This policy explains how Snoko ("we", "us") collects, uses, stores, and protects your personal information when you use the Snoko mobile app and this website. It is written to comply with the Protection of Personal Information Act, 2013 (POPIA) of South Africa.
Who we are
Snoko is a record-keeping app for group savings (stokvels). Snoko does not hold, transfer, or process money — members pay each other directly and use Snoko to record and verify those payments.
Information Officer contact: support@creativeblaq.com
What we collect
| Category | Examples | Why we collect it |
|---|---|---|
| Account data | Name, display name, email address, phone number, profile photo | To create and secure your account and identify you to your pot members |
| Group savings records | Pots you belong to, contribution and payout records, amounts, votes | The core service — keeping your group's shared financial record |
| Proof images | Proof-of-payment screenshots, receipts, payout proofs you upload | To let your group verify contributions, expenses, and payouts |
| Payout details | Bank details you optionally save for receiving payouts | So the member paying you knows where to send your payout |
| Device data | Push notification token, theme preference (stored on your device) | To deliver notifications and remember your settings |
We do not collect location data, contacts, or advertising identifiers. The app contains no advertising or analytics SDKs.
Lawful basis
We process your information to perform the service you signed up for (recording your group's savings), with your consent (which you may withdraw by deleting your account), and where we have a legitimate interest in keeping shared group records accurate for all members of a pot.
Who can see your information
Snoko is built on transparency within your group: members of a pot can see each other's names, contribution amounts, statuses, proof images, and payout records for that pot. Nothing is visible to users outside your pots. We do not sell or share your personal information with advertisers or data brokers.
Where your data is stored
Your data is stored with Supabase (authentication, database, and file storage) and push notifications are delivered via Firebase Cloud Messaging (Google). These providers may store data on servers located outside South Africa. Where personal information is transferred across borders, we ensure the recipient is subject to protections substantially similar to POPIA, as section 72 of POPIA requires.
Retention
We keep your personal information for as long as your account is active. When you delete your account, your personal data is erased as described on our account deletion page. Contribution and payout records in shared pots are retained in anonymised form, because they are also part of the other members' financial records.
Your rights under POPIA
- Request access to the personal information we hold about you.
- Request correction of inaccurate or outdated information.
- Request deletion of your personal information (see the account deletion page).
- Object to processing of your personal information.
- Complain to the Information Regulator (South Africa): complaints.IR@inforegulator.org.za · inforegulator.org.za.
To exercise any of these rights, email support@creativeblaq.com. We respond within a reasonable time and at most within 30 days.
Security
All traffic between the app and our backend is encrypted in transit (TLS). Access to pot data is enforced with row-level security so only members of a pot can read its records. Proof images are stored in access-controlled storage.
Children
Snoko is not directed at children. You must be 18 or older to create an account.
Changes to this policy
If we change this policy, we will update the version and effective date at the top of this page and notify you in the app for material changes.