Our commitment under POPIA.
Protection of Personal Information Act 4 of 2013 · Effective full compliance from launch.
Lawful processing
We process personal information only with explicit, in-language consent, gathered before any capture and stored with a timestamp + signed hash for audit.
Special personal information
Biometric templates (face, voice) are special personal information under section 26. Templates are encrypted at rest with AES-256, never used in denominators for KPIs, and never transferred to any third party.
Data-subject requests
Access, correction and deletion requests are fulfilled within 7 calendar days. Contact privacy@tshomi-os.com or use the in-app request flow.
Cross-border transfers
Primary hosting: AWS eu-central-1 (Frankfurt). Disaster recovery: AWS af-south-1 (Cape Town). Adequacy assessment on file.
Sub-processors
Full list of sub-processors and DPAs available at /trust.
Information officer
Oko Macanda · Supamanpro (Pty) Ltd · Cape Town · privacy@tshomi-os.com