Privacy policy

Who we are

Onaka operates a platform that connects people who book beauty and wellness appointments with independent providers and businesses. The consumer app lets you search providers, view services, make bookings, and manage your account.

For privacy questions or requests, email support@onaka.co.za.

Information we collect

• Account details: name, email address, phone number, and profile photo if you add one.
• Authentication data: managed through our identity provider (for example sign-in with email or supported OAuth providers).
• Booking information: appointments, selected services, professionals, notes, and booking status.
• Location: approximate or precise location when you allow it, to show nearby providers and maps (for example via Mapbox).
• Payment-related data: booking amounts and payment references processed by our payment partners; we do not store full card numbers on Onaka servers.
• Device and usage data: push notification tokens, app version, and technical logs needed to operate and secure the service.
• Communications: messages you send to support or feedback you submit in the app.

How we use information

• Provide, maintain, and improve the Onaka app and booking experience.
• Process bookings, payments, cancellations, and reminders.
• Send transactional notifications (for example booking confirmations) and, if you opt in, promotional messages.
• Show relevant providers and map content based on location you share.
• Prevent fraud, enforce our terms, and protect users and providers.
• Comply with legal obligations and respond to lawful requests.

Legal bases (POPIA)

We process personal information where necessary to perform our contract with you, with your consent (for example location or marketing), to pursue legitimate interests that are not overridden by your rights (such as security and analytics), or where required by law.

Sharing with others

We share information only as needed to run the platform:

We do not sell your personal information.

• Beauty and wellness providers you book with, so they can deliver the service.
• Infrastructure and service providers (for example cloud hosting, authentication, maps, and payment processors).
• Authorities when required by law or to protect rights and safety.

Retention

We keep personal information for as long as your account is active and as needed for bookings, legal, and accounting requirements. When you delete your account, we delete or anonymise personal data within a reasonable period, except where we must retain records by law.

Security

We use technical and organisational measures appropriate to the risk, including encryption in transit and access controls. No method of transmission or storage is completely secure; please use a strong password and keep your device protected.

Your rights

• Access and correct personal information in the app or by contacting us.
• Withdraw consent where processing is consent-based (for example marketing or optional location).
• Request deletion of your account from Settings or by emailing support@onaka.co.za.
• Object to certain processing or lodge a complaint with the Information Regulator (South Africa) if you believe your rights under POPIA have been violated.

Children

Onaka is not directed at children under 18. We do not knowingly collect personal information from children. Contact us if you believe a child has provided data through the app.

International transfers

Our service providers may process data in countries outside South Africa. Where we transfer personal information internationally, we take steps required by applicable law to protect it.

Changes

We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use of the app after changes means you accept the updated policy.