1. Who we are

Quanta Errandly is operated under the QuantaBridge brand (quantabridge.uk). QuantaBridge is not yet a formally registered legal entity and currently operates as an independent business initiative undergoing formal business registration and incorporation.

For privacy matters, the QuantaBridge Team acts as the responsible party for personal information processed through the platform. Contact: legal@quantabridge.uk.

Quanta Errandly operates in accordance with applicable data protection and privacy regulations, including South Africa's Protection of Personal Information Act 4 of 2013 (POPIA).

2. Information we collect

Account and profile information: Name, email address, phone number, password (if set), profile photo, display name, student/campus status, building or address, vehicle information, availability schedule, and linked social login identifiers (if you use Google Sign-In).

Seller payment profile: If you sell on the marketplace, we store PayShap phone numbers, bank names, account numbers, minimum-order thresholds, and surcharge settings you configure for display to buyers at checkout.

Verification data: Phone and email verification status. If you submit identity verification, we store verification status, review timestamps, and related submission metadata.

Location data: Precise coordinates when you set a profile address, post an errand, create a listing, set a shop address, place an order with a delivery location, share a location in chat, or allow the app to read your device location. We also derive geohash buckets and proximity labels.

Content you create: Errand descriptions, listing titles and descriptions, photos, shop logos, chat messages (text and images), ratings, reports, and dispute notes.

Usage and technical data: Authentication tokens, API request logs, IP addresses, timestamps, and error diagnostics for security and reliability.

Referral data: Referral codes used, referrer relationships, and qualification status.

3. Lawful basis and purposes

We process personal information for the following purposes and on the following bases under POPIA:

Contract and service delivery — to create your account, match errands, display listings, process orders, enable chat, and operate features you request.

Legitimate interests — to secure the platform, prevent fraud and abuse, improve reliability, calculate trust scores, enforce our terms, and protect users — balanced against your rights.

Consent — where you opt in to optional features (such as browser geolocation permission or Google Sign-In) or where consent is otherwise required by law.

Legal obligation — to comply with court orders, law-enforcement requests, tax or regulatory requirements, and to respond to the Information Regulator where applicable.

We do not sell your personal information. We do not use your data for third-party advertising profiling.

4. How We Use Your Location

Location is central to Quanta Errandly, and we deliberately limit how precisely your location is shown to others.

Browse and list views: Other users do not see your exact coordinates on browse cards. Listings and open errands show a fuzzed location — coordinates rounded to roughly a 500-metre grid — plus a proximity label such as "500 m away," "Same building," "Same campus," "Same neighborhood," or a distance in kilometres.

Errand pickup and delivery addresses: Exact coordinates are hidden until you have a qualifying relationship. If you are not logged in, or you have not been accepted as the tasker, you see fuzzed coordinates only. The poster, accepted tasker, or a joined helper sees exact coordinates.

Shop addresses: Browse cards show proximity labels only. Exact shop addresses are hidden unless the shop is marked public, you are the owner, or you are a buyer with an order that has reached "out for delivery" or "delivered."

Guest and live GPS: With browser permission, a one-time or cached device location (up to about 90 seconds in local storage) may be sent to our servers as query parameters for distance calculation — not published as your home address.

Live navigation: Continuous location updates are used only on the live errand or delivery map screen while that screen is open — not as background tracking.

Geocoding and routing: Address text and coordinates may be sent to third-party services listed in Section 6.

5. Seller payment and financial details

If you configure a seller payment profile, your PayShap number, bank details, or related payment instructions are stored so they can be shown to buyers who place orders with you. Buyers with a qualifying order relationship may see these details at checkout.

We do not process or settle payments on your behalf. We treat payment profile data as personal/commercial information you choose to publish to facilitate off-platform payment. You can update or remove payment profile fields through your account settings.

Do not upload payment details that you are not authorised to share. Quanta Errandly is not responsible for misuse of payment details shared between users off-platform.

6. Sub-processors and third parties

We use named service providers. They process data only as needed for their function:

Twilio (United States) — SMS one-time passwords to your phone number.

Google (United States) — Google Sign-In token verification; Google Places API for address autocomplete (Johannesburg/South Africa bias when enabled).

Resend (United States) — transactional email from our quantabridge.uk domain.

OpenStreetMap Nominatim via nominatim.openstreetmap.org (European Union / community-operated) — forward and reverse geocoding; receives address text or coordinates.

OSRM via router.project-osrm.org (community-operated) — driving route and ETA calculations from origin/destination coordinates.

Computer vision moderation service (infrastructure we operate or host) — image URLs from errands, listings, and chat for automated NSFW/abuse classification. Chat text is not sent.

Cloud infrastructure — application data stored in PostgreSQL (with PostGIS), Redis, and S3-compatible object storage on hosting infrastructure selected for production deployment.

