#active

Privacy policy

Version 3 · Effective 1 November 2026

#active is only for people aged 18 and older.

This policy explains how #active (also called “Active”), an app made and run by Traderoot Technologies (Pty) Ltd, registration number 2000/005984/07 (“Traderoot”), handles personal information. #active is a brand of Traderoot, not a separate company. Traderoot is the responsible party for the personal information described here under the Protection of Personal Information Act (POPIA).

This policy is a notice, not an agreement. It tells you how your information is handled, and you are not asked to accept it. Where Active needs your consent, as it does to read your steps, it asks for it separately, on its own screen.

What Active knows about you

Your cell number, a handle and an emoji you pick, and your step count. That is the whole list, until you order something from the shop.

An order adds a delivery label: the name, email address, phone number and street address you type at checkout, so a courier can bring it and the shop can email your receipt. A basket with nothing to post (an event entry, a donation) asks for none of it.

There is no email address unless you type one on a delivery label, no ID number, no date of birth, no contact list, no advertising identifier and no profile built about you.

Your steps are read from Apple Health or Health Connect and nothing is ever written back to either. The count stays on the phone. It reads your steps only if you allow it when the app asks, and uses them only to pay you Volts for walking. You can withdraw that permission at any time in your phone’s settings. Active then stops paying Volts for steps, and everything else in the app keeps working.

Active is only for people who are 18 or older, and it does not knowingly process information about anyone younger. A shop order that Traderoot has reason to believe was placed by someone under 18 is cancelled.

Why Active uses it, and what happens if you say no

Active uses your cell number, handle and emoji to run your account on your phone, and your step count to pay you Volts for walking. A shop order is used to take payment for it, deliver it, deal with a return or a complaint about it, and keep the record of the sale.

Giving any of it is your choice. Without a cell number you cannot create an account. Without access to your steps you do not earn Volts for walking. Without a delivery label an order cannot be delivered.

Traderoot keeps the record of a sale because the Companies Act, the Tax Administration Act and the Value-Added Tax Act require a seller to keep it.

Traderoot does not send marketing messages. The email address and phone number on a shop order are used only for that order.

Where it is kept

On your phone, in the operating system’s own secure storage: the Keychain on an iPhone, the Keystore on an Android. Not in a plain settings file, not in a database, not on a server of ours, and not in any backup.

There is no Active account on any server holding any of it.

A shop order is the one exception. When you place one, the delivery label and what you bought are sent to the #active shop at www.traderootactive.org and kept there with the order: to deliver it, to handle a return, and because a shop has to keep a record of what it sold. The shop is run by Traderoot, as the seller. The delivery details (name, email address, phone number and address) are removed from an order 12 months after it is delivered, unless a return, a warranty claim or a dispute about it is still open. The record of the sale itself (what was sold, when and for how much) is kept for seven years, because the law requires it. It is kept as a guest order, not an account: nothing links it to your Volts, your steps or your PIN. Your phone keeps its own copy of the label so the next order is filled in for you.

Who else ever sees any of it

The #active shop is sent the name, address, email and phone you type on a delivery label, and what is in your basket, when you place an order, and keeps them with the order, as above. It passes the label to the courier who delivers it.

The shop’s payment provider is sent the card details you type on its payment page. That page opens inside the app but belongs to the provider, and Active never reads, stores or logs anything typed into it. The payment provider is responsible for your card details under its own privacy policy, and must protect them to the Payment Card Industry Data Security Standard (PCI DSS), the card industry’s security standard.

Nobody else, except as explained below. Active does not sell what it knows about a person, there is no advertising in it, and there is no analytics in it. If the app crashes, the report stays on the phone.

Traderoot has a written agreement with each company that processes order information for it, which requires that company to keep the information secure and confidential and to use it only for Traderoot’s purposes.

Some of these companies, such as the shop’s hosting, email and payment providers, may store or process order information outside South Africa. That happens only to the extent needed to take payment for and deliver your order, or with companies that are bound by law or by agreement to protect it to a standard similar to POPIA’s.

Traderoot may also give order information to the South African Revenue Service, a court, the police or a regulator where the law requires it, and to its auditors and professional advisers, who must keep it confidential.

Keeping it safe

Traderoot, and the companies that process order information for it, use reasonable technical and organisational measures to protect it against loss, damage and unauthorised access. On your phone, your information is held in the operating system’s secure storage, as described above.

If there are reasonable grounds to believe that order information has been accessed or acquired by someone not authorised to do so, Traderoot will tell the Information Regulator and you, as POPIA requires.

What you can demand

Under the Protection of Personal Information Act you may ask what personal information is held about you, have it corrected, have it deleted, object to it being processed, and complain to the Information Regulator. You may also withdraw your consent to Active reading your steps at any time, as explained above.

Three of those you do yourself, because everything is on your phone: what is held is on the account screen, what is wrong you retype, and what you want gone you erase. For the rest, the name and contact details of Traderoot’s Information Officer, and Traderoot’s PAIA manual, which explains how to ask for records Traderoot holds, are on the company information page at www.traderootactive.org/legal.

A shop order is not on your phone, so for that one you write to support@traderootactive.org with the order number from your receipt: to see what is held, to correct it, or to have it deleted, apart from the record of the sale the law requires the shop to keep. To protect your order, Traderoot acts on a request only once it is satisfied that it comes from the person who placed the order, for example from the email address used on it. Traderoot answers as soon as reasonably practicable, and in any event within 30 days.

You may complain to the Information Regulator at www.inforegulator.org.za or POPIAComplaints@inforegulator.org.za.

Emails to support@traderootactive.org, including requests and complaints, are kept for two years after the request or complaint is closed, and are then deleted.

If an account is suspended or ended because the app detects cheating, such as a wound-back clock or a faked step count, and that decision is made automatically, you may ask for it to be reviewed by a person. Write to support@traderootactive.org.

Erasing it

“Not your phone? Start over” on the unlock screen erases the account, the Volts, the step history, the handle, the number and the delivery address, once you confirm, in one action that cannot be undone.

It does not reach an order you have already placed: that is kept by the shop, not on the phone. To have one deleted, write to support@traderootactive.org. Traderoot deletes it, apart from the record of the sale it must keep, as explained above.

Uninstalling the app is not the same thing. On an iPhone, the Keychain can outlive an uninstall, so an app reinstalled onto the same phone can still find the old account. Use “Start over” if you want it gone. Step-by-step instructions are at www.traderootactive.org/delete-account.

Changes

This policy may change. Its version and the date it took effect are at the top of this page. When an update to the app carries a changed policy, the app shows you what has changed the first time you open it after the update. A change that means Active will use your information in a new way, or collect information it did not collect before, applies only once the app has told you about it on screen and, where your consent is needed, you have given it.

Who to write to

Write to support@traderootactive.org, or to Traderoot’s Information Officer, whose details are on the company information page at www.traderootactive.org/legal.

#active is made and run by Traderoot Technologies (Pty) Ltd, registration number 2000/005984/07. · Terms of use · Delete your account · Company information