Privacy Policy

01WHO WE ARE

Data Controller / Responsible Party: MATTHEW GUERREIRO TRADING AS OVERLANDER Registration Status: Not registered (sole proprietor) Address: Winton Cl, Cape Town, South Africa Email: info@guerreiro.co.za

02SCOPE

This Privacy Policy applies to personal information processed through:

• Overland iOS and Android apps
• Backend APIs and databases
• Push notification systems
• Subscription and account-related features
• Related support and communications

03INFORMATION WE COLLECT

3.1 Information You Provide

• Account information: user ID, email address, username, first/last name, password credentials
• Profile information: profile photo and other profile fields you submit
• Vehicle and trip data: vehicle details, mileage, accessories, trip logs, notes
• POI and content data: POIs you create, reviews, ratings, image and video/reel uploads, captions, reports, and generated video-preview thumbnails
• Social data: follow/unfollow actions, blocked user settings, notification preferences
• Support communications and feedback

3.2 Information Collected Automatically

• Device and technical data: platform (iOS/Android), app version, device token(s), basic diagnostics/logs
• Usage data: feature interactions, request metadata, timestamps
• Subscription metadata: tier, product ID, purchase/expiry status, entitlement state

3.3 Location Information Depending on your settings and permissions, we process:

• Current location (latitude/longitude, and where available altitude/accuracy)
• Location-sharing status
• SOS-related location data (including fixed or tracking mode)
• Follower location visibility as enabled by account relationships and app logic

Important: Location processing may continue in the background where platform permissions and feature behavior allow (for example, SOS tracking features).

04HOW WE USE PERSONAL INFORMATION

We use information to:

• Provide, operate, and maintain the Service
• Create and manage accounts and authentication
• Enable social features, POI discovery, and map functionality
• Enable SOS features, location sharing, and related alerts
• Send transactional and feature notifications (including push notifications)
• Enforce feature entitlements (including subscription gating)
• Detect abuse, fraud, policy violations, and security incidents
• Moderate content and handle reports
• Comply with legal obligations and enforce legal terms
• Improve app functionality, reliability, and user experience

05LEGAL BASIS FOR PROCESSING

Where applicable law requires a legal basis, we rely on one or more of:

• Performance of a contract (providing the Service you request)
• Your consent (for example, permission-based location/notification access)
• Legitimate interests (security, fraud prevention, service improvement, moderation)
• Compliance with legal obligations

06PUSH NOTIFICATIONS

We process device tokens and notification preferences to deliver notifications such as:

• Social notifications (for example, new followers)
• SOS alerts and SOS location update requests
• General service notifications

Notification delivery depends on third-party platform services and device settings. You can control notification permissions in your device/app settings.

07SUBSCRIPTIONS AND PAYMENTS

In-app purchases and subscriptions are processed through Apple App Store and/or Google Play. We do not receive full card details.

We process limited subscription metadata (for example, tier, product ID, status, renewal/expiry-related data) to manage feature access and account entitlements.

08USER CONTENT AND COMMUNITY FEATURES

If you post content (such as POIs, reviews, images, videos/reels, captions, and reports), that information and related metadata may be stored and displayed to other users through feeds, profiles, and other Service features. For video uploads, the Service processes and stores a preview thumbnail generated from a frame at approximately three seconds into the video. Images and thumbnails may be fetched and cached on viewers' devices to display the Service efficiently.

Users are responsible for the content they upload and for ensuring they have the necessary rights and permissions. The End User License Agreement contains the content rules, uploader responsibilities, and liability terms. We do not endorse or guarantee user content. We may review, restrict, or remove content where reasonably necessary for policy enforcement, legal compliance, platform requirements, safety, or abuse prevention, but are not obligated to pre-screen every upload.

09SHARING OF PERSONAL INFORMATION

We do not sell personal information for money. We may share information:

• With service providers that host, secure, or support the Service
• With push, mapping, and platform providers needed to deliver core features
• With app store platforms for subscription and distribution operations
• With other users as required by social/location features you enable
• With legal/regulatory authorities where required by law or to protect rights/safety
• In connection with a business transfer (for example, sale/restructure), subject to applicable law

10INTERNATIONAL TRANSFERS

Because technical infrastructure and service providers may operate in multiple countries, your information may be processed outside South Africa. Where required, we take reasonable steps to ensure appropriate protection standards are applied.

11DATA RETENTION

We retain personal information only as long as necessary for the purposes described in this Policy, including legal, security, fraud prevention, dispute, and operational requirements.

Retention may vary by data type. Certain records may be retained after account deletion where legally required, technically necessary, or needed for legitimate interests (for example, security, audit, and abuse prevention).

12ACCOUNT DELETION

Where available, you may request account deletion through app functionality. Deletion may be implemented as soft deletion in systems that preserve limited records for lawful and operational reasons.

After deletion, some information may remain in backups, logs, or compliance archives for limited periods.

13YOUR RIGHTS

Subject to applicable law (including South Africa’s Protection of Personal Information Act, where applicable), you may have rights to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion or restriction of certain processing
• Object to certain processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise rights, contact: info@guerreiro.co.za.

14CHILDREN

The Service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe such data has been provided, contact us and we will take appropriate steps.

15SECURITY

We implement reasonable technical and organizational safeguards designed to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining account credential security and using device-level protections.

16COOKIES AND TRACKING TECHNOLOGIES

The mobile app primarily relies on app/device identifiers and backend logs rather than browser cookies. If web-based components are introduced, additional notices may apply.

17THIRD-PARTY SERVICES

The Service may depend on third-party services (for example, cloud messaging, map/location providers, app stores, and infrastructure). Their processing is governed by their own privacy terms where applicable.

18CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Material changes may be communicated via in-app notice, website posting, email, or other reasonable means.

Your continued use of the Service after changes take effect constitutes acknowledgement of the updated Policy, to the extent permitted by law.

19CONTACT

For privacy questions or requests: Email: info@guerreiro.co.za Address: Winton Cl, Cape Town, South Africa Website: over-lander.online

If you are not satisfied with our response, you may lodge a complaint with the relevant data protection authority in your jurisdiction.