Skip to content
Legal

Privacy policy

Last updated 7 September 2026

What we collect, why we collect it, and what you can tell us to do with it. Written to South Africa's Protection of Personal Information Act (POPIA).

Draft for review. This document is a working draft pending sign-off by a South African attorney. Bracketed values are placeholders and are not yet binding.

1. Who is responsible for your information

[Registered company name] ([registration number]), trading as hoppir, is the responsible party for the personal information described here. We are based in Cape Town, South Africa.

Our Information Officer is [name], registered with the Information Regulator as required by POPIA. You can reach them at support@hoppir.app.

2. What we collect

When you use the app

  • Account details: your name and email address, or the Apple/Google identifier you sign in with. If you sign in with Apple and choose to hide your email, we only ever see the relay address.
  • Bookings and credit activity: the classes you book, cancel and attend, and every credit movement in your wallet. We keep this as a ledger because it is what makes your balance reconcilable.
  • Your location at check-in: only if you allow it, and only for one purpose: when you check yourself in, the app takes a single location reading to confirm you are actually at the studio. We compare it to the venue and keep only the resulting distance in metres on the check-in record, not your coordinates, and not a location history. We never use it to sort, rank, filter or recommend studios, and hoppir does not track you in the background. Browsing, booking and paying all work with location switched off; if it is off when you arrive, you show your booking code to the studio’s staff instead.
  • Payment details: handled by our payment provider, Paystack South Africa. Your card details are entered in their secure checkout rather than in the hoppir app; we store a token and the last four digits of your card so a membership can renew, and we never see or store your full card number.

When you use this website

  • Your email address, if you give it to us to be notified about something specific (for example, Android availability). We use it for that, and nothing else.
  • What you send us on the contact page: your name, your email address and the message itself. We use it for one purpose: answering what you asked. It is not stored in a database or a helpdesk system; it reaches us as an email to our support inbox, sent through our email provider, and it lives in that inbox alongside the reply.
  • Basic, aggregated usage statistics: which pages are visited and roughly where from. These set no advertising cookies and follow you nowhere.
  • Optional advertising cookies, only if you allow them. If you accept when we ask, we load Meta’s Pixel, which sets an advertising cookie (two, if you arrived from one of our Meta ads, the second recording which ad brought you) and tells Meta which pages here you visited and whether you joined a list or clicked through to apply as a studio, so we can measure whether our ads work and show them to fewer wrong people. It never sees your email address or anything you type. If you decline, or never answer, the Pixel is not loaded at all, nothing is sent to Meta, and every part of this site works exactly the same. Withdrawing consent below removes both cookies. You can change your mind either way, at any time.

3. Why we may lawfully process it

  • To perform our contract with you: taking payment, holding your credits, booking your seat, and letting the studio know you are coming.
  • With your consent: location at check-in, push notifications, marketing email, and the advertising cookies on this website. Each is optional, and you can withdraw consent at any time without losing access to the rest of hoppir.
  • To meet a legal obligation: tax and financial record-keeping.

4. Who we share it with

  • The studio you book with receives your name and the class you booked, so they can check you in. They do not receive your payment details or your activity at other studios.
  • Our operators: Paystack South Africa, which processes your card; our hosting and database provider; and our email provider. Each is bound by a written agreement to process your information only on our instruction and to secure it.

We do not sell your personal information. The one thing an advertiser can ever receive is described in section 2: if, and only if, you allow the advertising cookies on this website, Meta receives the page visits and sign-up events it describes, under Meta’s own privacy policy. Nothing from the app is ever shared with advertisers: not your account, not your bookings, credits, payments or location.

5. Information sent outside South Africa

Some of our operators host data outside South Africa ([list regions]). Where they do, POPIA section 72 requires them to be subject to laws or binding agreements giving your information a comparable level of protection, and our contracts with them require exactly that.

6. How long we keep it

We keep your account and booking history for as long as you have an account, and afterwards only where a law requires it: financial records, for example, must be retained for five years. Credit ledger entries are never deleted or edited while your account is open, because doing so would break the record your balance is built from. Website email sign-ups are deleted once the thing you asked to be told about has happened, or when you unsubscribe.

7. Your rights

Under POPIA you may, at any time:

  • Ask what personal information we hold about you.
  • Ask us to correct or delete information that is wrong, irrelevant, or no longer needed.
  • Object to processing based on our legitimate interests.
  • Withdraw a consent you previously gave.
  • Ask us for a copy of your information in a portable format.

Write to support@hoppir.app and we will respond within a reasonable period. If you are not satisfied, you may complain to the Information Regulator of South Africa at inforegulator.org.za.

8. Security

Everything is transmitted over encrypted connections and stored on infrastructure with access controls that limit each account to the data it is entitled to. No system is perfectly secure, but if a breach ever affected your personal information we would notify you and the Information Regulator as POPIA requires.

9. Children

hoppir is not intended for anyone under 18. We do not knowingly collect information from children, and will delete it if we discover we have.

10. Changes

If we change this policy in a way that materially affects you, we will tell you in the app or by email before the change takes effect.