Privacy policy

Conquish ("Conquish", "we", "us") is a household operating system built in South Africa. It helps households manage tasks, shopping, reminders, calendars, documents, money, insurance, vehicles, maintenance and contacts in one shared space.

This policy explains what personal information we collect, why, how we protect it, and the choices you have. We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and, where applicable, the EU/UK GDPR.

• Account details — your name, email address and password (stored only as a secure hash), plus your profile photo if you add one.
• Household content — the tasks, lists, reminders, events, documents, policies, vehicle and contact records you and your household create. This content belongs to you.
• Documents you upload — files such as licences, policies and receipts, stored in private storage scoped to your household.
• Messages — messages sent through household chat or to your household's email relay address, including attachments.
• Usage and device data — basic technical logs (browser, device, pages visited, errors) used to keep the service reliable and secure.
• Billing details — your plan, billing cycle and payment status. Card and banking details are collected and processed by our payment provider (PayFast); we never see or store your full card number.

• To provide the service — syncing your household's data, sending reminders and notifications you set up.
• To power features you invoke, such as extracting details from a document you upload or answering an assistant question. AI features only use your household's data to answer you, and nothing is saved from an extraction without your confirmation.
• To process subscriptions and prevent fraud.
• To respond to support requests and to send essential service emails (receipts, security notices).
• To improve the product using aggregated, de-identified usage patterns.

• We never sell your personal information.
• We never show advertising inside the app or share your data with advertisers.
• We never use your household's private content to train AI models.
• We never make your documents publicly accessible — files open through short-lived signed links only.

Every record belongs to a household, and access is enforced at the database level on every read and write. Owners and admins control membership. Sensitive areas — money, insurance and documents — are additionally gated behind explicit per-person access grants that can be removed at any time. When someone leaves or is removed from a household, they immediately lose access to its data.

We use a small number of trusted providers to run the service: cloud hosting and database infrastructure, payment processing (PayFast), email delivery, and AI processing for features you invoke. Each provider processes data only on our instructions and under appropriate safeguards. Data may be processed outside South Africa; where it is, we ensure an adequate level of protection as required by POPIA.

We keep your data for as long as your account is active. If your subscription lapses, your data is retained — Premium features are locked, not deleted — so you can pick up where you left off. You can delete individual records at any time, and you can request full deletion of your account and household data, after which it is removed from active systems and then from backups on a rolling schedule.

We use encryption in transit and at rest, household-level data isolation enforced by the database, per-area access grants, private document storage with signed links, and an audit trail for sensitive actions. You can read more on our security page.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the Information Regulator as required by law.

Under POPIA (and the GDPR where it applies) you may:

• access the personal information we hold about you;
• correct inaccurate or outdated information;
• request deletion of your information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent; and
• lodge a complaint with the Information Regulator (South Africa).

To exercise any of these rights, email privacy@conquish.com. We will respond within a reasonable time and no later than the periods required by law.

Conquish accounts are intended for adults managing a household. We do not knowingly collect personal information directly from children. Household content (for example a task assigned to a child by name) is controlled by the adults in the household.

If we make material changes, we will update this page and, where appropriate, notify you in the app or by email before the change takes effect. The "last updated" date below always reflects the current version.

Questions about privacy: privacy@conquish.com. General support: use our contact page. If you are not satisfied with our response, you may contact the Information Regulator (South Africa) at inforeg.org.za.