Revved Privacy Policy

Effective date: 28 August 2026
Version 1.0

1. Who We Are

Revved is operated by Revved (Pty) Ltd, a private company incorporated in the Republic of South Africa.

In this Policy, “Revved”, “we”, “us” and “our” mean Revved (Pty) Ltd. “you” and “your” mean the person using the Revved mobile application or website (together, the “App” or “Service”).

For the purposes of the Protection of Personal Information Act 4 of 2013 (“POPIA”), Revved (Pty) Ltd is the responsible party for the personal information described in this Policy.

2. Information Officer

In terms of sections 55 and 56 of POPIA, our designated Information Officer is:

HW Swanepoel
Information Officer, Revved (Pty) Ltd
Email: support@joinrevved.co.za
Postal address: 797 Hoewe Road, Rietvalleirand, Pretoria, Gauteng, 0181

Our Information Officer is designated in terms of sections 55 and 56 of POPIA and is responsible for encouraging compliance with POPIA, dealing with requests made to us under POPIA and the Promotion of Access to Information Act 2 of 2000 (“PAIA”), and working with the Information Regulator in relation to investigations.

3. Scope of This Policy

This Policy explains how we collect, use, share, transfer, store, and protect your personal information when you use Revved — our vehicle garage, community, and rewards application for car and motorcycle enthusiasts.

Revved is offered in the Republic of South Africa. We process personal information in accordance with POPIA and the eight conditions for lawful processing set out in Chapter 3 of that Act.

This Policy should be read together with our Terms and Conditions, our Community Guidelines, and our Child Safety Standards.

4. Age Restriction

Revved is available only to persons aged 18 years or older.

Under section 1 of POPIA, a “child” is a person under 18 years of age, and section 34 prohibits the processing of a child’s personal information except in the limited circumstances set out in section 35. Because Revved is a social platform involving photographs, location data, direct contact between members, and physical meet-ups, we have chosen not to process children’s personal information at all.

If we become aware that we hold personal information relating to a person under 18, we will delete that information and close the account. If you believe a person under 18 is using Revved, please contact support@joinrevved.co.za.

5. Personal Information We Collect

5.1 Account information

• Email address (required, used for authentication)

• Display name and username

• Profile picture (optional)

• Mobile number (optional, used for verification and account recovery)

• Home city and province (optional — powers local recommendations and cosmetic city trophies)

• Date of birth or age confirmation (used solely to verify that you are 18 or older)

• Account creation date and last login timestamps

5.2 Garage and vehicle information

• Vehicle make, model, generation, type, powertrain, and build tags you add to your Garage

• Photographs of your vehicles

• Modification logs you choose to record

• Province of registration, if you choose to add it, for provincial trophies

We do not collect or store vehicle registration (licence plate) numbers or vehicle identification numbers (VINs).

5.3 RevTag and RevCard data

• A unique RevTag code associated with each vehicle you register

• Scan events: which RevTag was scanned, by which account, and when

• Referral data where a new member joins by scanning your RevTag

• Approximate location at the time of a scan, where you have enabled location services, used to support location-based trophies and to verify event check-ins

5.4 REVS, Levels, and Trophies

• Your REVS ledger - a record of the actions that earned or deducted REVS

• Your current Level and Level history

• Trophies unlocked and the date of unlocking

• Records relating to investigations of reward farming or manipulation

5.5 Location information

Where you grant permission, we collect approximate or precise device location to support event discovery, event check-in, and location-based trophies. You may enable or disable location access at any time in your device settings. Some features will not function without it. We do not track your location in the background.

