Privacy Policy

Name, surname, date of birth, gender, and contact details (email, phone number).

South African ID number or passport number (as needed for identity and eligibility checks).

Employment status, education level, and skills (used for economic-participation and level matching).

Grant, loan, or employment-eligibility-related information (e.g., SASSA data where shared under your consent, YES, Harambee-related programme data).

Income level, household size, and basic socio-economic indicators used to map opportunities across levels (survival, security, belonging, esteem, self-actualisation).

Device type, operating system, app version, and IP address or approximated location (anonymised or aggregated where possible).

Usage patterns, feature interactions, and diagnostics for improving the app and fighting fraud.

Precise or approximate location when you enable location services, used to match you to local economic opportunities, municipal services, and community programmes, and to provide location-based notifications and mapping features.

You may withdraw consent for location tracking at any time via your device settings or in-app preferences.

We use cookies and similar technologies to track app and website usage, preferences, and performance.

We do not log your raw IP address for analytics; it is anonymised where required by local law.

To provide and maintain the magiclive.one app and website.

To enable access to economic-participation opportunities (grants, loans, employment, training, and community programmes).

To determine your eligibility for programmes via eligibility wizards (informational and facilitative, not advisory).

To match you with opportunities aligned with level needs (from basic survival to self-actualisation).

To send service-related notifications, updates, and marketing where consented.

To respond to inquiries, support tickets, and complaints.

To monitor app performance, user behaviour, and feature usage.

To improve security, detect and prevent fraud or abuse.

To meet our obligations under POPIA, GDPR, NDPR, CCPA, and other applicable laws.

To comply with court orders, regulatory requests, and government-related reporting requirements (e.g., B-BBEE, Seda/SEFA, DTIC, IDC partnerships).

To share anonymised or aggregated data with municipal, government, and partner organisations to support programme delivery, subject to strict data-processing agreements.

With government and quasi-government entities (e.g., Seda, SEFA, Harambee, YES, SASSA-linked programmes) where you have consented and where we have a Data Processing Agreement (DPA) in place.

With partners, we share only the minimum data required for eligibility checks, programme verification, and analytics and reporting.

Partners must comply with their own privacy and data-protection obligations; they are contractually liable for programme-related misrepresentation.

With third-party service providers (e.g., cloud hosting, analytics, customer-support platforms, payment facilitators) who process data only on our instructions and are contractually bound to protect your data.

AWS (Cape Town/Johannesburg, with EU and US data centres as applicable for cross-border compliance).

Payment gateways (e.g., Yoco, Payfast) that handle payment information directly; we do not store full payment details.

Where required by law, court order, or a legitimate regulatory request, we may disclose data to courts, law-enforcement, regulators, or tax authorities. Such disclosures are made only where strictly necessary and proportionate.

We do not share your personal information with other magiclive.one users unless you explicitly participate in a public feature (e.g., community forums) where you choose to disclose personal details; in such cases, you assume responsibility for that disclosure.

Primary residency: South African users' data is stored primarily in AWS af-south-1 (Cape Town/Johannesburg), as required by local data-sovereignty expectations.

EU and UK data: For users in the EU/UK, we route data to AWS eu-west-1 (or similar EU-located region) and apply GDPR-compliant safeguards.

US data: For US-based users, data may be stored in AWS us-east-1 or other US-based regions, in line with sector-specific rules.

Standard Contractual Clauses (SCCs) approved by relevant regulators.

Binding corporate rules where applicable.

Encryption and pseudonymisation to minimise identifiability.

Access your personal information.

Request correction of inaccurate or incomplete data.

Request deletion of your data where processing is unlawful or no longer necessary (subject to retention obligations).

Lodge a complaint with the Information Regulator (South Africa).

Object to processing for legitimate-interest purposes.

Receive your data in a structured, commonly used, machine-readable format (data portability).

Restrict processing under certain circumstances.

Opt-out of the sale or sharing of your personal information (we do not sell your data).

Request disclosure of what categories of data we collect and share.

Request deletion of your data (subject to legal and security exceptions).

Emailing our Information Officer at privacy@magiclive.one with “DATA SUBJECT REQUEST” in the subject line.

Using the in-app privacy settings where available (e.g., account deletion, consent toggles).