Your data, our duty

Summary §01

This policy explains how MovR (operated by Leap24 Technologies (Pty) Ltd) collects and uses your personal information when you use the MovR website, mobile app and dispatch service. We follow South Africa's Protection of Personal Information Act, 2013 (POPIA).

Quick version: we collect what's needed to dispatch your delivery, share it only with the driver you choose and the service providers we depend on, and we don't sell it.

What we collect §02

You give us

• Name, phone, email and ID number (drivers only) when you create an account.
• Pickup & drop-off addresses, items, photos and notes when you book a job.
• Payment method details and billing address when you pay through the app.
• Documents you upload for driver verification (licence, insurance, registration).
• Messages you send through in-app chat and dispatch support.

We collect automatically

• Device type, OS, app version, IP address and crash reports.
• Live location while you have an active booking (drivers and customers).
• Booking history, ratings and platform interactions.

How we use it §03

1. To match your job with verified drivers, calculate quotes and route you.
2. To verify driver identity, vehicle ownership and insurance status.
3. To process payments, payouts and statements.
4. To send transactional notifications (booking updates, receipts, account security).
5. To improve the platform — anonymised analytics, fraud prevention, support quality.
6. To comply with legal obligations (tax, POPIA requests, lawful court orders).

Sharing & processors §04

We share only what's necessary, only with these categories of recipients:

• The driver you choose — name, phone, pickup & drop-off addresses, item notes.
• Cloud infrastructure (Google Cloud, AWS) — hosted in South Africa where available.
• Payment processors (Stitch, PayFast) — only the data they need to settle the payment.
• Background-check provider (drivers only) — ID, criminal record check.
• Authorities — only in response to valid lawful requests.

We do not sell your personal information. We do not share it with advertisers.

Retention §05

We keep your data as long as your account is active and for a period after closure to satisfy legal, tax and dispute-resolution requirements.

• Booking records: 7 years (tax requirement).
• Account profile: 12 months after account closure, then deleted.
• Live location: deleted within 14 days of trip completion.
• Chat messages: 6 months after trip, then deleted.
• Marketing preferences: until you opt out.

Your rights §06

Under POPIA you have the right to:

• Ask what data we hold about you.
• Correct anything inaccurate.
• Delete your account and most data (subject to legal retention).
• Object to direct marketing.
• Lodge a complaint with the Information Regulator.

To exercise any of these, email privacy@movr.leap24.co.za — we respond within 30 days.

Security §07

We use industry-standard safeguards: encrypted connections (TLS 1.3), encrypted databases, role-based access for staff, regular security reviews and a documented incident-response plan. No system is perfect — if a breach affects you, we notify you and the Information Regulator within 72 hours.

Cookies & tracking §08

The website uses a small number of cookies for session, security and anonymised usage analytics. We don't use ad-tracking cookies. You can clear or block cookies in your browser — some features (like staying signed in) won't work.

Children §09

MovR is not intended for users under 18. We do not knowingly collect data from children. If you believe a minor has signed up, contact us and we'll delete the account.

Changes & contact §10

We update this policy when our practices change. The "effective date" at the top of this page tells you when. Material changes get an in-app and email notice 14 days before they take effect.

Questions, requests or complaints:

• Email: privacy@movr.leap24.co.za
• Information officer: Themba Ndlovu, c/o Leap24 Technologies
• Information Regulator of South Africa: inforegulator.org.za