Privacy Policy

Effective date: 5 April 2026  |  sageio.org  |  Last updated: 5 April 2026

This Privacy Policy describes how sageio.org ("we", "us", or "our") collects, uses, and protects your information when you use the PUMPd mobile application ("the App").

1. Information We Collect

• Account information: Your email address, obtained via Google Sign-In when you register.
• Location data: Your precise GPS location, collected when you submit fuel prices or search for nearby stations. We do not collect location data in the background.
• Fuel & vehicle data: Fuel logs, odometer readings, vehicle details, and fuel prices you voluntarily submit.
• Usage data: App interactions such as screens visited and features used, collected to improve the service.
• Device information: Device type, operating system, and app version for crash reporting and compatibility.
• Contact number (optional): If provided, used only for station ownership claim verification. Not shared publicly.
• Bug reports and feedback: If you submit a report, we collect your description, device model, OS version, and app version, linked to your account.

2. How We Use Your Information

• To provide and operate the PUMPd service, including displaying crowdsourced fuel prices.
• To calculate and display your personal fuel economy statistics.
• To validate the accuracy of submitted fuel prices (GPS proximity check).
• To manage your subscription and billing.
• To send service-related notifications (e.g. low stock alerts near you).
• To improve and develop new features.

3. Data Sharing

We do not sell your personal information. We share data only with:

• Google — for authentication (Google Sign-In) and maps (Google Maps Platform).
• Amazon Web Services (AWS) — our cloud infrastructure provider. Data is stored in the EU (Ireland) region.
• PayFast — our South African payment processor for subscription billing. PayFast receives only what is necessary to process your payment and operates under their own POPIA compliance.
• Law enforcement — only if required by applicable law.

Crowdsourced fuel prices and station data you submit may be displayed publicly to other users, without your personal details.

3a. Cross-Border Data Transfers

Your data is stored on Amazon Web Services infrastructure in the EU (Ireland) region. Ireland is subject to the EU General Data Protection Regulation (GDPR). In terms of POPIA Section 72, we consider Ireland to provide adequate protection for your personal information under GDPR.

4. Data Retention

• Account data: Retained while your account is active. Deleted on account deletion request.
• Price submissions: GPS coordinates are not stored. Distance validation result is retained. Anonymised on account deletion.
• Fuel logs and vehicles: Deleted on account deletion.
• Station claim contact details: Retained for 90 days after a rejected claim; indefinitely for approved claims.
• OCR text from pump photos: Deleted immediately after price validation.

5. Security

All data is encrypted in transit using TLS. Passwords are never stored — we use Google's secure federated sign-in. Data is stored on AWS infrastructure with access controls and audit logging.

6. Children

PUMPd is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

7. Your Rights (POPIA)

In accordance with the Protection of Personal Information Act (POPIA) of South Africa, you have the right to:

• Access: Request a copy of your personal information via Profile → Export My Data in the app.
• Correction: Update your information via Profile → Edit Profile in the app.
• Deletion: Delete your account and all associated personal information via Profile → Delete Account in the app.
• Objection: Object to the processing of your personal information by contacting our Information Officer.

To exercise rights not available in-app, or to lodge a complaint, contact our Information Officer at [email protected]. You may also lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg/.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via the App or email. Continued use of the App after changes constitutes acceptance of the updated policy.

9. Contact

sage.io
Information Officer: [email protected]
Information Officer registered with the Information Regulator of South Africa (IRSA).