Frontend map display — Leaflet and OpenStreetMap tile data may be loaded in your browser when you view maps; your browser may contact map tile servers directly.

Each provider is subject to its own terms and privacy policy. Where data leaves South Africa, we take reasonable steps required by POPIA for cross-border transfers.

7. Automated processing and profiling

Quanta Errandly uses automated systems that may affect your experience:

Image moderation — uploaded photos are scored by a computer-vision service. Images may be approved, flagged for human review, or rejected before other users see them.

Trust scores and badges — calculated from ratings, completed jobs, disputes, and related activity. These are informational, not legal determinations.

Strike flagging — three cancellation or no-show strikes within 30 days may automatically flag your profile for staff review.

You may contact legal@quantabridge.uk to question automated decisions that significantly affect you. Human moderators review flagged content, reports, disputes, and profile flags.

8. What we share with other users

Other users may see information you publish: display name, profile photo, listings, errand posts (with fuzzed locations until a qualifying relationship exists), ratings, trust badges, and — where applicable — your phone number on marketplace listings or shops with public contact enabled.

Chat participants in an assigned errand or marketplace order can see messages and images you send in that thread.

We do not share your exact home or delivery address with the general public through browse feeds.

9. Cookies and local storage

Quanta Errandly's web app does not use advertising or third-party tracking cookies. Your browser's local storage holds:

• Authentication tokens (access and refresh) so you stay logged in. • Your marketplace shopping cart until checkout or clear. • A short-lived cache of your last device location (up to about 90 seconds). • A draft shop creation form while setting up a shop.

You can clear local storage through browser settings. Clearing auth tokens logs you out.

10. Data retention

We retain personal information only as long as necessary for the purposes described in this policy:

Active account data — while your account is active and for a reasonable period after closure to handle disputes, legal claims, and fraud prevention (typically up to 3 years after last activity unless a longer period is required by law).

Chat messages and order/errand records — for the life of the account plus up to 3 years after closure, or longer if needed for an open dispute, report, or legal hold.

Reports and disputes — for up to 5 years after resolution, or longer if required by law.

Server and security logs — typically up to 12 months, unless needed for incident investigation.

Geocoding cache — up to 30 days on our servers.

Referral ledger entries — for as long as needed to administer the referral program and tax/audit obligations.

You may request earlier deletion where POPIA allows. Some data must be retained where law requires or where we have a legitimate need to defend legal claims.

11. Security and data breaches

We use measures including HTTPS in production, access controls, authentication tokens, and server-side enforcement of location privacy rules. No system is perfectly secure.

If we become aware of a personal-information breach that is likely to result in harm and POPIA requires notification, we will notify the Information Regulator and affected users as soon as reasonably possible, and in any event within the timeframes required by law.

12. Your rights under POPIA

Subject to POPIA and lawful exceptions, you may:

• Request access to personal information we hold about you. • Request correction of inaccurate information. • Request deletion where we no longer have a lawful reason to retain it. • Object to processing based on legitimate interests where POPIA allows. • Lodge a complaint with the Information Regulator.

Contact legal@quantabridge.uk with your request. We may verify your identity. We aim to respond within 30 days.

Information Regulator (South Africa): https://inforegulator.org.za

You can update much of your profile in the app. For account deletion, email legal@quantabridge.uk.

13. Direct marketing

We may send service-related messages (verification codes, order updates, security alerts) by SMS or email. We do not sell your contact details to third parties for their marketing.

If we introduce promotional emails or SMS in future, we will provide an opt-out and describe it in an updated policy.

14. Children's privacy

Quanta Errandly is not directed at children. We do not knowingly collect personal information from anyone below the minimum age described in our Terms & Conditions. There is no technical age gate in the app today. If you believe a child has provided us personal information, contact legal@quantabridge.uk and we will take appropriate steps.

15. Law enforcement and legal requests

We may disclose personal information where required by South African law, court order, or a lawful request from a competent authority, or where we reasonably believe disclosure is necessary to prevent harm, investigate fraud, or protect the rights and safety of users and the public.

We may notify you of such requests where legally permitted.

16. International transfers

Some sub-processors (including Twilio, Google, and Resend) may process data on servers outside South Africa, primarily in the United States. Public geocoding and routing instances may process data in other jurisdictions.

Where POPIA requires safeguards for cross-border processing, we rely on appropriate contractual protections, provider commitments, and — where applicable — your consent through use of features that require those providers.

17. Changes to this policy

We may update this Privacy Policy from time to time. We will update the version number and "Last updated" date. Material changes may be communicated through the app or by email. Continued use after the effective date constitutes acceptance of the updated policy.

18. Contact us

Privacy questions, access requests, and deletion requests:

QuantaBridge Team legal@quantabridge.uk quantabridge.uk