Privacy Policy

Last updated: 19 February 2026

1. Who we are

FragSwipe (“we”, “us”, “our”) is an online marketplace for the buying and selling of marine aquarium livestock and equipment in South Africa, operating at fragswipe.co.za. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA).

2. Information we collect

  • Account information: email address, username, and optionally your WhatsApp number.
  • Listing information: photos, descriptions, prices, and neighbourhood-level location you choose to share.
  • Usage data: pages visited, device type, and browser — collected via standard server logs.

We do not collect exact GPS coordinates that are displayed publicly. Location data is only resolved to suburb/neighbourhood level before being stored or shown.

3. Why we collect it (purpose)

  • To create and manage your account.
  • To enable you to post and find listings on the platform.
  • To allow buyers to contact sellers via WhatsApp (your number is only shared when a buyer taps the contact button).
  • To send transactional emails (e.g. account confirmation, password reset).
  • To improve platform performance and fix bugs.

4. Legal basis for processing

We process your personal information on the following grounds under POPIA:

  • Consent: when you create an account and accept these terms.
  • Contractual necessity: to provide the marketplace service you have signed up for.
  • Legitimate interest: to maintain platform security and improve service quality.

5. How we share your information

We do not sell your personal information to third parties. We may share data with:

  • Supabase (database and authentication infrastructure) — data is stored on servers within the United States. Supabase is ISO 27001 certified and SOC 2 Type II compliant.
  • Vercel (hosting and content delivery).
  • Other users of the platform, to the extent you choose to make your listing public (username, listing photos, neighbourhood, price, and WhatsApp number when you opt to display it).

6. Retention

We retain your account data for as long as your account is active. If you delete your account, all personal information is permanently deleted within 30 days. Listing data may be retained in anonymised form for analytics purposes.

7. Your rights under POPIA

You have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or outdated information.
  • Request deletion of your personal information (“right to be forgotten”).
  • Object to the processing of your personal information.
  • Lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.

To exercise these rights, email us at privacy@fragswipe.co.za.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and row-level security on our database. No system is completely secure; please use a strong, unique password.

9. Cookies

We use essential session cookies to keep you logged in. We do not use advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email and update the “Last updated” date above.

11. Contact

Information Officer: FragSwipe
Email: privacy@fragswipe.co.za
Website: fragswipe.co.za