Legal
Privacy Policy
This website
This website is published for Kruza. It explains the service and collects enquiries. It does not book trips or take payment.
If you submit a form, the page opens an email to hello@kruza.app with the fields you typed: your name, contact details, town, and the answers on that form. The message is sent only when you send that email. The site does not run an advertising tracker and does not keep a separate account.
The rider app, driver app, and the private admin and franchise portals have their own records. Those products are not this website. The policy below is the one shown in the Kruza app.
1. Introduction
This Privacy Policy governs how Kruza ("the Platform", "the Company") collects, uses, stores, and protects personal information in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA).
By using the Platform, you ("the User") acknowledge that your personal information will be processed in accordance with this Policy.
2. Definitions
For purposes of this Policy:
- "Personal Information" means any information relating to an identifiable, living natural person or juristic person.
- "Processing" includes collection, storage, use, dissemination, or destruction of personal information.
- "Operator" means a third party processing information on behalf of Kruza.
- "User" includes both Customers and Service Providers.
3. Information We Collect
Kruza may collect and process the following categories of personal information:
3.1 Identity Information
- Full name and surname
- ID number or passport number (where required)
- Profile images
3.2 Contact Information
- Mobile number
- Email address
3.3 Location Data
- Real-time GPS location
- Address history and saved locations
3.4 Transactional Information
- Payment records
- Service history
- Wallet balances (Kruza Rands, if applicable)
3.5 Technical Information
- Device information
- IP address
- Browser and app usage data
3.6 Verification & Compliance Data (for Providers)
- Driver's licence
- Vehicle details
- Certifications or qualifications
4. Purpose of Processing
Your personal information is processed for the following lawful purposes:
- To facilitate connections between Users and Providers;
- To enable transactions and payments;
- To verify identity and prevent fraud;
- To improve platform performance and user experience;
- To comply with legal and regulatory obligations;
- To ensure safety and security of all Users.
Processing is conducted in accordance with Sections 9–12 of POPIA, ensuring lawfulness, minimality, and purpose specification.
5. Legal Basis for Processing
Kruza processes personal information based on:
- User Consent;
- Performance of a contract (use of the Platform);
- Compliance with legal obligations;
- Legitimate business interests, balanced against your rights.
6. Disclosure of Information
Kruza may share personal information with:
- Service Providers (to enable service delivery);
- Payment gateways and financial institutions;
- Third-party operators providing hosting, analytics, or security services;
- Regulatory or law enforcement authorities, where required by law.
All third parties are contractually bound to maintain confidentiality and comply with POPIA.
7. Cross-Border Data Transfers
Where personal information is transferred outside South Africa:
- Such transfers will only occur where:
- The recipient is subject to adequate data protection laws, or
- The User has consented, or
- The transfer is necessary for contract performance.
8. Data Security
Kruza implements appropriate technical and organizational measures, including:
- Encryption of sensitive data;
- Secure authentication mechanisms;
- Access control and monitoring systems.
However, no system is entirely secure, and Users acknowledge inherent risks in digital platforms.
9. Data Retention
Personal information is retained:
- Only for as long as necessary to fulfil its purpose;
- As required by applicable law;
- Or until the User requests deletion, subject to legal limitations.
10. User Rights (POPIA Rights)
You have the right to:
- Access your personal information;
- Request correction or deletion;
- Object to processing;
- Withdraw consent (subject to contractual limitations);
- Lodge a complaint with the Information Regulator of South Africa.
11. Cookies & Tracking
Kruza may use cookies and similar technologies to:
- Enhance functionality;
- Analyse usage patterns;
- Improve user experience.
Users may adjust browser settings to disable cookies, though this may affect functionality.
12. Breach Notification
In the event of a data breach:
- Affected Users will be notified as soon as reasonably possible;
- The Information Regulator will be informed where required.
13. Amendments
This Privacy Policy may be updated periodically. Continued use of the Platform constitutes acceptance of revised terms.
14. Contact Details
Information Officer: Kruza
Email: hello@kruza.app
Address: 108 Scheinerr Chamber, 2099
Terms of usePrivacy PolicyPOPIA consent