Privacy Policy
SimpleApps (PTY) LTD
Last updated: 28 July 2026
1. Introduction
SimpleApps (PTY) LTD ("SimpleApps", "we", "our", "us") operates SimpleApps Studio, a forms-building and signature-capture platform at studio.simpleapps.co.za. This Privacy Policy explains how we collect, process, store and protect personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). By creating an account or using SimpleApps Studio, you acknowledge that you have read and understood this policy.
2. Our role under POPIA
For your SimpleApps Studio account (organiser sign-up, login, billing), SimpleApps is the Responsible Party. For the personal information respondents submit through the forms you build (names, signatures, contact details, answers), your organisation is the Responsible Party and SimpleApps acts only as an Operator processing that data on your instruction. If you are a respondent with a question about a specific form's data, please contact the organisation that sent you the form.
3. Information we collect
Account information (organisers):
- Name and email address (provided directly, or via Google Sign-In)
- A securely hashed password (if you sign up with email/password — we never store your actual password)
- Your organisation's branding (logo, cover photo, brand colour, contact details)
- Your subscription/plan status and billing history
Form and response data (processed on your organisation's behalf):
- The forms you build and their content
- Respondent answers, drawn signatures, and consent status
- Technical metadata captured at submission: IP address, user agent, screen size, and (where provided) geolocation
Technical data, collected automatically: IP address, browser/device type, and basic usage logs, used for security and troubleshooting.
4. How we use your information
- To create and secure your account, and keep you signed in (session management)
- To operate the forms platform — building, publishing, storing and serving your forms and their responses
- To generate branded PDF exports of responses on your request
- To send transactional email (welcome, password reset, new-response notifications)
- To respond to support requests sent via the contact form or email
- To maintain security, prevent abuse, and troubleshoot technical issues
- To comply with South African law where required
5. How we store and protect information
Data is stored in an encrypted Postgres database on servers we control, protected by password hashing, role-based access control, firewalls and regular backups. Signature images and uploaded branding assets are stored on our infrastructure and served only via authenticated or capability-limited links.
We do not sell your data, and we do not share it with third parties for marketing or advertising purposes.
6. When we share information
We only share personal information with:
- Google, when you choose to sign in with Google (for authentication only)
- Paystack, to process subscription payments
- Our cloud hosting and email infrastructure providers, solely to operate the service
- Law enforcement or regulators, only where required by law
7. Data retention
We retain your account, form and response data for as long as your account is active. If you ask us to delete your account, we will permanently remove your personal information within a reasonable period, except where we're required to keep records by law.
8. Your rights
Under POPIA, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and data
- Withdraw consent, where processing is based on consent
- Lodge a complaint with the Information Regulator
To exercise any of these rights, email . If your request relates to data submitted through a specific organisation's form, please contact that organisation directly, as they are the responsible party for that data.
9. Cookies and session storage
We use a session token, stored in your browser, purely to keep you signed in. We don't use advertising or third-party tracking cookies.
10. Children's information
Some forms built on SimpleApps Studio (for example, school outing consent forms) may collect information about, or signed by, minors on behalf of a parent or guardian. We collect no more information from minors than is submitted by the respondent through the form, and the rights above apply equally.
11. Security breach notification
If a data breach occurs that affects your personal information, we will notify affected users and the Information Regulator without undue delay, as required by POPIA.
12. Changes to this policy
We may update this policy from time to time. Changes will be posted on this page. Continued use of SimpleApps Studio after a change constitutes acceptance of the updated policy.
13. Contact
SimpleApps (PTY) LTD
South Africa