Privacy Policy

Introduction

Adventure Hub (PTY) LTD ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use GoldSwell™. We comply with the Protection of Personal Information Act (POPIA) of South Africa, the General Data Protection Regulation (GDPR) of the EU, and the California Consumer Privacy Act (CCPA).

1. Information We Collect

• Profile Data: Name, email address, phone number (if provided for WhatsApp notifications), and account preferences. • Profile Media: Profile photo (avatar) and bio text that you voluntarily upload. Profile photos are stored in Cloudflare R2 cloud storage. • Location Data: We process GPS coordinates to provide localized environmental and geomorphological analysis. • Usage Data: IP addresses, device identifiers, and interaction logs. • Payment Data: Processed by LemonSqueezy (web), Apple (iOS), or Google Play (Android). We receive confirmation of payment but do not store your credit card numbers. • Communication Data: WhatsApp message delivery status and notification preferences.

2. How We Use Your Information

• To provide and personalize the GoldSwell™ experience, including displaying your profile photo and bio. • To process payments and manage subscriptions. • To improve our analysis algorithms and environmental models. • To communicate with you regarding updates, security alerts, and G-Probe™ notifications. • To deliver OTP verification codes via email or WhatsApp (based on your preference). • To send marketing communications via WhatsApp (opt-in only).

3. Data Sharing & Third Parties

We do not sell your personal information. We share data only with: • LemonSqueezy: For secure payment processing (web). • Apple / Google: For in-app purchase processing (native apps). • Cloudflare: For hosting, security, performance, and media storage. • Meta Platforms (WhatsApp Business API): To deliver WhatsApp notifications and OTP codes. Your phone number is shared with Meta when you opt in to WhatsApp messaging. • Brevo: To send transactional and marketing emails. • Google (Gemini AI): To power G-Probe™ AI analysis. Environmental data (not personal data) is processed by Google's Gemini API.

4. International Data Transfers

As a global service, your data may be stored and processed in South Africa, the EU, or the US. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place for all international transfers.

5. Security

We implement industry-standard security measures, including AES-256-GCM encryption and strict access controls, to protect your data. All personally identifiable information (PII) is encrypted at rest. Profile photos are stored securely in Cloudflare R2 cloud storage with access-controlled URLs. Bio text is stored as voluntary public content and is not encrypted.

6. Your Rights

Depending on your location, you may have the right to: • Access, correct, or delete your personal data. • Object to or restrict processing. • Withdraw consent at any time. • Lodge a complaint with a supervisory authority (e.g., the Information Regulator in South Africa).

7. Data Retention

We retain your information as long as necessary to provide the Service or comply with legal obligations.

8. Contact

For privacy-related inquiries, contact our Information Officer at privacy@goldswell.app.