Privacy Policy

RHI ("we", "us") provides an app that helps savings groups, stokvels and investment clubs manage their members, contributions, meetings and payouts. We are the responsible party for the personal information described below.

We collect the following categories of personal information:

• Account details: your name and surname, email address, phone number and password (stored in encrypted form).
• Membership and profile details: your South African ID number, residential address, banking details (bank, account number, branch code, account type), and the name, relationship and contact details of your beneficiary and next of kin. Some of this is captured by a group administrator when you join a group.
• Group activity: your group membership and role, contribution records and amounts, proof-of-payment documents you upload, attendance records, documents and meeting minutes loaded to the group, financial records and payout sequences.
• Payment and subscription information:records of subscription payments and their status. Card details are handled by our payment provider and are never stored by RHI.
• Technical information: basic device, browser and log information used to keep the app secure and working.

• Directly from you, when you register, complete your profile or use the app.
• From a group administrator or executive, when they capture your membership, banking or beneficiary details to add you to the group.
• Automatically, as you use the app.

• To create and manage your account and give you access to the app (performance of our agreement with you).
• To display your group, contribution, attendance and payout records (performance of our agreement with you).
• To process subscription payments through PayFast (performance of our agreement with you).
• To send you operational emails, such as payment reminders and verification codes (performance of our agreement with you).
• To keep the app secure, prevent fraud and abuse, and fix problems (our legitimate interest).
• To meet our legal, tax and accounting obligations (compliance with a legal obligation).
• For any other purpose you specifically consent to.

Members of a group can see the group information needed to run that group, such as contribution and attendance records. Group administrators and executives can see and edit membership details for their own group.

We do not sell your personal information. We share it only with:

• our hosting, email and payment service providers, who process it on our behalf and under contract;
• a regulator, court or law-enforcement body, where the law requires it.

Subscription payments are processed by PayFast. When you pay, your payment details are entered on PayFast's own secure pages and are governed by PayFast's privacy policy. RHI receives only a confirmation of the payment and its reference.

We use appropriate technical and organisational measures to protect personal information, including encrypted passwords, access controls and role-based permissions that restrict who can see group data. No system is completely secure, so please keep your password private and contact us if you think your account has been compromised.

We keep your personal information for as long as your account is active and you are a member of a group. After that, we keep records only for as long as we need them for the purposes above, or as long as the law requires, and then delete or anonymise them. Records that belong to a group, such as contribution history, may be retained by that group so that its financial records stay complete.

You may, at any time:

• ask what personal information we hold about you and request a copy of it;
• ask us to correct or update information that is inaccurate, misleading or out of date;
• ask us to delete information we are not required to keep;
• object to processing, or withdraw consent you previously gave;
• complain to the Information Regulator of South Africa.

You can update most of your details in the app, and you can request deletion of your account from your profile. For anything else, contact us using the details below.

Some of our service providers may store information on servers outside South Africa. Where that happens, we require those providers to protect the information to a standard comparable to POPIA.

RHI is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, please contact us so that we can remove it.

We may update this policy from time to time. Any change will be published on this page with a new "last updated" date.

For any privacy question or request, contact our Information Officer at support@therhi.app. You also have the right to complain to the Information Regulator of South Africa.