StepApp (stepapp.co.za)
Last Updated: 17/02/2026
1. Introduction
StepApp (the “Platform”) is owned and managed by Jthoka and Brainergy Marketing Solutions (collectively referred to as “StepApp”, “we”, “us” or “our”).
We are committed to safeguarding personal information and ensuring that it is processed lawfully, fairly and transparently in accordance with the Protection of Personal Information Act (“POPIA”), the Electronic Communications and Transactions Act, and other applicable South African laws and regulations.
This Privacy Policy sets out how we collect, use, disclose, store and protect personal information obtained through the Platform.
2. Responsible Party
For purposes of POPIA, StepApp is the Responsible Party in respect of personal information processed through the Platform.
All privacy-related queries, requests or complaints may be directed to:
Email: info@stepapp.co.za
3. Scope of Application
This Privacy Policy applies to:
- Individuals who subscribe to receive updates from the Platform;
- Visitors to stepapp.co.za; and
- Any person who provides personal information to StepApp through the Platform.
4. Personal Information Collected
At present, StepApp collects limited personal information when an individual subscribes to receive updates. This information includes:
- Full name; and
- Email address.
We do not collect identity numbers, financial information, payment details or special personal information at this stage of operations.
5. Purpose of Processing
Personal information is collected and processed for the following lawful purposes:
- To provide subscribers with updates relating to funding opportunities, tenders, training programmes, and business development initiatives;
- To communicate platform-related announcements and relevant service information;
- To improve the relevance and quality of communications sent to subscribers.
Personal information will not be processed for purposes incompatible with those stated above without obtaining further consent or where otherwise permitted by law.
6. Lawful Basis for Processing
StepApp processes personal information on the basis of:
- The data subject’s consent, provided voluntarily at the point of subscription.
Subscribers may withdraw their consent at any time by contacting info@stepapp.co.za.
7. Disclosure and Sharing of Information
7.1 General Principle
StepApp does not sell personal information to third parties for marketing or any other purposes.
We will only share personal information in the following circumstances:
- Where the data subject has provided consent;
- Where disclosure is necessary to fulfil our obligations to the data subject;
- Where required by law or regulatory authority; or
- Where necessary to protect the legitimate interests of StepApp, its users, or third parties.
7.2 Categories of Recipients
Personal information may be disclosed to:
- Technology service providers and hosting partners who assist in operating and maintaining the Platform;
- Professional advisors, including auditors and legal advisors, where necessary;
- Regulatory authorities, law enforcement agencies or courts where legally required;
- Prospective or actual purchasers in the event of a merger, acquisition or restructuring of the business.
All third-party service providers are required, by contract or applicable law, to implement appropriate safeguards and to process personal information only in accordance with our instructions and applicable data protection legislation.
8. International Data Transfers
StepApp is based in the Republic of South Africa. Personal information may be stored on servers located within South Africa or, where operationally necessary, in other jurisdictions.
Where personal information is transferred outside South Africa, such transfer will occur in compliance with POPIA. We will ensure that the recipient is subject to laws, binding corporate rules, or contractual obligations that provide an adequate level of protection for the personal information.
9. Data Security
StepApp implements reasonable and appropriate technical and organisational measures to protect personal information against:
- Unauthorised access;
- Unlawful processing;
- Accidental loss, destruction or damage; and
- Unauthorised disclosure.
Access to personal information is restricted to authorised personnel and service providers who require such access for legitimate operational purposes.
In the event of a data breach that compromises personal information, we will act in accordance with the notification requirements prescribed under POPIA.
10. Data Retention
Personal information is retained:
- For as long as the individual remains subscribed to receive communications; or
- Until consent is withdrawn and deletion is requested.
We may retain limited information where required for compliance with legal obligations, dispute resolution, or enforcement of agreements.
11. Data Subject Rights
In accordance with the Protection of Personal Information Act, data subjects have the right to:
- Request access to their personal information;
- Request correction of inaccurate or incomplete information;
- Request deletion of their personal information, where appropriate;
- Object to the processing of their personal information;
- Withdraw consent at any time.
Requests to exercise these rights may be submitted to info@stepapp.co.za.
Data subjects also have the right to lodge a complaint with the:
Information Regulator South Africa
12. Third-Party Links
The Platform may contain links to third-party websites, mobile applications, services, advertisements, or content that are not owned, controlled, or operated by StepApp.
Such links are provided for informational and convenience purposes only.
StepApp:
- Does not control or monitor the content, security, functionality, or privacy practices of any third-party platform;
- Does not endorse or make any representations regarding the accuracy, reliability, or legality of third-party content;
- Is not responsible or liable for any loss, damage, claim, or liability arising from your access to, use of, or reliance on any third-party website or service.
When you click on a third-party link, you leave the StepApp Platform and become subject to the terms, conditions, and privacy policies of that third party. We strongly recommend that you review the applicable privacy notices and terms before submitting any personal information to such platforms.
Any interaction, transaction, or engagement you undertake with a third party is solely between you and that third party.
StepApp shall not be liable, whether directly or indirectly, for any loss or damage of any nature arising from or in connection with the use of third-party platforms, including but not limited to data breaches, service interruptions, financial loss, or reputational harm resulting from such third-party services.
13. Aggregated and Statistical Information
StepApp may compile and share aggregated, anonymised statistical information relating to platform usage and research insights. Such information:
- Does not constitute personal information;
- Cannot reasonably be linked to any identifiable individual; and
- Is used solely for analytical and strategic purposes.
14. Children’s Information
The Platform is intended for entrepreneurs, business owners and professionals. We do not knowingly collect personal information from individuals under the age of 18 without appropriate consent as required by law.
15. Amendments to this Policy
StepApp reserves the right to amend this Privacy Policy from time to time to reflect changes in legal requirements, operational practices or service offerings. Updated versions will be published on stepapp.co.za with a revised effective date.
Continued use of the Platform following such amendments constitutes acceptance of the revised policy.