POPIA Privacy Notice

Last updated: 13 November 2026 · Protection of Personal Information Act 4 of 2013 (POPIA)

1. Responsible party

PIL Digital Media (PIL Mobi) is the responsible party for personal information processed through the Public Incident Log. Information Officer: support@pilmobi.com.

2. What we collect

• Account details: email address, password (stored only in encrypted, hashed form), and optionally your name and phone number.
• Incident reports: the incident type, your message, photos and documents you upload, the date and time, and the location (GPS coordinates if you allow it, a point you pick on the map, or an address you type).
• Ratings and comments you give agencies.
• Agency users: the name, position, email and phone of the person who manages an agency account.
• Sponsors: business name, contact person, email, phone, website, address, VAT number and advert details.
• Technical information: a session cookie to keep you logged in, and your last-used area stored on your own device so that local adverts can be shown. We count how often each advert is shown and tapped, without linking this to you.

3. Special personal information

Some reports may reveal special personal information, for example about someone's health, an alleged crime, or abuse. We process this only because you choose to submit it and consent to it being sent to the responsible agency so that it can act. Please include only what the agency needs. You may withdraw consent for future processing at any time, but this does not undo reports already sent to an agency.

4. Why we use it

• To find the responsible agency for your location and incident, send your report to it, and let you call it directly.
• To email you confirmations and progress updates, and to let you track and rate your reports.
• To verify agencies and sponsors, run their accounts, and invoice sponsors.
• To produce statistics and reports on incidents, response times and agency performance, without personal details.
• To keep the service secure and to meet legal obligations.

We do not sell your personal information and we do not send you marketing unless you have opted in.

5. Who we share it with

• The agency you choose receives your report, including your name, email and phone number, so that it can respond and contact you. If an incident is relocated, the new agency receives it.
• Service providers who host our servers and send email for us, under confidentiality obligations.
• Map and address services: to turn your location into an address and show maps, your device sends the coordinates to OpenStreetMap (Nominatim) and loads map software from unpkg.com. These services are outside South Africa; POPIA section 72 allows this transfer because it is needed for the service you asked for, and you consent to it by using the location features. You can type your address instead.
• Authorities when the law requires it.

Sponsors never receive your personal information.

6. How long we keep it

We keep account information while your account is active. Incident reports are kept as long as needed for the purposes above - normally no longer than five years after the incident is closed - and are then deleted or anonymised for statistics.

7. Security

We use encrypted connections (HTTPS), hashed passwords, access controls for administrators, agencies and sponsors, and agency-specific API keys. Uploaded files are stored in a folder that cannot run scripts. If a security compromise affects your information, we will notify you and the Information Regulator as POPIA requires.

8. Your rights

You may ask us to confirm what personal information we hold about you, give you a copy, correct or delete it, or object to processing. Email support@pilmobi.com from your registered email address. You can update your name, phone and password yourself under Account.

If you are not satisfied, you may complain to the Information Regulator: inforegulator.org.za · POPIAComplaints@inforegulator.org.za · general enquiries enquiries@inforegulator.org.za · 010 023 5200.

9. Children

PIL is meant for adults. A person under 18 may only register with the consent of a parent or guardian.

10. Changes

We may update this notice. The date at the top shows the latest version.