Privacy Policy

1. Who we are

Tiki (tikiapp.co.za) is responsible for your personal information. Tiki is run by Caroline Brown, Cape Town, South Africa. For anything about your information, email hello@tikiapp.co.za.

2. What we collect

• Account details: your email address, password (stored scrambled, we can't see it), username and name.
• Profile details you choose to add: photo, bio, city, Instagram handle and the kinds of events you're into.
• What you post and do on Tiki: ticket listings (price, ticket type, notes), bids, offers, "looking for tickets" posts, events you're going to or interested in, who you follow, ratings, reports and feedback.
• Messages you send to and receive from other people on Tiki.
• Proof of purchase you choose to upload (for example a screenshot of your ticket order).
• Technical details: login cookies, and a random browser ID so we can count how many people viewed a listing.

We collect this directly from you. We don't buy information about you from anyone else.

3. Why we use it

• To create and run your account and log you in.
• To show your listings, profile and activity to other people, and to let you message each other.
• To email you about your account (confirming your email, resetting your password) and, if you leave it switched on, when someone messages you.
• To keep Tiki safe: checking listings and proof of purchase, spotting scams, handling reports and blocking people who break our rules.
• To improve Tiki, for example by reading feedback.

4. What you have to give us

Your email, a username and a password are needed to create an account; without them you can browse Tiki but can't buy, sell or message. Everything else is optional. No specific law requires us to collect this information; we collect it to provide Tiki to you.

5. Who can see it

• Everyone: your username, name, profile photo, bio, city, Instagram handle, listings, ratings, when you joined, and how many followers you have.
• People you message: the messages in that chat.
• Tiki admins: reports, proof-of-purchase uploads, listings waiting for approval, and messages when we need to investigate a report or scam.
• Our service providers, who store and process information for us and may only use it to provide their service: Supabase (database, logins and file storage), Vercel (website hosting) and Resend (sending emails).
• Authorities, if the law requires us to share it.

Your email address is never shown to other users. We don't sell your information.

6. Information stored outside South Africa

Our service providers' servers may be outside South Africa (for example in the United States or Europe). We use them because we need them to run Tiki for you, and they protect information with security measures such as encryption and access controls.

7. Automatic checks

Tiki automatically checks some things to keep people safe: listings with very high prices or offensive words wait for an admin before going live, and messages that mention bank details or moving the chat elsewhere show a warning. These checks only flag things for a person to look at or warn you; a person decides on bans.

8. How long we keep it

• Your account information, for as long as you have an account.
• Listings, messages and ratings, while your account exists, so deals and reports can be checked later.
• If we ban someone, we keep their email address on a blocked list so they can't sign up again.

If you ask us to delete your account, we delete or anonymise your information unless we need to keep some of it to deal with a report, a dispute or a legal requirement.

9. Keeping it safe

We use secure connections (HTTPS), scrambled passwords, access rules that limit who can see what, and private storage for proof-of-purchase uploads. No system is perfectly secure; if there is a breach that affects you, we'll let you and the Information Regulator know as POPIA requires.

10. Your rights

• Ask what information we have about you, and get a copy.
• Ask us to correct or delete it. You can edit most of it yourself in Edit profile.
• Object to us using it, and switch off message emails in Edit profile.
• Complain to the Information Regulator: inforegulator.org.za, enquiries@inforegulator.org.za, 0800 017 160.

To use these rights, email hello@tikiapp.co.za. We may ask you to confirm it's really you.

11. Age

Tiki is for people aged 18 and over. If we learn that someone under 18 has an account, we'll close it.

12. Changes

If we change this policy, we'll update the date at the top, and tell you on Tiki or by email if the change is important.