Privacy Policy — automedic.co.za

Last updated: 19 July 2026

1. Introduction

Khula Information Systems cc. ("AutoMedic", "we", "us", or "our"), trading as AutoMedic and operating automedic.co.za and the AutoMedic mobile application (together, the "Platform"), takes your privacy seriously. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you use the Platform.

Terms used here have the meanings given to them in the Protection of Personal Information Act 4 of 2013 ("POPIA") and our Terms and Conditions, unless otherwise defined.

2. Who we are (Responsible Party)

The Responsible Party under POPIA is:

Khula Information Systems cc.
Trading as: AutoMedic
Address: 1 Nirvana Drive, Lenasia, South Africa
Website: automedic.co.za
Email: privacy@automedic.co.za

For POPIA enquiries, requests and complaints, contact our Information Officer at privacy@automedic.co.za.

3. Who uses the Platform

AutoMedic has two types of user, and we process information differently for each:

Vehicle Owners ("Customers") — people who register vehicles and request car wash, detailing or repair services.
Service Providers ("Providers") — mechanics, mobile detailers, car wash operators and workshops who receive requests and submit quotes.

4. What personal information we collect

4.1 Information you provide directly

Category	Details	Who
Identity	First name, surname	Both
Contact	Email address, mobile number	Both
Account security	Password (stored only as a secure one-way hash — we never see it)	Both
Referral	Your referral code, and the code of the member who referred you	Both
Location — area	Suburb and postcode of the job, plus approximate coordinates for that suburb	Customers
Location — exact	Street address and access notes for the job (see the highlighted box below)	Customers
Vehicle information	Make, model, year, variant, fuel type, transmission, mileage, registration number, VIN, engine number, vehicle photographs, and photographs of the vehicle licence disc	Customers
Licence disc data	Where you photograph your licence disc, we read the barcode to extract the registration number, VIN, engine number, make, model and licence expiry date	Customers
Service requests	Service type, description, urgency, photographs of the vehicle or fault, location preference	Customers
Business information	Business name, description, services offered, service mode (mobile / service centre / both), premises address, service radius, photographs of you or your team and of your service vehicle	Providers
Quotes and job records	Prices quoted, availability, messages, work-log notes and photographs, final totals	Both
Messages	Questions, replies and attachments exchanged between Customers and Providers	Both

How we protect your address. When you post a request, Providers see only your suburb, postcode and approximate distance from them. Your street address, access notes and telephone number are withheld from all Providers. They are released to a single Provider only at the moment you accept that Provider's quote, so they can carry out the work. This restriction is enforced in our database, not merely hidden in the app.

4.2 Information collected automatically

Technical data: IP address, browser type and version, operating system, device type.
Usage data: pages and screens viewed, requests created, quotes viewed, and the site or link that referred you.
Device location: if — and only if — you tap "Use my current location", your browser asks your permission and provides your GPS coordinates. You may decline and enter a suburb instead. We do not track your location in the background or when the Platform is closed.
Cookies and local storage: see Section 8.

4.3 What we do not collect

We do not collect your South African ID number.
We do not process payments and do not collect card, banking or payment details. Payment is arranged directly between Customer and Provider.
We do not use third-party advertising or cross-site tracking services.

5. Why we process your information

Purpose	Lawful basis under POPIA
To create and administer your account	Performance of a service you requested
To match your request with Providers within range, using approximate location	Performance of a service you requested
To allow Providers to ask questions and submit quotes	Performance of a service you requested
To release your contact details and address to the Provider you accept	Performance of a service you requested
To maintain job cards, work logs and job history	Performance of a service / legitimate interest
To operate ratings, reviews and referrals	Legitimate interest
To send service notifications (new quote, question, job update)	Performance of a service / legitimate interest
To investigate disputes, complaints, fraud, abuse and safety concerns	Legitimate interest / legal obligation
To improve and secure the Platform	Legitimate interest
To send marketing communications	Consent (opt-in)
To comply with applicable law	Legal obligation

6. Vehicle identity information — special care

Registration numbers, VINs, engine numbers and licence disc photographs can be misused for vehicle-related fraud. Because of this we apply additional safeguards:

These fields are optional. You can use AutoMedic fully without supplying a VIN, engine number or licence disc photograph.
They are visible only to you. They are not shown to Providers browsing requests, and are not included in the information released when you accept a quote.
Licence disc barcodes are read on your own device. The image is stored against your vehicle record; the barcode is not sent to any third-party recognition service.
You may delete a vehicle, and its photographs and identifiers, at any time.

7. Who we share your information with

We do not sell, rent or trade your personal information.

7.1 Between Customers and Providers

While a request is open: Providers within range see the service required, vehicle make/model/year, description, any photographs you attached, urgency, suburb, postcode and distance. They do not see your name, contact number or street address.
When you accept a quote: the accepted Provider receives your first name, surname, telephone number, street address and access notes. Other Providers who quoted receive nothing further.
Messages: each Provider sees only their own conversation with you. Providers cannot see other Providers' questions, quotes or prices.
Providers to Customers: business name, description, services, service mode, ratings, photographs of the mechanic/team and service vehicle, and — once you accept — their contact number.

