Privacy Policy

1. Who is responsible

BHUTI is the responsible party for personal information processed through the platform. Our Information Officer oversees compliance and can be reached through the channels on our Contact page.

Where a provider receives your booking details to deliver a service, that provider is a separate responsible party for the information it holds.

2. Information we collect

• Account information: name, email address, phone number, role and password (stored in hashed form).
• Safety and service information: booking requests, provider details, escort and trip data, incident, tip and civic reports, and any files or photographs you attach.
• Location information: your device location when you use the map, SOS, "Where am I" or live escort features, and the coordinates saved with a report.
• Social content: the one-minute videos, captions, display name and area you publish on Social Connect.
• Technical information: device type, browser, IP address, pages viewed and error logs.
• Payment information: transaction references and amounts for platform features such as Guard Credits. Full card details are handled by the payment provider, not by us.

3. Why we process it

We process personal information to create and secure accounts, connect you with providers, deliver emergency and incident reports to the right responders, operate the social timeline, send service notifications, prevent fraud and abuse, meet legal obligations, and improve the platform.

We rely on your consent, the performance of an agreement with you, compliance with law, and our legitimate interests in keeping the platform safe and functional. You may withdraw consent at any time, but that may limit features that depend on it.

4. Who we share it with

Booking and report details are shared with the provider, unit or authority you chose or that handles the matter. Anonymous reports are shared without your identifying details, unless you choose otherwise.

We use service providers for hosting, storage, mapping, communications and payments, who process information on our instructions. We may disclose information where a law, court order or lawful request from an authorised official requires it.

5. Cross-border processing

Some service providers store data outside South Africa. Where that happens, we require a level of protection that is substantially similar to POPIA, as section 72 of POPIA requires.

6. How long we keep it

We keep account information while your account is active. Reports, evidence and case records may be kept for longer where an investigation, prosecution, civil claim or legal obligation requires it. Recordings and logs are kept only as long as needed for the purpose they were collected.

7. Security

We use access controls, encrypted connections, role-based permissions and audit logging. No system is completely secure, and you should use a strong, unique password and report suspected compromise immediately.

If a security compromise affects your personal information, we will notify you and the Information Regulator as section 22 of POPIA requires.

8. Your rights

You may ask what personal information we hold about you, request correction or deletion, object to processing, and ask for a copy of your information. Requests are handled in line with POPIA and PAIA.

You may complain to our Information Officer first, and to the Information Regulator if you are not satisfied: 27 Stiemens Street, JD House, Braamfontein, Johannesburg; complaints@inforegulator.org.za; 010 023 5200.

9. Children

The platform is intended for adults. We do not knowingly collect personal information from children without the consent of a competent person, and we remove such information when we become aware of it.