Privacy Policy

1. Who We Are

Oceansix My Aqua ("My Aqua" or the "App") is operated by Oceansix Labs (Pty) Ltd ("Oceansix", "we", "us", or "our"), a company registered in the Republic of South Africa. We are the responsible party for the personal information we process through the App, as contemplated by the Protection of Personal Information Act 4 of 2013 ("POPIA").

If you have any questions about this Privacy Policy or our data practices, please contact us at hello@oceansix.co.za.

2. Information We Collect

We collect the following categories of personal information when you use My Aqua:

2.1 Information you provide during registration

• Display name — the name shown on your profile within the App
• Email address — used for account verification, sign-in, and essential communications
• Country — your country of residence
• Password — stored only in securely hashed form; we never store or have access to your plaintext password

2.2 Information generated through your use of the App

• User content — data you enter and manage within My Aqua
• Consent records — your acceptance of the Terms of Use and your marketing-consent preference
• Authentication events — sign-in attempts, password resets, and email-verification activity

2.3 Technical and operational data

• Device and platform information — Android version, app version, and general device type
• Log data — server-side logs generated when you interact with the App, which may include timestamps, request identifiers, and error details

3. How We Collect Information

We collect personal information in the following ways:

• Directly from you — when you register, update your profile, change your email address, or contact support.
• Automatically — when you use the App, our servers record technical and operational data necessary to provide and secure the service.

4. Why We Use Your Information

We process your personal information for the following purposes:

• Providing the service — creating and managing your account, authenticating your identity, and delivering the core functionality of My Aqua.
• Communication — sending transactional emails such as email-verification messages, password-reset instructions, and important service notices.
• Security — detecting, preventing, and responding to fraud, abuse, security incidents, and technical issues.
• Legal compliance — meeting our obligations under applicable law, including POPIA.
• Service improvement — analysing aggregated, non-identifying usage patterns to improve the reliability and quality of the App.
• Marketing — sending promotional communications, but only where you have provided separate, explicit consent (see section 6).

5. Legal Basis for Processing

Under POPIA and general data-protection principles, we rely on the following grounds:

• Contract — processing that is necessary to provide the service you have registered for and agreed to via the Terms of Use.
• Consent — where you have given specific, voluntary consent, such as opting in to marketing communications.
• Legitimate interest — processing that is necessary for the security and proper operation of the App, provided it does not unreasonably affect your rights.
• Legal obligation — processing required to comply with applicable South African law.

6. Communications and Marketing

Transactional emails — We send essential service emails (such as email confirmations and password resets) from noreply@oceansix.co.za. These messages are necessary for the operation of your account and are not marketing.

Marketing communications — During registration you are given the option to consent to marketing communications. This consent is entirely optional, is recorded separately from your acceptance of the Terms of Use, and can be withdrawn at any time by contacting us at hello@oceansix.co.za.

7. Service Providers

We may engage trusted third-party service providers to assist us in operating the App, including hosting infrastructure, email delivery, and error monitoring. These providers process personal information only on our behalf, in accordance with our instructions, and are contractually required to maintain appropriate security measures and confidentiality.

We do not sell your personal information to any third party.

8. Security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include encryption of data in transit, secure password hashing, and access controls on our systems.

While we take the security of your information seriously, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security but are committed to responding promptly to any suspected breach in accordance with POPIA.

9. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes described in this policy, or as required by law. For detailed information about our retention periods, please see our Data Retention Policy.

When personal information is no longer required, it is securely deleted or anonymised.

10. Account Deletion

You may delete your account at any time through the App. When you delete your account, your profile data and user content are permanently removed, subject to any retention obligations described in our Data Retention Policy and applicable law.

11. Your Rights

Under POPIA, you have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate or incomplete personal information;
• Request deletion of your personal information, subject to legal retention requirements;
• Object to the processing of your personal information on reasonable grounds;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, please contact us at hello@oceansix.co.za. We will respond to your request within a reasonable time and in accordance with POPIA.

12. Children

My Aqua is intended for users who are eighteen (18) years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will take steps to delete their account and associated information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users via email and update the effective date at the top of this page. Your continued use of My Aqua after such changes constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us at:

Oceansix Labs (Pty) Ltd
Email: hello@oceansix.co.za