Privacy Policy

1. Who we are

SHELFGROW (PTY) LTD T/A happyDOT ("happyDOT", "we", "us") operates the happyDOT Ping mobile application ("Ping", package ID za.co.happydot.ping) and the website at happydot.co.za (collectively the "Services").

We are registered and headquartered in the Republic of South Africa. This policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have over it.

Contact our Privacy Officer at privacy@happydot.co.za for any privacy-related questions or requests.

2. Information we collect

2.1 Information you provide

When you use the Services you may provide:

• Name and contact details (email address, phone number) when registering or joining the waitlist.
• Emergency contact details (name, phone number, email address) you add to the app so we can alert them on your behalf.
• Device linking information (device identifier) used to authenticate your Ping device with our servers.

2.2 Information collected automatically

Ping is a safety application whose core function is continuous location monitoring. When the app is running we collect:

• Precise GPS location (latitude, longitude, altitude, accuracy, speed, course) at regular intervals while the foreground service is active.
• Timestamps associated with each location fix.
• App version, device platform, and basic connection status (online/offline) for operational reliability.
• WebSocket connection events (connect/disconnect) to maintain service continuity.

Location data is only collected while the Ping foreground service is running. You can stop collection at any time by stopping the service in the app.

2.3 Log data

Our servers record standard HTTP and WebSocket request logs including IP address, request path, timestamp, and response status. Logs are retained for up to 30 days for security and debugging purposes.

3. How we use your information

We use your personal information only for the following purposes:

• Delivering the safety monitoring service — detecting when a check-in is missed and alerting your nominated emergency contacts.
• Authenticating your device and maintaining your session.
• Sending you product updates and early-access communications (waitlist only; only where you have given explicit consent).
• Operating, securing, and improving our services.
• Complying with legal obligations.

We do not use your location data for advertising, profiling, analytics outside of safety monitoring, or any purpose other than delivering the core safety features of Ping.

4. Legal basis for processing (POPIA / GDPR)

We process your personal information on the following legal bases:

• Contract performance — to provide the safety monitoring service you have requested.
• Consent — for waitlist communications and for processing sensitive location data; you may withdraw consent at any time.
• Legitimate interests — for server log retention, security monitoring, and service reliability, balanced against your rights.
• Legal obligation — where processing is required to comply with applicable law.

5. Sharing and disclosure

We do not sell your personal information. We do not share it with third parties for their own marketing purposes.

We may share your information in the following limited circumstances:

• Emergency contacts — we send alerts to the contacts you have nominated, containing your name and location, solely to provide the safety function.
• Service providers — infrastructure providers (cloud hosting, database) who process data on our behalf under data-processing agreements.
• Legal requirements — where required by law, court order, or to protect the rights, property, or safety of happyDOT, our users, or the public.

6. Data retention

Location data is retained on our servers for as long as your device is active on the platform, and deleted within 30 days of account deletion or device unlinking.

Waitlist entries are retained until you withdraw consent or the waitlist closes. Emergency contact details are deleted when you remove them in-app or when your account is deleted.

Server logs are retained for up to 30 days then automatically purged.

7. Data security

All data is encrypted in transit using TLS 1.2 or higher. Data at rest is encrypted using AES-256. Access to production systems is restricted to authorised personnel and protected by multi-factor authentication. We conduct regular security reviews.

No method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority within the timeframes required by applicable law.

8. International transfers

Our primary infrastructure is hosted within South Africa. Some service providers may process data outside South Africa. Where data is transferred internationally we ensure equivalent protection through appropriate safeguards (contractual clauses or adequacy decisions) in accordance with POPIA and GDPR requirements.

9. Your rights

Under POPIA (South Africa), GDPR (EU/UK), and equivalent laws, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information ("right to be forgotten").
• Restrict or object to processing in certain circumstances.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time without affecting prior lawful processing.
• Lodge a complaint with the South African Information Regulator (inforeg.org.za), the ICO (UK), or the relevant authority in your country.

To exercise any right, contact us at privacy@happydot.co.za. We will respond within 30 days (POPIA) or 1 month (GDPR), with extensions only where permitted.

10. Children

The Services are not directed at children under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, contact us immediately at privacy@happydot.co.za.

11. Emergency services disclaimer

happyDOT Ping is a personal safety assistance tool. It is not a replacement for emergency services. In any life-threatening emergency, always contact your local emergency services (e.g. 10111 in South Africa, 999 in the UK, 911 in the US) first.

12. Changes to this policy

We may update this policy as the Services evolve. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date, and where required by law, by direct notification. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

13. Contact us

SHELFGROW (PTY) LTD T/A happyDOT
Privacy Officer: privacy@happydot.co.za

For South African users: you may also contact the Information Regulator of South Africa.