Privacy Policy

Last updated: 14 August 2026

Overview

Cubby ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, and your rights under South Africa's Protection of Personal Information Act (POPIA).

1. Information We Collect

• Account information: full name, email address, phone number, password (encrypted).
• Profile information: photo, role (traveller / host / bag runner), bio.
• Verification data: ID document photo and selfie photo, for users who choose to verify.
• Booking data: booking times, locations, bag counts, PIN codes, and messages between users.
• Payment data: processed directly by PayGate — Cubby does not receive or store your card number.
• Location data: only when you grant location permission, to show nearby hosts.
• Location search data: when you search for an address or area, your search text is sent to Google Places to return matching suggestions.
• Host bank details: used only to pay out host earnings.
• Device / push notification tokens: used to deliver booking and message notifications.
• Diagnostic data: automatic crash and error reports collected via Sentry to help us find and fix bugs.

2. How We Use Your Information

• To operate bookings, payments and messaging between Travellers and Hosts.
• To verify user identity and improve platform trust and safety.
• To send transactional notifications (booking confirmed, message received, etc.) via in-app notifications, push notifications and email.
• To respond to support requests.
• To detect and prevent fraud or abuse of the platform.

3. Who We Share Data With

We do not sell your personal information to third parties. We share data only with the service providers needed to run Cubby, and where required by law or to protect the safety of our users.

• Supabase — our database and authentication provider, stores your account and booking data securely.
• PayGate — processes payments and receives only the data required to complete a transaction.
• Resend — our email delivery provider, used to send transactional emails.
• Google — receives location search queries (via Google Places) and displays map data to show nearby hosts.
• Sentry — receives automatic crash and error diagnostic reports to help us identify and fix bugs.

4. Data Retention

We retain your data for as long as your account is active. If you delete your account, your profile and personal data are removed; some booking records may be retained where required for legal, financial or dispute-resolution purposes.

5. Your Rights

Under POPIA, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated personal data — available directly from Profile → Delete Account.
• Object to certain processing of your data.

6. Security

We use industry-standard measures — encrypted storage, row-level security, and secure payment processing — to protect your data. No system is 100% secure, and we cannot guarantee absolute security.

7. Children

Cubby is not intended for use by anyone under 18. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

9. Contact

Questions about this Privacy Policy or your data? Contact us at hello@mycubby.co.za or call +27 77 460 9484.