Skip to content
Legal

Privacy policy

Last updated 24 July 2026

What we collect, why we collect it, and what you can tell us to do with it. Written to South Africa's Protection of Personal Information Act (POPIA).

Draft for review. This document is a working draft pending sign-off by a South African attorney. Bracketed values are placeholders and are not yet binding.

1. Who is responsible for your information

[Registered company name] ([registration number]), trading as hoppir, is the responsible party for the personal information described here. We are based in Cape Town, South Africa.

Our Information Officer is [name], registered with the Information Regulator as required by POPIA. You can reach them at support@hoppir.app.

2. What we collect

When you use the app

  • Account details — your name and email address, or the Apple/Google identifier you sign in with. If you sign in with Apple and choose to hide your email, we only ever see the relay address.
  • Bookings and credit activity — the classes you book, cancel and attend, and every credit movement in your wallet. We keep this as a ledger because it is what makes your balance reconcilable.
  • Your location at check-in — only if you allow it, and only for one purpose: when you check yourself in, the app takes a single location reading to confirm you are actually at the studio. We compare it to the venue and keep only the resulting distance in metres on the check-in record — not your coordinates, and not a location history. We never use it to sort, rank, filter or recommend studios, and hoppir does not track you in the background. Browsing, booking and paying all work with location switched off; if it is off when you arrive, you show your booking code to the studio’s staff instead.
  • Payment details — handled by our payment provider. We store a token and the last four digits of your card so subscriptions can renew; we never see or store your full card number.

When you use this website

  • Your email address, if you give it to us to be notified about something specific (for example, Android availability). We use it for that, and nothing else.
  • What you send us on the contact page — your name, your email address and the message itself. We use it for one purpose: answering what you asked. It is not stored in a database or a helpdesk system; it reaches us as an email to our support inbox, sent through our email provider, and it lives in that inbox alongside the reply.
  • Basic, aggregated usage statistics — which pages are visited and roughly where from. We do not use advertising cookies or cross-site trackers.

3. Why we may lawfully process it

  • To perform our contract with you — taking payment, holding your credits, booking your seat, and letting the studio know you are coming.
  • With your consent — location at check-in, push notifications, and marketing email. Each is optional, and you can withdraw consent at any time without losing access to the rest of hoppir.
  • To meet a legal obligation — tax and financial record-keeping.

4. Who we share it with

  • The studio you book with receives your name and the class you booked, so they can check you in. They do not receive your payment details or your activity at other studios.
  • Our operators — the payment provider that processes your card, our hosting and database provider, and our email provider. Each is bound by a written agreement to process your information only on our instruction and to secure it.

We do not sell your personal information, and we do not share it with advertisers.

5. Information sent outside South Africa

Some of our operators host data outside South Africa ([list regions]). Where they do, POPIA section 72 requires them to be subject to laws or binding agreements giving your information a comparable level of protection, and our contracts with them require exactly that.

6. How long we keep it

We keep your account and booking history for as long as you have an account, and afterwards only where a law requires it — financial records, for example, must be retained for five years. Credit ledger entries are never deleted or edited while your account is open, because doing so would break the record your balance is built from. Website email sign-ups are deleted once the thing you asked to be told about has happened, or when you unsubscribe.

7. Your rights

Under POPIA you may, at any time:

  • Ask what personal information we hold about you.
  • Ask us to correct or delete information that is wrong, irrelevant, or no longer needed.
  • Object to processing based on our legitimate interests.
  • Withdraw a consent you previously gave.
  • Ask us for a copy of your information in a portable format.

Write to support@hoppir.app and we will respond within a reasonable period. If you are not satisfied, you may complain to the Information Regulator of South Africa at inforegulator.org.za.

8. Security

Everything is transmitted over encrypted connections and stored on infrastructure with access controls that limit each account to the data it is entitled to. No system is perfectly secure, but if a breach ever affected your personal information we would notify you and the Information Regulator as POPIA requires.

9. Children

hoppir is not intended for anyone under 18. We do not knowingly collect information from children, and will delete it if we discover we have.

10. Changes

If we change this policy in a way that materially affects you, we will tell you in the app or by email before the change takes effect.