Your email address (used only to sign you in), sign-in code hashes, session records, account role, consent time/version, the passes you buy, and your wallet balance and ledger. If you choose your town, that choice is stored on your device, not our servers.
We never sell your information, never share it with advertisers, and never put civic notices, outages or emergency information behind a payment.
To sign you in and to honour the passes you buy. Nothing else. The lawful basis is performance of the service you asked for, with your consent recorded at first sign-in.
You may ask to see, correct or delete your information at any time: info@ubuntutown.co.za. Account deletion requests are handled manually; this preview does not yet have a self-service deletion tool. Transaction retention rules must be confirmed before live payments. You may also complain to the Information Regulator (South Africa).
This preview uses Cloudflare for hosting and the database, and Resend for sign-in email. Processing may occur outside South Africa. Codes expire after 10 minutes and sessions after 30 days; expired records are not yet automatically deleted. Before launch we must confirm retention periods, cross-border safeguards, the responsible party and contact details. This is a preview notice, not a completed legal review.
Sign-in uses one-time codes; there are no passwords to leak. Sessions expire after 30 days.