Privacy Policy

1. Overview

Palmarius Technologies (Pty) Ltd ("Palmarius", "we", "us", "our") operates Libevyn (the "Service"), including https://libevyn.com and /coming-soon. We respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and your rights. It is written primarily for compliance with the Protection of Personal Information Act, 2013 (POPIA) in South Africa. If you access the Service from another country, additional laws may apply to you; we describe international considerations in section 12.

By using the Service, you acknowledge this policy. If you do not agree, please do not use the Service.

2. Responsible party and Information Officer

For POPIA purposes, the responsible party is:

Palmarius Technologies (Pty) Ltd
Cape Town, South Africa

Privacy enquiries and requests to exercise your rights: hello@libevyn.com (subject line: "Privacy request").

Support matters (including billing): support@libevyn.com.

3. What we collect

3.1 Account and identity information

• Email address and name (when you register or update your profile)
• Authentication data (for example one-time sign-in codes, session tokens, and sign-in provider identifiers if you use Google sign-in)
• Account preferences and settings

3.2 Financial and planning data you enter

The Service is designed for you to enter your own financial information manually. This may include account names and types, balances, contributions, property values, mortgage details, tax profile inputs, snapshots, and notes you add. This data can be sensitive. We treat it as personal information and protect it accordingly.

3.3 Subscription and billing information

• Subscription plan, trial dates, billing status, and payment history
• Masked payment card details (last four digits, card brand, expiry) and a payment token from our payment processor — we do not store your full card number or CVV
• Invoices and receipts

3.4 Technical and usage information

• Device and browser type, operating system, and general location derived from IP address (country/region level)
• Log data (for example access times, pages viewed, API requests, and error reports) for security, troubleshooting, and product improvement
• Analytics events about how you use features (for example onboarding steps completed), where enabled

3.5 Communications

If you contact us, we collect the content of your message and related metadata so we can respond and keep a record of support interactions.

4. What we do not collect

We do not ask for your bank login credentials. We do not scrape your accounts from third-party portals without your explicit action. We do not sell your personal information to data brokers.

5. How we use your information

We process personal information to:

• create and manage your account and authenticate you;
• provide, maintain, and improve the Service (including calculations and views you request);
• process subscriptions, payments, invoices, and billing support;
• send service-related messages (for example trial reminders, payment receipts, security alerts, and product updates);
• monitor, detect, and prevent fraud, abuse, and security incidents;
• comply with legal obligations and respond to lawful requests;
• analyse aggregated or de-identified usage to improve the product.

We do not use your financial data for advertising profiling. Marketing emails, if any, will be sent in line with applicable law and you may opt out of non-essential marketing.

6. Lawful basis for processing (POPIA)

Under POPIA, we rely on one or more of the following grounds, depending on the processing activity:

• Performance of a contract — to provide the Service you signed up for, including trials and paid subscriptions;
• Legitimate interests — to secure the Service, prevent abuse, improve features, and communicate about your account, balanced against your rights;
• Legal obligation — for tax, accounting, and regulatory record-keeping where required;
• Consent — where we ask for your consent (for example optional marketing or non-essential cookies, if introduced). You may withdraw consent at any time.

7. How we share information

We share personal information only as needed to operate the Service, including with:

• Infrastructure and hosting providers (for example cloud database and application hosting)
• Authentication providers (for example Amazon Cognito for sign-in)
• Payment processors (PayFast or successors) to process card payments and store payment tokens
• Email and notification providers to deliver account and billing messages
• Analytics providers (for example privacy-oriented website analytics on our marketing site)
• Professional advisers (lawyers, accountants) under confidentiality obligations
• Authorities when required by law or to protect rights, safety, and security

We require service providers to process data only on our instructions and to apply appropriate security measures. We do not authorise them to use your data for their own marketing.

If Palmarius is involved in a merger, acquisition, or asset sale, your information may transfer as part of that transaction, subject to this policy or equivalent protections.

8. International transfers

Palmarius is based in South Africa. Some of our service providers may process data in other countries (for example the United States or the European Union). Where personal information is transferred across borders, we take steps required by POPIA and, where applicable, ensure appropriate safeguards (such as contractual protections with providers).

As we expand the Service internationally, users outside South Africa may access the Service subject to this policy and any additional notices we provide for their region.

9. Security

We implement technical and organisational measures designed to protect personal information, including encryption in transit (HTTPS), access controls, tenant isolation between user accounts, and secure handling of payment data (card details remain with our payment processor).

No method of transmission or storage is completely secure. You are responsible for keeping your sign-in credentials confidential and using a secure device.

10. Retention

We keep personal information only for as long as necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

• Account and financial data — retained while your account is active and for a limited period after deletion to complete the deletion process and resolve disputes;
• Billing records and invoices — retained for the period required by tax and accounting law, even if you delete your account (personal details may be anonymised where possible);
• Security and server logs — retained for a shorter operational period unless needed for an investigation.

11. Your rights

Subject to POPIA and other applicable law, you may have the right to:

• access personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your account and personal data (see below);
• export your data in a portable format where the Service supports it;
• object to certain processing based on legitimate interests;
• withdraw consent where processing is based on consent;
• lodge a complaint with the Information Regulator (South Africa) or a supervisory authority in your country, where applicable.

To exercise these rights, email hello@libevyn.com with the subject "Privacy request". We may need to verify your identity before responding. We aim to respond within a reasonable time and no later than periods required by law.

Account and data deletion

You may delete your account from the app settings or by contacting us. Deletion disables access immediately and schedules removal of your profile and entered financial data, subject to legal retention requirements for billing records as described above.

12. International users

The Service is operated from South Africa. If you access it from the European Economic Area, United Kingdom, or other regions with comprehensive privacy laws, you may have additional rights (for example under the GDPR or UK GDPR). We will honour those rights to the extent they apply to our processing.

Where required, we will provide region-specific notices or obtain additional consents as we expand internationally.

13. Children

The Service is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

14. Cookies and similar technologies

The Libevyn app uses essential cookies or local storage for authentication and session management.

Our marketing website may use privacy-oriented analytics that do not require invasive tracking cookies for basic page-view measurement. If we introduce non-essential cookies or third-party marketing pixels, we will update this policy and, where required, ask for your consent.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from signing in.

15. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you (for example by email or in-app notice) and update the "Last updated" date. Continued use after the effective date means you accept the revised policy.

16. Contact

Palmarius Technologies (Pty) Ltd
Cape Town, South Africa
Privacy: hello@libevyn.com
Support: support@libevyn.com