DebitWatch Privacy Policy
Updated 5 November 2026
DebitWatch is a debit-order tracking app made by QUANTYX (PTY) LTD. This policy describes the iOS app as it is built and shipped.
Who is responsible
QUANTYX (PTY) LTD, registration number 2025/964679/07, registered office 3 Bradford Rd, Germiston, Gauteng, 2007 ("Quantyx"), is the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA) for the personal information described on this page. Information Officer: Vuyo Nkadimeng, director. Contact: vuyo@quantyx.co.za.
Why we may process it: we process personal information to answer your messages, run our apps for you, meet legal duties and run our business (the lawful grounds that apply are to be confirmed by our attorney). Supplying information to us is voluntary, but without some of it a feature or reply cannot work.
The short version
There is no Quantyx server that receives your debit orders. Your data lives on your device. If you use iCloud sync, it is also stored in your private iCloud, which Apple operates. We have no analytics and no advertising.
What the app holds
Your debit orders, merchants, amounts, incomes and profile. This is financial information. It is not special personal information under POPIA, but it is sensitive and we treat it that way.
- Statement scanning uses the camera with Apple Vision and VisionKit on your device. The images are not uploaded.
- Calendar access is write-only, to add debit reminders you choose.
- Face ID, if used, is handled by iOS.
- Dispute and cancellation emails open in your mail composer. You send them, from your account, to the recipient you pick.
- Pro subscription: purchases are handled by Apple through the App Store.
iCloud sync
When iCloud sync is used, a snapshot of your profile, debit orders and incomes is stored in your private iCloud database (iCloud.com.zimasilevuyo.debitwatch). Apple operates iCloud and may store data in the United States and other countries. iCloud private storage is designed so that Quantyx cannot read it.
Transfers outside South Africa
POPIA section 72 lets information leave South Africa only if the recipient must protect it to a similar standard or you agree. Here is what leaves your device:
| Recipient | What it receives | Where |
|---|---|---|
| Apple (iCloud / CloudKit) | A snapshot of your profile, debit orders and incomes, if you use iCloud sync | United States and other Apple regions |
| Apple (App Store) | Purchase records for Pro | United States and other Apple regions |
How long we keep it
We keep nothing about you on Quantyx systems. On your device, data stays until you delete it or the app. Data in your iCloud stays until you delete it there. Support emails: 24 months (proposed, pending attorney confirmation).
Children
DebitWatch is for adult account holders. It has no age check and is not designed for children.
Your rights and complaints
Under POPIA you may ask whether we hold personal information about you, ask for a copy, ask us to correct or delete it, and object to how we use it. Email vuyo@quantyx.co.za and we will respond. If you are not satisfied, you may complain to the Information Regulator (South Africa). Complain through the Regulator's complaints page at inforegulator.org.za/complaints. PAIA complaints go on Form 5 to PAIAComplaints@inforegulator.org.za.
If we learn of a breach of your personal information we will notify the Information Regulator and you as POPIA section 22 requires. Report a suspected incident to vuyo@quantyx.co.za.
Contact
Questions about privacy in DebitWatch: vuyo@quantyx.co.za.
Published by QUANTYX (PTY) LTD, reg. 2025/964679/07. Read the Quantyx privacy notice and the PAIA page. Support · quantyx.co.za