Privacy notice

Written for the Protection of Personal Information Act, 2013 (POPIA). Plain language on purpose.

What Veldlist collects today

Nothing about you on our servers. The app stores your profile name, saved places, training log, plates, diary entries, tasks and scan history on your own device (browser storage). Export it, import it or wipe it from the account sheet inside the app at any time.

What leaves your device

• Barcode lookups send the barcode number to Open Food Facts (a non-profit database in France) and nothing else.
• Fonts are loaded from Google Fonts, which sees your IP address as any web request does.
• Hosting: pages are served by Cloudflare, whose edge logs standard request data for security. We run no analytics, no advertising pixels and no third-party tracking scripts.
• Flags and suggestions you send about a listing are stored with the text you typed and the date. Do not put personal information in them.

When accounts arrive

Sign-in will be passkey-first (a fingerprint or face on your device; no password stored anywhere). Health-type data — bodyweight, sleep, mood, injuries — will be stored only after a separate, revocable consent, in a database in the European Union under POPIA section 72 safeguards, and can be erased by you with one action. Payments will be processed by Yoco; card numbers never touch Veldlist.

Your rights

You may ask what we hold about you, ask for correction or deletion, and object to processing. Email christiaan@sovereignmatrix.agency. The Information Regulator of South Africa can be reached at inforeg.org.za.

Responsible party

Christiaan de Wet trading as Sovereign Matrix, Klerksdorp, North West. Last updated 18 September 2026.