POPIA Compliance Notice

Effective date: 1 March 2026

Responsible party

Orbitfin (Pty) Ltd is the responsible party under POPIA. Contact: support@howzitai.co.za.

Information collected

We may process email addresses, Apple Sign‑In identifiers, usage data, device metadata, and chat content necessary to operate the service.

Purpose of processing

Personal information is processed to provide AI responses, maintain accounts, enforce usage limits, improve functionality, and manage subscriptions.

Legal basis

Processing occurs based on user consent, contractual necessity, legitimate interest, and legal compliance.

Cross‑border transfers

AI processing may involve international infrastructure (e.g., OpenAI). Adequate safeguards and encryption are applied.

Data security

We implement reasonable technical and organisational safeguards including secure cloud storage and encrypted transmission.

Data retention

Data is retained only as long as necessary for service delivery or legal obligations. Users may request deletion.

Data subject rights

Users may access, correct, delete, or object to processing of personal information and may lodge complaints with the South African Information Regulator.

Direct marketing

Howzit AI does not engage in unsolicited direct marketing. Notifications are optional and user‑controlled.

Children’s privacy

The app is not intended for children under 13 years old.

POPIA Compliance Notice