EarnFit – Privacy Policy (POPIA-Compliant)

Last Updated: 11/12/2025

EarnFit ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). This Privacy Policy explains what personal information we collect, why we collect it, how we use it, how we protect it, and what rights you have as a user.

This policy applies to all users of the EarnFit platform, including:

  • Ambassadors
  • Brands
  • Users browsing or interacting with our website or mobile app

By using EarnFit, you agree to the terms outlined in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

Ambassadors

We may collect the following personal information when you create an account or use the platform:

  • Name and surname
  • Email address and phone number
  • Social media handles and connected accounts
  • Content URLs and performance data
  • Banking or payout details (for withdrawals)
  • Profile information (bio, photo, categories)

Brands

We may collect:

  • Business name and registration details
  • Contact person's name, email, and phone number
  • Campaign information and brand preferences
  • Billing and payment details
  • Wallet transactions and funding history

1.2 Automatically Collected Information

When you use EarnFit, we may automatically collect:

  • Device information (model, operating system, identifiers)
  • Log data (IP address, pages visited, timestamps)
  • App usage and behaviour analytics
  • General location data (approximate)

This helps us improve functionality and maintain platform security.

2. How We Use Your Information

We process personal information for the following purposes:

2.1 Providing and Improving the Platform

  • Creating and managing accounts
  • Facilitating campaigns between brands and ambassadors
  • Generating reports and engagement metrics
  • Enhancing platform features and user experience

2.2 Payments & Wallet Management

  • Processing ambassador earnings
  • Processing brand wallet deposits
  • Facilitating withdrawals and payouts
  • Preventing fraudulent transactions

2.3 Safety, Security & Compliance

  • Verifying user identity where necessary
  • Preventing misuse, fraud, or violations of our Terms
  • Complying with legal and financial reporting requirements

We only process information for legitimate, reasonable, and disclosed purposes.

3. Legal Basis for Processing

Under POPIA, we process your data based on:

  • Consent (e.g., when ambassadors connect social media accounts)
  • Contractual necessity (you cannot use the platform without sharing certain details)
  • Legitimate interest (security, analytics, operational improvements)
  • Legal obligations (financial record keeping, compliance with authorities)

4. Sharing of Information

We do not sell personal information.

We may share information only with:

4.1 Service Providers

  • Cloud hosting partners
  • Payment processors
  • Analytics providers
  • API platforms (e.g., TikTok, Meta), only with your authorisation

4.2 Legal & Regulatory Authorities

Only when required by law.

4.3 Internal Teams

Access is restricted and role-based.

All third-party partners are required to comply with POPIA and maintain confidentiality.

5. How We Protect Your Information

We use industry-standard security measures, including:

  • Encrypted databases
  • Secure servers and cloud environments
  • Strict access controls
  • Monitoring for suspicious activity
  • Secure API connections

While no system is completely secure, we take all reasonable steps to safeguard your information.

6. Data Retention

We retain personal information only as long as necessary for:

  • Providing our services
  • Legal and financial reporting
  • Fraud prevention
  • Resolving disputes

You may request deletion of your information, subject to statutory retention requirements.

7. Your Rights Under POPIA

You have the right to:

  • Access your personal information
  • Request corrections to inaccurate data
  • Object to certain types of processing
  • Withdraw consent at any time
  • Request deletion of personal information
  • Lodge a complaint with the Information Regulator

To exercise these rights, contact us at: info@earnfit.co.za

8. Cross-Border Transfers

If your data is stored or processed outside South Africa, we ensure that the destination country provides protections that meet POPIA requirements.

9. Children's Privacy

EarnFit is not intended for individuals under 18 years old. We do not knowingly collect data from minors.

10. Updates to This Policy

We may update this Privacy Policy occasionally. Changes will be posted on our website and app. Continued use of EarnFit after updates constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this policy or your personal information, contact:

EarnFit Team: Info@earnfit.co.za