Bond Boss App Privacy Policy

Effective date: 3 August 2026
Last updated: 3 August 2026

This Privacy Policy explains how BOSS GLOBAL (PTY) LTD ("Bond Boss", "we", "us") collects, uses, shares and protects personal information when you use the Bond Boss mobile application.

It is written to comply with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This policy covers the app specifically. Purchases made on our online store at bondboss.co.za are also covered by our store privacy policy.

1. Who we are

Responsible party: BOSS GLOBAL (PTY) LTD, South Africa
Information Officer: The Information Officer, BOSS GLOBAL (PTY) LTD
Email: support@bondboss.co.za

2. Information we collect

2.1 Account information

When you create an account we collect your name, email address, password (stored only in hashed form), and optionally your phone number, suburb, city, street address and profile photograph. We record which role you use the app in — customer, service professional, or site inspector — and whether you have accepted our Terms.

If you choose to sign in with Google, we receive your name, email address and profile picture from Google. We do not receive your Google password.

2.2 Verification codes

We generate one-time codes sent to your email address or phone number to confirm they belong to you. These codes expire and are deleted after use.

2.3 Photographs of your property

The core function of the app is diagnosing surface damage from photographs. We collect images you capture or upload of walls, roofs, floors, bathrooms and other surfaces. Where a job is carried out, we also store before, during, after and inspection photographs taken by the assigned professional and inspector, together with your digital signature confirming completion.

Please avoid including people, documents or anything else you would not want recorded in these photographs.

2.4 Location information

Where you provide a service address, we convert it into approximate coordinates (latitude and longitude) so that we can match you with professionals covering your area and display the job location on a map. We do not track your device's location continuously or in the background.

2.5 Job and diagnosis information

We store the surface type, area in square metres, the issues you select, recommended products, quoted and final prices, job status history, scheduling details, materials used, quality-assurance outcomes, warranty status, and any ratings, tags or written reviews you submit.

2.6 Messages

Messages exchanged between you and an assigned professional through the app are stored so that both parties, and our support team where a dispute arises, can refer back to them.

2.7 Payment information

Card payments are processed by Paystack. Your full card number, CVV and PIN are entered directly with Paystack and are never received or stored by Bond Boss.

Where you choose to save a card for future use, we store only what is needed to charge it again: a secure payment token issued by Paystack, the card type, the last four digits, the expiry month and year, and the issuing bank.

2.8 Information from service professionals and inspectors

If you register as a service professional or site inspector, we additionally collect your business name, service area and coverage radius, skills, certifications, a copy of your identity or certification document, and your banking or payout details so that we can verify you and pay you. We also record performance metrics such as jobs completed, average rating, on-time rate and response time.

2.9 Device and usage information

We collect a push notification token and device identifier when you enable notifications, together with basic usage and diagnostic data such as screens visited and errors encountered, which helps us keep the app working.

3. Device permissions

The app asks for the following permissions. You may decline any of them, and you can change your mind at any time in your device settings.

  • Camera — to photograph the damaged surface for diagnosis, and for professionals to capture evidence of work. If you decline, you can still upload existing images from your photo library.
  • Photo library — to let you select an existing photograph instead of taking a new one.
  • Location — to match you with nearby professionals and show job locations on a map.
  • Notifications — to alert you when a job is accepted, a professional is on the way, or work is complete. Declining does not affect any other part of the app.

4. Why we use your information

  • To create and secure your account and verify your contact details
  • To analyse photographs and produce a diagnosis, product recommendation and price estimate
  • To match you with an appropriate service professional and enable them to reach your property
  • To process deposits, balances, refunds and contractor payouts
  • To send transactional notifications about your jobs
  • To carry out independent quality inspections and administer warranties
  • To verify the identity and credentials of professionals and inspectors on our network
  • To resolve disputes, prevent fraud and comply with our legal obligations
  • To fix faults and improve the app

We rely on the performance of our contract with you, our legitimate interests in operating a safe marketplace, your consent where you have given it (for example, for notifications), and our legal obligations.

We do not sell your personal information, and we do not use your property photographs for advertising.

5. Who we share information with

5.1 The professional assigned to your job

When you book a repair, we share your name, phone number, service address, diagnosis details and photographs with the assigned service professional and, where applicable, the site inspector. They need this to reach you and complete the work. They are contractually required to use it only for that purpose.

5.2 Service providers

Base44 Application platform, database and hosting
Paystack Payment processing
OneSignal Push notification delivery
Google Optional sign-in, if you use it
Median.co Native mobile app framework
Mapping provider Converting addresses to map coordinates

These providers act as operators on our behalf and may only process your information under our instructions.

5.3 Legal and business transfers

We may disclose information where required by law, court order or a regulator, to establish or defend a legal claim, or in connection with a merger, acquisition or sale of our business.

6. Information sent outside South Africa

Some of our service providers store data outside South Africa. Where information is transferred cross-border, we take reasonable steps to ensure it receives a level of protection substantially similar to POPIA, including through the contractual terms we have with those providers.

7. How long we keep it

  • Account and profile information — while your account is active, then deleted on request or on account deletion.
  • Diagnoses, photographs and messages — deleted when you delete your account.
  • Verification codes — deleted shortly after expiry.
  • Job, invoice and payment records — retained in anonymised form after account deletion, because South African tax and company law requires financial records to be kept for at least five years, and up to seven years for accounting records.

8. Security

Information is transmitted over encrypted connections and stored on access-controlled infrastructure. Passwords are stored hashed. Card numbers never reach our systems. Access to customer data is limited to staff who need it. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and the Information Regulator if a breach affecting your information occurs, as POPIA requires.

9. Your rights

Under POPIA you have the right to:

  • ask what personal information we hold about you and request a copy;
  • ask us to correct or update information that is inaccurate or incomplete;
  • ask us to delete information we no longer have grounds to keep;
  • object to processing based on our legitimate interests;
  • withdraw consent at any time, without affecting processing already carried out;
  • lodge a complaint with the Information Regulator.

To exercise any of these, email support@bondboss.co.za from your registered address. We respond within 30 days.

Information Regulator (South Africa)
Complaints: complaints.IR@justice.gov.za
General enquiries: enquiries.IR@justice.gov.za
Website: inforegulator.org.za

10. Deleting your account

You can delete your account at any time from inside the app: open Profile, scroll to the bottom, and tap Delete Account.

This permanently removes your account, saved diagnoses and photographs, saved payment methods, messages, notifications and personal details. It cannot be undone. Financial records we are legally required to retain are stripped of your name, contact details and address so they can no longer be linked to you.

If you would prefer us to do this for you, email support@bondboss.co.za from your registered address.

11. Children

The app is intended for people aged 18 and over and is not directed at children. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

If we make material changes we will update the date at the top of this page and, where the change significantly affects you, notify you in the app or by email.

13. Contact us

BOSS GLOBAL (PTY) LTD
Email: support@bondboss.co.za
App support: bondboss.co.za/pages/app-support