7.2 Service providers and technology partners

Supabase — database, authentication, file storage and real-time messaging infrastructure (servers in the European Union).
Hostinger — web hosting for the Platform.
OpenStreetMap / Nominatim — converting a suburb or address you type into approximate coordinates. Only the text you enter is sent.
Email and messaging delivery services — sending account and service notifications.

These parties are contractually required to handle personal information in accordance with applicable data protection law and may not use it for their own purposes.

7.3 Legal and safety disclosures

We may disclose personal information where required by law, court order or a regulator, or where we reasonably believe disclosure is necessary to investigate fraud, prevent harm, or protect the rights, property or safety of AutoMedic, our users or the public.

7.4 Business transfers

If Khula Information Systems cc. is merged, sold, acquired or restructured, personal information may transfer to the successor entity. We will notify you before your information becomes subject to a different privacy policy, and you may request deletion.

8. Cookies and local storage

Type	Purpose
Essential	Keeping you signed in and maintaining session security
Local storage	Remembering your preferences, such as notification settings, on your own device
Offline cache	Storing the app's files on your device so it loads quickly and works with a poor connection

We do not use advertising, retargeting or cross-site tracking cookies. You can clear or block cookies and site data in your browser settings, but the Platform will not function properly without essential cookies.

9. Cross-border transfers

Our database, file storage and authentication are hosted by Supabase on infrastructure located in the European Union (London/Ireland region). Your personal information is therefore stored outside the Republic of South Africa. The European Union provides a level of data protection that is broadly comparable to POPIA, and our providers are subject to contractual safeguards consistent with POPIA's requirements for transborder flows.

By using the Platform you acknowledge that your information may be processed outside South Africa as described here.

10. How long we keep your information

Account and profile: for as long as your account is active, and a reasonable period thereafter.
Vehicles: until you delete the vehicle or your account.
Requests, quotes, job cards and messages: retained for up to five (5) years after a job is completed or cancelled, to resolve disputes, support warranty or workmanship claims, and meet record-keeping obligations. Deleted requests are hidden from all users immediately, but the underlying record is retained for this period.
Ratings and reviews: may remain visible on a Provider's profile after you delete your account, but in de-identified form.
Technical logs: generally 90 days.

You may request deletion at any time (see Section 12). Deleting your AutoMedic account does not delete any records a Provider keeps in their own business systems — you must contact them separately.

11. Security

We apply appropriate technical and organisational measures, including:

Encrypted (HTTPS) transmission and encryption of data at rest;
Row-level security in our database, so each user can only retrieve their own records — the restriction is enforced by the database itself, not only by the app;
Passwords stored only as salted one-way hashes;
Access controls limiting who within our organisation can access personal data;
Contractual security obligations on our service providers.

No system is completely secure. If a compromise materially affects you, we will notify you and the Information Regulator as POPIA requires.

12. Your rights under POPIA

Access — request a copy of the personal information we hold about you.
Correction — have inaccurate, incomplete or outdated information corrected. Most details can be edited yourself under Settings.
Deletion — request deletion of your personal information, subject to the retention periods in Section 10. You can delete your account in the app under Settings → About → Delete my account.
Objection — object to processing on grounds relating to your situation, or to direct marketing at any time.
Portability — where technically feasible, receive your information in a structured, commonly used format.
Complaint — lodge a complaint with the Information Regulator.

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: inforeg@justice.gov.za
Website: inforegulator.org.za

To exercise any right, contact privacy@automedic.co.za. We respond within a reasonable time as POPIA requires.

13. Direct marketing

We currently send only transactional messages — quote alerts, questions, job updates and account notices. Any marketing communications will be sent only if you have opted in, and every such message will carry a clear unsubscribe mechanism. You can change your preferences under Settings → Notifications or email privacy@automedic.co.za.

14. Children

The Platform is not directed at children and is intended for users aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact privacy@automedic.co.za and we will delete it promptly.

15. Links to third-party sites

The Platform may link to third-party websites, including mapping services and Provider websites. This policy applies only to AutoMedic. We are not responsible for the privacy practices of any third party.

16. Changes to this policy

We may update this policy from time to time. The revised version will be posted here with a new "Last updated" date. Where changes are material we will notify you by email or a prominent notice in the app. Continued use after changes constitutes acceptance.

17. Contact us

Information Officer — Khula Information Systems cc.
Trading as AutoMedic
Address: 1 Nirvana Drive, Lenasia, South Africa
Email: privacy@automedic.co.za
Website: automedic.co.za

This Privacy Policy was last updated on 19 July 2026.

Terms & Conditions · Back to AutoMedic