5.6 Community and social data

• Follow relationships

• Likes, Respect, and comments

• Community and garage memberships

• Posts, photographs, and captions you share

• Direct messages, processed only to deliver the messaging feature

• Reports you submit about other members or content, and reports submitted about you

5.7 Events data

• Events you create, host, or indicate you will attend

• Event location, date, and description supplied by you as an organiser

5.8 Photographs and camera

• Photographs taken within the App for your profile, vehicles, or posts

• Images you select from your device photo library

• Technical metadata contained in image files

We access your camera or photo library only when you choose to use those features. Photographs taken on a mobile device can contain embedded metadata, including the location where the photograph was taken. We take steps to limit the metadata that is visible to other members, and we recommend that you check your device camera settings if you would prefer location data not to be recorded at all.

5.9 Push notifications

• Device push notification tokens

• Your notification preferences

5.10 Device and technical data

• Device model, operating system version, and App version

• IP address

• Crash reports and diagnostic logs

• Product analytics covering in-app interactions, screens viewed, and feature usage, linked to your account identifier

5.11 Purchase and subscription information

Where you purchase a RevTag, a paid membership, or any other product or service from us:

• Order, delivery, and subscription records

• Transaction identifiers and status

Payment card details are processed directly by our payment provider or by Apple or Google, depending on where the purchase is made. We never receive or store your full card details.

5.12 Support correspondence

Correspondence you send to us, including support and safety enquiries, and our responses.

6. How We Collect Personal Information

We collect personal information:

• Directly from you, when you create an account, complete your profile, add vehicles, post content, or contact us

• Automatically, through your use of the App, including device and analytics data

• From other members, where they scan your RevTag, mention you, or submit a report about you

• From service providers, such as Apple or Google confirming a purchase, or our email provider reporting a delivery failure

7. Why We Process Your Personal Information

8. Lawful Basis for Processing

Section 11 of POPIA requires a lawful justification for each processing activity. We rely on the following:

• Consent — for optional features including location services, camera and photo library access, and electronic direct marketing. You may withdraw consent at any time, as described in section 14.

• Necessary to conclude or perform a contract with you — to operate your account, Garage, REVS, Levels, and Trophies, and to fulfil orders.

• Compliance with a legal obligation — where we are required to retain, disclose, or report information.

• Legitimate interests — of ourselves, you, or a third party, including platform safety, fraud and abuse prevention, network security, and service improvement. We balance these interests against your rights and freedoms.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

9. Sharing Your Personal Information

We do not sell your personal information.

We share personal information in the following circumstances:

• With other members, to the extent you choose to share it. Your profile, Garage, posts, Trophies, and Level are visible to other members in accordance with your privacy settings.

• With operators who process personal information on our behalf under written contract, as required by section 21 of POPIA. These operators are listed in section 10.

• With Apple and Google, where you make a purchase through their platforms.

• For legal reasons, where required by law, court order, or lawful request from the Information Regulator, the South African Police Service, or another competent authority.

• For safety and security, to investigate fraud or abuse, protect our rights, or protect the safety of any person.

• In a business transfer, if Revved is involved in a merger, acquisition, or sale of assets, subject to equivalent protections and notice to you.

10. Service Providers and Where Your Information Is Processed

We use the following operators. Each is bound by contract to process personal information only on our documented instructions and to maintain appropriate security safeguards, as required by sections 20 and 21 of POPIA.

We keep this list current. A material change to our service providers will be reflected in an updated version of this Policy. You may request the identity of the provider used for a particular purpose by writing to support@joinrevved.co.za.

11. Cross-Border Transfers of Personal Information

Our core application data and account emails are processed in South Africa, in the AWS Africa (Cape Town) region.

Some of our operators process personal information outside South Africa, as set out in section 10. Section 72 of POPIA permits such transfers only in defined circumstances. We rely on:

• Section 72(1)(a) — the recipient is subject to a binding agreement that provides an adequate level of protection, containing conditions substantially similar to those in POPIA and restrictions on onward transfer; and

• Section 72(1)(b) — your consent, where applicable; and

• Section 72(1)(c) — where the transfer is necessary for the performance of our contract with you.

You may request further information about the safeguards applying to a particular transfer by writing to support@joinrevved.co.za.

