Privacy policy

Last updated: 31 October 2026

This policy explains how Huphi ("we", "us") collects and uses personal information in the Huphi Marketplace app and website, in line with South Africa's Protection of Personal Information Act (POPIA). Questions or requests: admin@huphi.com.

What we collect

• Account details: name, email address, mobile number and, if you sign in with Google, your Google name and profile picture.
• Requests and jobs: what you ask for, addresses, budgets, quotes, job progress, reviews and messages with businesses.
• Location: only while you use a feature that needs it: pinning a request location, finding SOS responders near you, or (for drivers, runners and responders) sharing your location during an active trip or while you are online. We do not collect location in the background.
• Files you upload: photos and documents attached to requests, quotes, tender submissions and business compliance documents.
• Payments: amounts, references and status. Card and bank details are entered on PayFast and are never stored by us.
• Business information: for businesses and providers: company details, categories, service areas, vehicles and verification documents.
• Technical data: sign-in times and the IP address of requests, kept in our hosting provider's security logs.

How we use it

• To match your requests with suitable businesses and show you their quotes.
• To run jobs, trips and SOS call-outs, including sharing what the other party needs (for example your name, phone number and pickup address with the driver you booked).
• To process payments, issue receipts, handle refunds and disputes, and pay businesses.
• To verify businesses and responders, prevent fraud and keep the platform safe.
• To send you in-app notifications about your requests, jobs and messages.

We do not sell your personal information or use it for third-party advertising.

Who we share it with

• The businesses, drivers, runners and responders you deal with, limited to what they need for your request.
• Supabase (database, sign-in and file storage), hosted on Amazon Web Services in Paris, France. This is a transfer outside South Africa; it is protected by the provider's data-protection terms, as POPIA section 72 requires.
• PayFast (payments), Google (if you use Google sign-in) and Vercel (this website).
• Authorities, when the law requires it.

How long we keep it

• Account and profile information: until you delete your account.
• Payment, invoice and receipt records: 5 years, as South African tax law requires, even after account deletion.
• Location points from trips: kept with the trip record for safety and dispute resolution.

Your rights

You may ask to see, correct or delete your personal information, or object to how it is used. You can delete your marketplace account at any time; see Delete your account. You may also complain to the Information Regulator (South Africa): inforegulator.org.za.

Security

Data is encrypted in transit, files are stored privately and opened only through short-lived links, and each user can only access their own records and the records of jobs they take part in.

Children

The app is not intended for anyone under 18.

Changes

We will post updates on this page and change the date at the top.