Privacy Policy

Last updated 24 August 2026 · Effective 24 August 2026

This policy explains what personal information the Subby mobile application (published on the App Store and Google Play as Get Subby) and website collect, why we collect it, and what rights you have. It is written to comply with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

Subby is operated by Lets Have Coffee (PTY) LTD ([registration number]), a company registered in South Africa, of [registered address]. We are the responsible party for the personal information described in this policy.

Our Information Officer can be reached at privacy@getsubby.co.za.

2. Information we collect

Account information. Your name, email address, mobile number, password (stored only as a secure hash) and profile photo. If you sign in with Google or Apple, we receive your name and email address from that provider — we never receive your password.

Directory listing information. If you publish a listing as a builder, subcontractor or supplier, the trade, business name, service area, contact details, description and images you enter. Listing information is intended to be publicly visible in the app.

Project content. Everything you record against a project — project names and addresses, budgets and cost lines, timelines and tasks, snags, site book entries, inspections, site meeting minutes, variation orders, payment claims, quote requests and quotes, team members you invite, and the photographs, videos and documents you upload.

Device and usage information. Device model, operating system version, app version, crash reports, performance traces and general usage events. We use this to fix faults and improve the app.

Payment information. If you subscribe to a paid plan, the purchase is processed by Apple or Google through their app stores. We receive confirmation of your subscription status. We never receive or store your card number.

3. Why we use it

We process your personal information to create and secure your account; to operate the directory and show listings to people searching for a trade; to store and sync your project records across your devices; to deliver quote requests to the subcontractors you select; to send transactional notifications about your projects and account; to manage subscriptions; to detect abuse and enforce our Terms; and to diagnose faults and improve the product.

Our lawful bases are performance of our contract with you, our legitimate interests in operating and securing the service, compliance with legal obligations, and your consent where consent is required.

4. Who we share it with

Other users, at your direction. People you invite to a project can see that project's content. Subcontractors you send a quote request to receive the request and your contact details. Published listings are visible to all users.

Operators who process data for us. Google (Firebase authentication, Firestore database, Cloud Storage, Cloud Functions and performance monitoring) hosts the service. Apple and Google process app store subscriptions. These operators act on our instructions under contract.

Legal and business transfers. We may disclose information where the law requires it, to protect our rights or a person's safety, or to a purchaser as part of a merger or sale of the business. We do not sell your personal information.

5. Where your information is stored

Our infrastructure runs on Google Cloud. Your information may therefore be stored or processed outside South Africa. Where information is transferred across borders we rely on section 72 of POPIA and require the recipient to apply protections comparable to those in POPIA.

6. How long we keep it

We keep account and project information for as long as your account is active. If you delete your account we delete or de-identify your personal information within 30 days, except where we must retain records for legal, tax or dispute-resolution purposes. Content you shared into another user's project may remain visible to that user.

7. Your rights

Under POPIA you may ask us to confirm what personal information we hold about you, to correct or delete information that is inaccurate, irrelevant, excessive or out of date, and to object to processing. You may withdraw consent where our processing relies on it, and you may request that we delete your account entirely.

You can edit your profile and listing in the app at any time, and delete your account from the account settings screen. For anything else, write to privacy@getsubby.co.za and we will respond within 30 days.

If you are not satisfied you may complain to the Information Regulator (South Africa) at complaints.IR@justice.gov.za.

8. Security

We use encryption in transit, access-controlled databases and authenticated storage rules to protect your information. No system is completely secure. If a breach affects your personal information we will notify you and the Information Regulator as POPIA requires.

9. Children

Subby is a tool for building professionals and homeowners and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy. We will change the date at the top and, where the change is material, notify you in the app or by email before it takes effect.

11. Contact us

Privacy queries: privacy@getsubby.co.za
General support: support@getsubby.co.za
Post: Lets Have Coffee (PTY) LTD, [registered address], South Africa