Legal

Privacy
policy

  • Last updated: 18 October 2026
  • katflux.com + all Katflux apps
  • POPIA

The short version

  • We collect as little as we can, and only what we need to run our apps well.
  • We never sell your personal information. Not to anyone, not ever.
  • Payments go through Google Play or the App Store. We never see your card details.
  • You can ask us to see, correct or delete your data at any time. One email does it.

01Who we are

Katflux (Pty) Ltd (“Katflux”, “we”, “us”) is a private company registered in the Republic of South Africa (registration number 2026/XXXXXX/07). We build software products, including web-based services and mobile apps for Android and iOS (together, the “Services”).

We are the “responsible party” for your personal information under the Protection of Personal Information Act 4 of 2013 (“POPIA”). This policy applies to katflux.com and to every app published by Katflux unless an app shows you its own privacy policy, in which case that policy applies to that app.

02What we collect

Information you give us

  • Contact details, such as your name and email address, when you email us, ask for support or join a waitlist.
  • Account details, if an app offers accounts: your email address, a display name and your in-app preferences.
  • Content you create in an app, such as saved work, notes or settings.
  • Feedback and messages you send us.

Information collected automatically

  • Device and app information: device model, operating system version, app version, language and approximate region (country level).
  • Usage information: which features you use and how often, in aggregated or pseudonymised form.
  • Diagnostics: crash reports and performance data, so we can find and fix bugs.

Information we do not collect

We do not collect your precise location, contacts, photos, microphone or camera data unless an app clearly asks for a specific permission and explains why. You can refuse or withdraw that permission in your device settings at any time.

03How we use it

  • To provide, maintain and improve the Services.
  • To create and manage your account, if an app has one.
  • To answer your messages and provide support.
  • To find and fix crashes, bugs and performance problems.
  • To process purchases and subscriptions made through Google Play or the App Store.
  • To keep the Services secure and prevent fraud or abuse.
  • To meet our legal obligations.

We process personal information only where POPIA allows it: with your consent, to perform a contract with you, to comply with the law, or for our legitimate interests in running and improving the Services, where those interests are not outweighed by your rights. We will only send you marketing messages if you have opted in, and every message will include a way to opt out.

04Who we share it with

We do not sell or rent personal information. We share it only with:

  • Service providers (“operators” under POPIA) that host our infrastructure, deliver email, or provide analytics and crash reporting for us. They act on our instructions and are bound by written agreements to protect your information.
  • App stores (Google and Apple), which process purchases under their own privacy policies.
  • Authorities, where the law requires us to, or where it is needed to protect the rights, safety or property of our users, the public or Katflux.
  • A buyer or successor, if Katflux is ever involved in a merger or sale. They would remain bound by this policy.

05Third-party services

Some of our apps use the third-party services below. Each one processes data under its own privacy policy. Edit this table so it matches your real stack.

ServicePurposeData involved
Google Play ServicesApp delivery, billing (Android)Device ID, purchase records
Apple App StoreApp delivery, billing (iOS)Purchase records
e.g. Firebase CrashlyticsCrash reportingCrash logs, device info
e.g. Firebase AnalyticsAggregated usage statsApp events, pseudonymous IDs
e.g. RevenueCatSubscription managementPurchase status, app user ID

06How long we keep it

We keep personal information only for as long as we need it for the purposes in this policy, or as long as the law requires. Account data is kept while your account is active and deleted within 30 days of a verified deletion request. Crash and diagnostic data is kept for no longer than 90 days. Support emails are kept for up to 2 years so we can follow up on recurring issues.

07Your rights

Under POPIA you have the right to:

  • ask whether we hold personal information about you, and get a copy of it;
  • ask us to correct information that is inaccurate, outdated or incomplete;
  • ask us to delete or destroy your personal information;
  • object to how we process your information, including for direct marketing;
  • withdraw your consent at any time, where we rely on consent;
  • lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).

To use any of these rights, email privacy@katflux.com. We may need to verify your identity first, and we will respond within a reasonable time, normally within 30 days.

08Deleting your data

You can ask us to delete your account and the personal information linked to it at any time:

  • In the app: where an app has accounts, use Settings → Account → Delete account. Confirm this path for each app.
  • By email: send a request from the email address linked to your account to privacy@katflux.com with the subject “Data deletion request” and the name of the app.

We will delete your data within 30 days. We may keep a limited amount of information where the law requires us to (for example, transaction records for tax purposes). Uninstalling an app does not delete data held on our servers, and deleting your account does not cancel a subscription: cancel it in Google Play or the App Store.

09Children

Our Services are not directed at children under 13, and we do not knowingly collect personal information from them. Under POPIA, processing the personal information of anyone under 18 needs the consent of a competent person, such as a parent or guardian. If you believe a child has given us personal information without that consent, contact us and we will delete it.

10Security

We use reasonable technical and organisational measures to protect personal information, including encryption in transit, access controls and keeping data to a minimum. No system is perfectly secure. If a breach affects your personal information, we will notify you and the Information Regulator as POPIA requires.

11Cross-border transfers

Some of our service providers store or process data outside South Africa. We only transfer personal information across borders where POPIA allows it, for example where the recipient is bound by laws, binding corporate rules or an agreement that gives a level of protection substantially similar to POPIA.

12Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date above, and if the changes are significant we will tell you in the app or by email before they take effect.

13Contact

Questions, requests or complaints about privacy go to our Information Officer:

  • Information Officer: Full name
  • Email: privacy@katflux.com
  • Company: Katflux (Pty) Ltd, reg. no. 2026/XXXXXX/07
  • Address: Registered address, South Africa