Skip to main content
LEGAL

Privacy Policy

Effective date: 1 July 2026
Last updated: 1 July 2026

1. Who we are

This Privacy Policy explains how Yapped (Pty) Ltd ("Yapped", "we", "us") collects, uses, and protects your personal information. We are the Responsible Party as defined in the Protection of Personal Information Act, 2013 (POPIA).

  • Website/app: app.yapped.co.za and yapped.co.za
  • Information Officer: Y. Elaouad
  • Contact: privacy@yapped.co.za

2. What personal information we collect

Depending on how you use Yapped, we may collect:

  • Waitlist sign-up: your email address (and name, if provided).
  • Account / profile: name, handle, email, city, and optional details you choose to add (e.g. age, gender) and a profile avatar.
  • Activity: places and events you save, lists you create, venues you check in to, reviews and ratings you submit.
  • Device & usage data: app/site interactions, approximate location (only if you grant permission), device and browser information.
  • Communications: messages you send us (e.g. venue submissions, partnership or press enquiries).

3. Why we collect it (purpose)

We process your personal information to:

  • operate the waitlist and notify you about launch and updates you've asked for;
  • provide the app's features (saving, lists, check-ins, reviews, personalised recommendations);
  • send the Weekend Edit and notifications you've opted into;
  • respond to your enquiries;
  • improve and secure the service;
  • comply with legal obligations.

We rely on your consent (e.g. waitlist sign-up, marketing) and our legitimate interests / contractual necessity (e.g. running the app you signed up for) as lawful bases.

4. Marketing communications

If you join the waitlist or opt in, we'll email you about Yapped. You can unsubscribe at any time via the link in any email or by contacting us. We won't sell your information or share it for third-party marketing.

5. Who we share it with

We share personal information only with service providers ("Operators") who help us run Yapped, under appropriate confidentiality and data-processing terms, including:

  • Hosting & database: Supabase ✎ EDIT — confirm/region
  • Email delivery: ✎ EDIT — provider (e.g. Resend/Mailchimp)
  • Payments (future): Paystack, for any paid memberships or partner subscriptions
  • Analytics: ✎ EDIT — provider, if any (e.g. Google Analytics)

We may also disclose information if required by law or to protect our rights and users' safety.

6. Cross-border transfer

Some of our service providers may store or process data outside South Africa. Where this happens, we take reasonable steps to ensure your information receives a level of protection consistent with POPIA. ✎ EDIT — confirm Supabase region (e.g. EU/US) and adjust.

7. How long we keep it

We keep personal information only as long as needed for the purposes above or as required by law. Waitlist data is kept until launch and a reasonable period after, or until you ask us to delete it. Account data is kept while your account is active; if you delete your account, we delete or anonymise your personal information except where retention is legally required.

8. How we protect it

We use reasonable technical and organisational measures (including access controls, encryption in transit, and row-level security) to protect your information. No system is perfectly secure, but we work to keep your data safe and will notify you and the Information Regulator of a compromise as required by POPIA.

9. Your rights under POPIA

You have the right to:

  • access the personal information we hold about you;
  • correct or update inaccurate information;
  • delete your information or object to its processing;
  • withdraw consent (e.g. unsubscribe from marketing);
  • lodge a complaint with the Information Regulator.

To exercise any of these, contact us at ✎ EDIT — email.

Information Regulator (South Africa):
Email: complaints.IR@justice.gov.za / inforeg@justice.gov.za
Website: https://inforegulator.org.za

10. Cookies & tracking

We use essential cookies to run the site and ✎ EDIT — (if applicable) analytics cookies to understand usage. You can control cookies through your browser settings, and where required we'll ask for your consent before setting non-essential cookies. ✎ EDIT — remove this line if you use no analytics/tracking.

11. Children

Yapped is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we'll delete it.

12. Changes to this policy

We may update this policy from time to time. We'll post the updated version here and change the "Last updated" date; significant changes will be communicated where appropriate.

13. Contact

Questions about this policy or your information: yappedadmin@gmail.com