Privacy Policy
Last updated: 16 August 2026
This policy explains how personal information is handled in MyTripAdmin, in terms of the Protection of Personal Information Act (POPIA).
1. Who is responsible
MyTripAdmin is operated by Krialex Digital (Pty) Ltd (registration number 2026/648039/07). Our Information Officer can be reached at admin@krialex.co.za.
Two roles, honestly stated. For your account (your name, email, company details, subscription), Krialex is the responsible party. For the passengers and clients you capture in the app, your driving company is the responsible party and Krialex is your operator under POPIA sections 20–21: we process that information only to provide the service to you, on your instructions, keep it confidential and secure, and tell you if it is ever compromised.
2. What we collect, and why
- Account: your name, email address and password (stored only as a hash) — to sign you in and to reach you about your account.
- Company: company name, contact details, optional VAT number, logo, bank account details you choose to print on your own invoices — to build those invoices for you.
- Passengers and clients (as your operator): the names, phone numbers, emails and trip details you enter — to run your trip diary and invoices. We never use this information for our own purposes and never contact your clients.
- Payments: handled by PayFast. We never see or store card numbers — we keep the payment reference, amount and status PayFast sends us, and the invoices we issue you.
- Technical: if something breaks, our self-hosted error reporting records what happened along with which account it happened to, so we can help you. Our self-hosted analytics (Umami) is cookieless and measures pages, not people. We don't run third-party advertising or tracking.
3. Where it goes
We share personal information only with the service providers that make MyTripAdmin work: PayFast (payments) and our hosting and content-delivery infrastructure. Some infrastructure may store or process data outside South Africa; where that happens, POPIA section 72 applies and the recipient is bound by protections substantially similar to POPIA. We never sell personal information.
4. How long we keep it
- Account and business data: for as long as your account exists.
- Financial records (our invoices to you, payment events): at least 5 years, as South African tax law requires.
- Error reports: for a limited operational period, then deleted.
5. Deleting your account
You can delete your account yourself: Profile → App → Delete account. This first stops any active subscription at PayFast, then permanently erases your users, clients, passengers, trips, your invoices and their PDFs, bank accounts, vehicles and support requests.
What remains: the invoices Krialex issued to you and the related payment records, kept because tax law requires it (POPIA section 14 permits retention required by other law) — and nothing else. The live account record is reduced to an anonymous shell.
6. Your rights
- See and correct your information — most of it directly in the app, the rest by asking us.
- Request deletion (above), or object to processing: admin@krialex.co.za.
- Complain to the Information Regulator (South Africa): inforegulator.org.za.
7. Security
Traffic is encrypted in transit; passwords are stored only as salted hashes; each company's data is isolated from every other company's at the database layer; access to production systems is restricted and logged. If a breach ever affects your information, we will notify you and the Information Regulator as POPIA section 22 requires.
8. Changes
If this policy changes materially we'll say so in the app or by email. The date at the top always tells you when it last moved.