12. Retention of Personal Information

We retain personal information only for as long as necessary to achieve the purpose for which it was collected, or for as long as required or authorised by law, in accordance with section 14 of POPIA.

You may delete individual vehicles, posts, or your entire account at any time from within the App.

13. Security of Personal Information

In accordance with section 19 of POPIA, we maintain appropriate, reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised destruction, and unlawful access. Depending on the system concerned, these measures may include encryption of data in transit and at rest, restricted and role-based administrative access, agreements with our service providers governing their handling of personal information, regular backups, and monitoring of administrative activity.

We review these measures periodically and update them as the Service grows.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Security compromise. If personal information under our control is accessed or acquired by an unauthorised person, we will notify the Information Regulator and every affected person as soon as reasonably possible after discovering the compromise, as required by section 22 of POPIA, unless a public body or the Regulator directs us to delay in order to protect a criminal investigation.

14. Your Rights

Under POPIA you have the right to:

• Be notified that your personal information is being collected, and that it has been accessed by an unauthorised person

• Access — request confirmation of whether we hold personal information about you, and a record or description of it (section 23)

• Correction or deletion — request that we correct or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully (section 24)

• Object — object, on reasonable grounds, to processing based on legitimate interests or the protection of a legitimate interest (section 11(3))

• Object to direct marketing — at any time and free of charge (sections 11(3) and 69)

• Not be subject to a decision based solely on automated processing that has legal or substantially similar consequences for you (section 71)

• Complain — to the Information Regulator, and to institute civil proceedings

You can exercise most of these rights directly in the App under Settings, or by writing to support@joinrevved.co.za. We will respond within 30 days. Where a request is made under PAIA, prescribed forms and fees may apply, as described in our PAIA Manual.

We may ask you to verify your identity before acting on a request, to prevent unauthorised disclosure.

15. Direct Marketing

In accordance with section 69 of POPIA, we will send you electronic direct marketing only where:

• you have given your consent; or

• you are an existing customer, we obtained your contact details in the course of a sale, the marketing relates to similar products or services, and you were given a reasonable opportunity to object at the time of collection and in every subsequent message.

Every marketing message includes an unsubscribe mechanism. Opting out of marketing does not stop essential service messages such as verification codes, security alerts, and account notices.

16. Automated Decision-Making

REVS awards, Level progression, and Trophy unlocks are calculated automatically according to published rules. These do not have legal consequences for you.

Where automated systems flag an account for suspected reward farming or abuse, a person reviews the case before any suspension or permanent ban is applied, and you may appeal the outcome as described in our Community Guidelines.

17. Device Permissions

Each permission may be granted or revoked at any time in your device settings.

18. Cookies and Similar Technologies

Our website at joinrevved.co.za uses strictly necessary cookies for security and session management, and, with your consent, analytics cookies to understand how the site is used. You can manage your preferences through the cookie banner or your browser settings. The mobile App does not use cookies but does use device identifiers for the purposes described in section 5.10 of this Policy.

19. Access to Information (PAIA)

Our PAIA Manual, prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000, is available free of charge at https://joinrevved.co.za/paia or on request from our Information Officer.

20. Complaints

If you are not satisfied with how we have handled your personal information, please contact our Information Officer first at support@joinrevved.co.za so that we can try to resolve it.

You also have the right to complain directly to:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
P.O. Box 31533, Braamfontein, Johannesburg, 2017
General enquiries: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za
Website: https://inforegulator.org.za

21. Changes to This Policy

We may update this Policy from time to time. Where a change is material, we will notify you in the App or by email before it takes effect, update the version number and effective date, and where the law requires it, obtain your fresh consent. Continued use of Revved after a change takes effect constitutes acceptance of the updated Policy.

22. Contact Us

Revved (Pty) Ltd
Email: support@joinrevved.co.za
Telephone: +27 65 082 2910
Postal address: 797 Hoewe Road, Rietvalleirand, Pretoria, Gauteng, 0181

We respond to privacy enquiries within 30 days.