Legal

Privacy Policy

How Motheo collects, uses, and protects the personal information of residents and venue admins who use the app.

Effective 6 Sep 2026

1. Introduction

Motheo (“Motheo”, “we”, “us”) operates a laundry booking and queueing platform for shared laundry rooms, accessible via our website and app at motheo-app.co.za (the “Service”). This policy explains what personal information we collect from residents and venue administrators who use the Service, why we collect it, and the choices and rights you have over it.

We process personal information under the Protection of Personal Information Act 4 of 2013 (“POPIA”). Where POPIA uses terms like “responsible party” and “operator”, this policy uses the more familiar “we” and “our service providers” — the legal meaning is the same.

2. Who we are

The responsible party for the personal information described in this policy is:

LEANO
Registration no. YYYY/NNNNNN/NN
Johannesburg, South Africa
andleanoai@gmail.com

We haven’t appointed a separate Information Officer at this stage; until we do, direct all POPIA requests to the contact above.

3. Information we collect

We only collect what the Service actually needs to run — there’s no advertising profile being built here. In practice, that’s:

Account information

Name
Shown to venue admins reviewing your access request, and on your bookings
Email address
Sign-in, one-time activation codes, and booking/queue notifications
WhatsApp number
Optional — lets you receive booking and turn notifications over WhatsApp instead of email
Password
Stored only as a salted cryptographic hash — we never see or store it in plain text

If you sign in with Google instead, we receive your name and email address from Google’s identity service, and never see your Google password.

Residency & venue information

Which laundry venue you belong to, or have asked to join, and whether a venue admin has approved that request. If you administer a venue, we also hold the machine pricing and floor layout you configure for it.

Booking & usage information

Which machine you booked or queued for, your position in that queue, and when a session started, ended, and how long it ran.

Payment information

Machine sessions are paid for through Paystack. We store the payment’s reference number, amount, and status (pending, confirmed, failed) — we do not receive or store your card number, expiry date, or CVV; Paystack handles those directly.

Communications

A log of the notifications we’ve sent you (activation codes, turn alerts, password resets) and your delivery preferences (email, WhatsApp, in-app) — kept so we can debug a notification that didn’t arrive, and so we honour your preferences.

Technical information

Standard web request data (IP address, browser type) generated by using the Service, and a sign-in token stored in your browser to keep you logged in — see §12.

4. How we use it

5. Our legal basis

We rely on one of the following under POPIA for each use above:

6. Who we share it with

We don’t sell personal information. We share it only with the parties needed to run the Service:

Paystack
Your payment details, to process machine session payments
Resend
Your email address, to deliver activation codes and notifications
Twilio
Your WhatsApp number, to deliver notifications you’ve opted into
Google
Nothing from us — only used if you choose “Continue with Google”
Railway
All of the above, as our hosting infrastructure
Your venue’s admin(s)
Your name, contact details, residency status, and booking/queue activity at that venue, so they can approve your access and manage the laundry room

Each of these processes information on our instructions, under a contract that requires them to protect it — we don’t hand data to anyone who isn’t listed here, except where the law requires it of us.

7. Cross-border transfers

Some of the providers above operate infrastructure outside South Africa, which means your information may be processed abroad. Where that happens, we only use providers who commit contractually to a level of protection consistent with POPIA’s requirements for cross-border transfers.

8. How long we keep it

We keep your account and booking history for as long as your account is active. If you close your account, we delete or anonymise your personal information within a reasonable period, except:

9. Keeping it secure

Passwords are never stored in plain text — only as a one-way cryptographic hash. All traffic between your device and our servers is encrypted (HTTPS). Sign-in sessions use short-lived, signed tokens rather than a persistent session on our servers. No system is unbreachable, but we design the Service with these safeguards deliberately, not as an afterthought.

10. Your rights

Under POPIA, you can ask us to:

To exercise any of these, contact us at andleanoai@gmail.com. If you’re not satisfied with our response, you have the right to complain to South Africa’s Information Regulator.

11. Children

The Service isn’t directed at children, and creating an account requires the ability to pay for a laundry session — we don’t knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we’ll remove it.

12. Cookies & local storage

We don’t use advertising or tracking cookies. The Service stores one thing in your browser’s local storage: a sign-in token, so you don’t have to log in on every visit. It’s readable only by the Service and is cleared when you sign out.

13. Changes to this policy

If we make a material change to how we handle your personal information, we’ll update the date at the top of this page and, where the change is significant, notify you directly through the Service.

14. Contact & complaints

Questions, requests, or complaints about this policy go to andleanoai@gmail.com. We’ll acknowledge your request within a reasonable time.

Also read our Terms of Service.