Privacy Policy

1. Scope and responsibility

Flinx is a product of AUROSTRAT SOLUTIONS (PTY) LTD and YIK SOLUTIONS (PTY) LTD. AUROSTRAT SOLUTIONS (PTY) LTD operates Flinx and is responsible for personal information processed through the service. The company registration number is 2024/125747/07 and its registered office is 1217 Diepkloof Street, 48 Central Park, Honeydew Ridge, Gauteng, 2170, South Africa. This policy applies to customers, Pros, business representatives and team members, and administrators.

This notice explains Flinx’s processing under the Protection of Personal Information Act 4 of 2013 (“POPIA”).

2. Information we collect

• Account and contact: name, email, phone, role, authentication status, preferences and account history.
• Marketplace and location: saved addresses, job or operating location, requests, photos, offers, diagnostic visits, schedules, jobs, reviews, disputes and support records.
• Pro and business: public profile, service categories, business and representative details, credentials, insurance information, bank or payout information and performance records.
• Identity and verification: ID or passport information, registration and trade documents, proof of address, selfies and review outcomes.
• Transactions: masked payment-method details, fees, payments, refunds, invoices, referral attribution and rewards, service credits, payouts and reconciliation. Flinx should not store full card numbers or security codes.
• Communications: chat, attachments, notifications and dispute evidence.
• Device and technical: installation identifier, device and platform, app version, sessions, push token, security events, network availability, error type and stack location.

3. Purposes and lawful grounds

We process information to create and secure accounts; verify eligibility; match customers and Pros; attribute and administer optional referral rewards and service credits; operate requests, offers, jobs, communications, disputes and payouts; prevent fraud; provide support; comply with law; and maintain reliable service records.

Processing may be necessary to provide the service or perform a contract, comply with law, pursue legitimate safety and fraud-prevention interests, protect a user’s legitimate interest, or be based on consent. Optional direct marketing requires an appropriate permission and opt-out.

4. Identity, selfies and special personal information

Identity documents and verification selfies are restricted and used for identity, platform safety and service-category review—not advertising. Flinx does not currently describe this review as automated facial recognition.

Where consent is the lawful basis, it can be withdrawn by contacting us. Withdrawal does not affect earlier lawful processing but may prevent continued use of a role requiring verification.

5. Location

Location supports address selection, city and operating-area setup, distance calculations and nearby matching. A job location may be shared with matched or participating Pros as needed to quote and perform work.

Flinx does not claim to continuously track or publicly display a Pro’s live route. Device permission can be changed, but some address and matching features will stop working.

6. Sharing and service providers

Relevant information is shared with the customers, Pros and businesses involved in a request or job. Public Pro profile and genuine review insights may be visible to users evaluating a Pro.

Providers include Supabase for cloud database, authentication and storage; Google Firebase for push notifications and privacy-filtered crash reporting; Apple and Google platform services; OpenStreetMap map tiles and device geocoding services; communications providers; and Paystack for payment processing when live card payments or refunds are enabled.

Information may also be shared with advisers, insurers, auditors, authorities or courts to protect rights, investigate suspected offences or comply with law. Flinx does not sell personal information.

7. Cross-border processing

Technology providers may process or back up information outside South Africa. Flinx uses reputable providers and seeks contractual, legal or other safeguards required by POPIA for cross-border transfers.

8. Retention schedule

• Active account and profile data is retained while needed to provide Flinx. Closure starts a review; information not subject to an open job, dispute, safety investigation or legal obligation should be deleted or de-identified within 30 days after review completion.
• Abandoned or unsuccessful verification uploads: up to 90 days. Verification evidence needed for a completed review: up to 3 years after closure unless a legal hold applies.
• Job, offer, invoice, payment, payout, tax and dispute records: up to 5 years after the transaction or case closes, or longer where law requires.
• Chat and ordinary support records: up to 3 years after the related job or case closes.
• Inactive device sessions, push tokens and routine operational logs: up to 12 months. Consent and privacy-request evidence: up to 5 years.
• Failed sensitive uploads cached on a device: up to 24 hours. Successful uploads and sign-out trigger earlier cleanup. Backup deletion follows the provider’s protected backup rotation.

9. Security

Flinx uses access controls, row-level database security, encrypted connections, secure device storage, restricted files, session revocation, recent-authentication checks and privacy-filtered operational reporting. No system can guarantee absolute security.

Reportable compromises will be investigated and affected people and the Information Regulator notified where required.

10. Your POPIA rights

Subject to law, you may ask whether we hold your information; request access, export or correction; request deletion or restriction; object to processing; withdraw consent; opt out of direct marketing; and complain.

Use Privacy and data in the app to export or request closure. You can also use the public account deletion page. Email info@aurostrat.com for correction, objection, deletion, consent withdrawal or another privacy request. Identity verification may be required, and some deletion requests may be limited by law.

11. Matching, children and changes

Flinx uses service category, approval, distance, availability and platform activity to suggest relevant requests or Pros. This supports matching and ranking and is not intended to make a legal-effect decision without meaningful human involvement.

Flinx is for people aged 18 and older. Material policy changes will be highlighted and may require renewed acknowledgement or consent.

12. Contact and complaints

Contact AUROSTRAT SOLUTIONS (PTY) LTD first so we can investigate. You may also complain to the Information Regulator of South Africa using its complaints service or POPIAComplaints@inforegulator.org.za.