Privacy Notice
Version 2026-10-11. This notice is given under section 18 of the Protection of Personal Information Act, 2013 (POPIA).
1. Who is responsible for your information
SpensSlim is run by Ian Frost, a sole proprietor (the "responsible party"). Ian is also the Information Officer.
- Cellphone / WhatsApp: 071 641 0589
- Email: nova_f2026@outlook.com
- Physical address: 1 Springwell Avenue, Willaway, Midrand, Gauteng, South Africa
2. What we collect
- Your account: your cellphone number, the pantry name, and the names you type in (the people who use the pantry and who items are for). Your PIN is never stored as typed. We keep only a one-way scrambled version (a "hash") that cannot be turned back into the PIN.
- Your pantry: the items, counts, barcodes, product names and pictures, and the history of what was added or taken out, by whom and for whom.
- Your agreement: the date you accepted these terms and which version you accepted.
- Payments: when you pay, the amount, date and reference (your cellphone number). We do not receive or store bank card details.
- Security information: your internet (IP) address, kept briefly to stop people guessing PINs (wrong-PIN counts) and to limit sign-ups. Sign-up records are kept for one day.
- On your phone: the app uses one essential login cookie. Your browser also stores your chosen name, your cellphone number (to fill in the login box) and a copy of the recipe list. There are no advertising or tracking cookies, and no analytics.
Children: SpensSlim accounts are for people aged 18 or older. If you add a child's name (for example, who a snack was for), you confirm that you are that child's parent or guardian or have their permission. Please use a first name or nickname only.
3. Why we use it
- To provide the service you signed up for: storing your pantry, sharing it between the phones in your home, and showing history and recipes.
- To keep your account safe (PIN checks, limiting wrong attempts).
- To manage your free trial and subscription, and to contact you about payment if you ask us to.
We use your information because it is needed to perform our agreement with you, to protect your account (a legitimate interest), and to keep financial records that the law requires.
4. Is it voluntary?
You do not have to sign up. To create a pantry, the cellphone number, pantry name, your name and a PIN are required. Without them we cannot give you an account. Other names are optional.
5. Who else receives it
- Cloudflare, Inc. hosts the app and its database. Cloudflare runs servers in many countries, so your information may be stored or processed outside South Africa. Cloudflare is bound by its data-processing terms and security standards, which give protection comparable to POPIA (section 72).
- Open Food Facts: when you scan a barcode the app does not know yet, our server sends only the barcode number to Open Food Facts to look up the product name. None of your personal information is sent.
- WhatsApp: only if you tap a WhatsApp button (to share your shopping list or contact Ian). WhatsApp's own privacy policy then applies.
- Ian can see the pantry name, cellphone number, names, number of items and payment status, so that he can manage subscriptions. He does not look at the contents of your pantry unless you ask for help or the law requires it.
We never sell your information or use it for advertising.
6. How long we keep it
- Your account and pantry: until you delete them. You can do this yourself in Account & settings → Delete this pantry, and it takes effect immediately. The database backup may keep a copy for up to 30 days; after that it is gone.
- If a pantry stays locked (trial over and unpaid) for 12 months, we delete it.
- Payment records: 5 years, because tax law requires it.
7. How we protect it
All connections are encrypted (HTTPS). PINs are stored only as strong one-way hashes. Wrong PINs are limited. Each household can only see its own pantry, and only Ian has admin access. If your information is ever accessed by someone who should not have it, we will tell you and the Information Regulator, as section 22 of POPIA requires.
8. Your rights
- See your information: tap Download all my data in Account & settings, or ask Ian.
- Correct it: edit names in the app, or ask Ian.
- Delete it: use Delete this pantry, or ask Ian.
- Object to how we use your information, or withdraw your agreement. Deleting your pantry ends all use.
- Complain to the Information Regulator (South Africa):
- Email: POPIAComplaints@inforegulator.org.za (general enquiries: enquiries@inforegulator.org.za)
- Phone: 010 023 5200, or toll free 0800 017 160
- Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
9. Changes
If this notice changes in a way that matters, we will tell you in the app before the change applies. The version date is at the top.