on consent.

You may lodge a complaint with the Information Regulator (South Africa) if you believe we have not handled your information lawfully. Details are published by the Regulator at inforegulator.org.za.

5. Security and retention

We use access controls, encrypted transport (HTTPS), and role-based rules in the database so contact details and documents stay limited to people who need them. We keep information while your account is open and for a limited time afterwards where security, accounting, or law requires it. Payment references may remain anonymised after account deletion.

6. Cross-border processing

Some operators (for example cloud hosting or sign-in providers) may process data outside South Africa. We only use providers that offer appropriate protection under their terms and applicable law.

7. Changes

We may update this notice. The “last updated” date at the top will change. Material changes will also be reflected in the privacy policy.