Privacy Policy

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, and password when you register an account.
• Business Information: Company name, registration number, address, and banking details for facility operators, collector companies, and creator companies.
• Verification Documents: Business registration documents, permits, and other documents uploaded during onboarding.
• Digital Signatures: Signatures captured during drop-off completion.

2.2 Information Collected Automatically

• Location Data: With your permission, we collect precise location data to verify facility presence during drop-offs, track collection routes, and provide real-time updates. Background location is used for active collection route tracking only.
• Camera Data: With your permission, we access your camera solely for scanning QR codes at collection facilities. We do not store photos or video.
• Device Information: Device type, operating system, app version, and unique device identifiers for troubleshooting and analytics.
• Usage Data: How you interact with our Services, including features used, timestamps, and performance metrics.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Services.
• Process and manage waste collection drop-offs, including scheduling, arrival verification, and completion tracking.
• Generate invoices and manage billing between facilities, collectors, and creators.
• Track tank capacity and storage levels at collection facilities.
• Verify your identity and the identity of your business during onboarding.
• Send operational notifications (e.g. drop-off status updates, tank capacity alerts).
• Improve, personalise, and expand our Services.
• Comply with legal obligations and enforce our terms.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Between Platform Users: Facility operators, collector companies, and creator companies may see limited information about each other as necessary to coordinate waste collection operations (e.g. company name, contact details, drop-off schedules).
• Service Providers: We use third-party services for hosting (Microsoft Azure), document storage (Cloudflare), and authentication. These providers process data on our behalf under strict contractual obligations.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.

5. Data Storage and Security

Your data is stored on secure servers hosted by Microsoft Azure in the South Africa North region. Documents are stored using Cloudflare R2 with encryption at rest. We implement industry-standard security measures including:

• Encrypted data transmission (TLS/SSL).
• Hashed and salted password storage.
• Role-based access controls.
• Regular security assessments.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our Services. Business records (invoices, drop-off records, production data) are retained in accordance with applicable South African tax and regulatory requirements. You may request deletion of your account and personal data at any time by contacting us.

7. Your Rights

In accordance with the Protection of Personal Information Act (POPIA) and other applicable laws, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Object to the processing of your personal information.
• Withdraw consent for optional data collection (e.g. location tracking).
• Lodge a complaint with the Information Regulator of South Africa.

8. Device Permissions

Our mobile application may request the following permissions:

• Camera: Used exclusively for scanning QR codes at collection facilities.
• Location (Foreground): Used to verify your presence at a facility during drop-off sign-off.
• Location (Background): Used to track active collection routes and provide real-time updates to facilities. You can disable this at any time in your device settings.
• Microphone: Available for in-app recording features. Not used without your explicit action.

All permissions are optional and can be managed through your device settings. The app will request permission before accessing any of these features.

9. Offline Data

Our mobile app stores limited data locally on your device to enable offline functionality. This includes cached operational data and queued actions that sync when connectivity is restored. Local data is cleared when you sign out.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Email: contact@kulueco.com
• Website: www.kulueco.co.za