Privacy Policy
Last updated: May 2026 · Effective date: May 2026 · Applies to: Ryze mobile application and ryzeapp.co.za
Ryze is built and operated by Quikle AI (Pty) Ltd, a South African technology company registered in South Africa. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Who we are
Ryze is a product of Quikle AI (Pty) Ltd ("Quikle AI", "we", "us", or "our"), based in South Africa. Quikle AI also operates Lexio (lexio.co.za), an AI-powered legal assistant for South Africans.
Our Information Officer, as required by POPIA, can be contacted at: privacy@quikle.co.za
2. What information we collect
We collect only what is necessary to provide the Ryze service:
- Account information: Your phone number or email address (used for authentication via OTP), display name, province, and municipality. These are provided by you during registration.
- Campaign activity: Campaigns you create, join, or leave; posts and evidence you submit to campaign community threads.
- Evidence uploads: Images, documents, and videos you upload as campaign evidence. These are stored securely in South Africa.
- Device information: Your device's push notification token (for campaign alerts). We do not collect device identifiers beyond what is required for notifications.
- Location context: Your province and municipality (set by you during profile setup). We do not collect precise GPS location without your explicit consent.
3. How we use your information
- To authenticate you and maintain your account session
- To show you campaigns relevant to your location (province and municipality)
- To enable you to join, start, and participate in campaigns
- To send you push notifications about campaigns you have joined (only with your permission)
- To moderate community content using our Shield AI system
- To generate anonymised, aggregate civic intelligence data (see Section 7)
4. Legal basis for processing (POPIA)
We process your personal information on the following grounds under POPIA:
- Contract: Processing necessary to provide the Ryze service you have signed up for
- Consent: Push notifications (you may withdraw consent at any time in app settings)
- Legitimate interest: Platform security, fraud prevention, and content moderation
5. Data storage and security
All personal data is stored on servers hosted within the European Economic Area (EEA) via Supabase, our database provider, which maintains SOC 2 Type II certification. We do not store personal data on servers outside of jurisdictions with adequate data protection frameworks.
We implement appropriate technical and organisational measures to protect your information, including row-level security on all database tables, encrypted connections (HTTPS/TLS), and access controls.
6. Data sharing
We do not sell your personal information. We share information only in the following circumstances:
- Service providers: Supabase (database), Expo/Firebase (push notifications). These providers process data on our behalf under data processing agreements.
- Legal requirements: If required by South African law or a valid court order.
- Campaign participants: Your display name and province are visible to other users in campaign community threads. Your phone number and email are never shared.
7. Anonymised data and research
Ryze may generate and share anonymised, aggregate civic intelligence data — for example, the total number of citizens joining campaigns in a particular municipality, or aggregate sentiment trends. This data contains no personal information and cannot be used to identify any individual. It may be shared with media organisations, academic researchers, or civic institutions.
8. Your rights under POPIA
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate personal information
- Delete your account and all associated personal data (in-app: Profile → Settings → Delete account)
- Object to processing of your personal information
- Lodge a complaint with the Information Regulator of South Africa: inforegulator.org.za
To exercise any of these rights, contact us at privacy@quikle.co.za. We will respond within 30 days.
9. Data retention
We retain your personal information for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days. Campaign content you have contributed (posts, evidence) is anonymised rather than deleted, as it forms part of the civic record.
10. Children
Ryze is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us at privacy@quikle.co.za.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via push notification or email. The "Last updated" date at the top of this page will always reflect the most recent version.
12. Contact us
Quikle AI (Pty) Ltd
South Africa
Email: privacy@quikle.co.za
Website: quikle.co.za