Privacy policy
Yebby helps you find local providers that the people you trust recommend. This policy explains what we collect, why, who sees it and what you can do about it, as required by the Protection of Personal Information Act (POPIA).
Who we are
Yebby is run by KEYPREE CONSORTIUM HOLDINGS (PTY) LTD trading as Yebby (“Yebby”, “we”), the responsible party for your information. Our Information Officer is Kevin Mashaba, reachable at privacy@yebby.co.za.
What we collect and why
- Your phone number, to sign you in with a WhatsApp code and to connect you with people who have your number saved. We store it only as a scrambled code made with a secret key; we can't turn it back into your number.
- Your name, bio and home area, which you give us. Your name appears on your vouches.
- What you post: vouches (with notes, what you paid and photos), lists, Asks and replies. Vouches and public lists can be seen by anyone, with your name. Circle posts are seen by circle members.
- Your contacts, only if you tap “Connect contacts” and agree. The numbers are sent over an encrypted connection, turned into scrambled codes on our server, and the numbers themselves are thrown away. We use the codes only to find people you know on Yebby. We never message your contacts.
- Your circles, follows and reports, and private feedback you send a provider.
- Messages you send to Yebby on WhatsApp, to answer them (for example a search, or a vouch you make without the app). WhatsApp gives us the profile name on your WhatsApp account, which we use as your Yebby name if you vouch without the app.
- If you run a business on Yebby: your listing details and the WhatsApp number on it, which are public.
We don't use advertising or analytics trackers in the app. Our hosting providers keep short-lived technical logs (such as IP addresses) to keep the service secure.
Businesses listed by someone else
Customers can add a business they recommend: its name, category, area and business WhatsApp number. If that's your business, you can claim the listing in the app, or ask us to remove it at privacy@yebby.co.za.
Who we share it with
We don't sell your information. Service providers process it for us under contract:
- Supabase (database, sign-in and photo storage; servers in London, United Kingdom)
- Cloudflare (this website and link previews)
- Meta Platforms (delivering WhatsApp messages and sign-in codes to your number)
- Google (distributing the app through Google Play)
If we switch on bookings with deposits, Paystack will process payments, and we'll tell you before that applies to you. We share information with authorities only when the law requires it.
Information stored outside South Africa
Our servers are in the United Kingdom and the European Union, whose data protection laws give protection similar to POPIA, and our providers are bound by contract to protect it (POPIA section 72).
How long we keep it
- Your account and what you post: until you delete them.
- Sign-in codes: deleted within a day. Half-finished WhatsApp vouches: 30 minutes.
- Backups: deleted copies can remain in encrypted backups for up to 30 days.
Your rights
You can ask to see, correct or delete your information, object to how we use it, and withdraw consent (for example to contacts matching) at any time. Most of this you can do yourself in the app; here's how to delete your account. For anything else, email privacy@yebby.co.za. We reply within 30 days.
You may also complain to the Information Regulator: inforegulator.org.za.
Security
Connections are encrypted, phone numbers are stored only as keyed codes, and database rules limit each person to what they're allowed to see. No system is perfect; if something goes wrong we'll tell you and the Regulator as POPIA requires.
Age
Yebby is for people aged 18 and older.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it applies.