PAIA Manual
BPX Digital (Pty) Ltd · last updated 2026-09-30
This manual is published under section 51 of the Promotion of Access to Information Act (PAIA). It tells you what records BPX Digital (Pty) Ltd, the company behind SayveMo, holds, how to ask for access to them, and how we process personal information under the Protection of Personal Information Act (POPIA).
1. Acronyms
2. Contact details
Our Information Officer is registered with the Information Regulator (registration number 2026-067945). Send every PAIA request, and any question about this manual, to privacy@sayvemo.co.za.
3. The Regulator's PAIA Guide
The Information Regulator publishes a Guide on how to use PAIA, in each official language. You can get it from the Regulator's website, inforegulator.org.za, or ask our Information Officer for a copy.
4. Records available without a request
You don't need a PAIA request for these:
- our Privacy Policy and Terms of Service, in the app and on sayvemo.co.za;
- this manual;
- the information about SayveMo on sayvemo.co.za.
5. Records kept under other laws
We keep records as required by, among others:
- the Companies Act 71 of 2008 (company records);
- the Income Tax Act 58 of 1962 and, once registered for VAT, the Value-Added Tax Act 89 of 1991 (tax records);
- the Protection of Personal Information Act 4 of 2013 (records of how personal information is processed).
6. Subjects and categories of records
7. How we process personal information
Why. To provide the app (accounts, grocery price comparison, lists, meal ideas and price alerts), to answer support and contact messages, to run the waitlist, and to keep the service secure.
Whose information, and what:
- App users: name and email address; a reference for their Google account, if they sign in with Google; shopping preferences; approximate area; lists and price reports; phone and notification codes; a security log. Special personal information only with explicit consent: a religious practice (Halaal) and possible health information (foods never bought).
- Website visitors: email address (waitlist); name, email address and message (contact form).
Who receives it. Service providers who process it for us under written agreements: our hosting provider (South Africa and Ireland), our AI provider (United States), our email provider (United States and other countries), our notification provider (United States) and our website host. Our maps provider and Google sign-in receive information under their own terms. Our Privacy Policy sets out what each receives.
Outside South Africa. Everything we store stays in South Africa. Email and maps processing outside South Africa is needed for the app to work; the meal assistant (Ireland and the United States), push notifications and Google sign-in (United States) happen only if the user chooses them. Each rests on the user's consent.
Security. Encryption in transit and at rest; access limited to what each part of the service needs; secrets kept in a managed secrets store; deletion of all account data on request; a security log kept for 90 days; and a procedure for responding to a security breach under section 22 of POPIA.
8. How to request access to a record
Send your request on Form 2 of the PAIA regulations (available from the Regulator's website) to our Information Officer at privacy@sayvemo.co.za. Describe the record you want, the form of access you want, and the right you want to exercise or protect. The fees prescribed by the PAIA regulations apply; we'll tell you about any fee before we process your request.
We'll decide on your request within 30 days, and tell you if we need longer, as PAIA allows. If we refuse access, we'll give our reasons. If you're unhappy with our decision, you can complain to the Information Regulator or apply to court.
To see, correct or delete your own personal information in SayveMo, you don't need a PAIA request: use the app (Profile), or see §9 of our Privacy Policy.
9. Where this manual is available
On sayvemo.co.za/paia, at our registered address, and from our Information Officer on request.
10. Updates
Our Information Officer reviews this manual whenever the way we process information changes, and at least once a year.