Inverix IP (Pty) Ltd
POPIA Notice
This notice explains how Inverix IP (Pty) Ltd complies with the Protection of Personal Information Act, 2013 (POPIA) when you use Little Steps Africa.
1. Responsible party
Name: Inverix IP (Pty) Ltd
Product: Little Steps Africa
Country: Republic of South Africa
Information officer contact: info@littlesteps.africa
For POPIA-related requests, email us from your registered account address with "POPIA request" in the subject line.
2. Purpose of processing
We process personal information to:
- Create and manage your user account.
- Store and display baby health and care records you or invited caregivers submit.
- Send reminders and notifications you enable.
- Generate exports and summaries you request.
- Secure, maintain, and improve the application.
- Meet legal and regulatory obligations.
3. Categories of personal information
| Category | Examples |
|---|---|
| Identity & contact | Name, email, authentication IDs |
| Special personal information (health) | Growth, vaccines, symptoms, feeding, sleep, medications, photos, voice notes |
| Technical | Device type, app version, IP address, logs |
Health data is special personal information under POPIA. We process it only with your explicit consent, which you provide during onboarding and may manage in Settings.
4. Source of information
Most information comes directly from you or caregivers you authorise. We do not obtain health records from clinics unless you manually enter or upload them.
5. Recipients and operators
We use vetted operators (such as cloud hosting and push notification providers) who process data on our instructions and may be located outside South Africa. Contracts require appropriate security and confidentiality.
Invited caregivers you add can see information according to the permissions you grant inside the app.
6. Security safeguards
- Encryption in transit (TLS).
- Access controls and authentication.
- Monitoring for unauthorised access.
- Staff confidentiality obligations.
7. Retention
We retain personal information while your account is active. Account deletion triggers a 30-day grace period, after which personal information is permanently deleted from our production systems unless retention is required by law or for legitimate dispute resolution.
8. Your rights under POPIA
As a data subject, you may request to:
- Confirm whether we hold personal information about you.
- Access your personal information.
- Correct or delete personal information where applicable.
- Object to processing in certain circumstances.
- Withdraw consent (without affecting prior lawful processing).
- Lodge a complaint with the Information Regulator.
Many requests can be fulfilled in-app (export, account deletion). Contact info@littlesteps.africa for assistance.
9. Information Regulator (South Africa)
If you are unsatisfied with our response, you may contact the Information Regulator:
- Website: www.inforegulator.org.za
- Email: inforeg@inforegulator.org.za
10. Data breach notification
If a compromise of personal information is likely to cause harm, we will notify affected users and the Information Regulator as required by POPIA.
11. Related documents
See also our Privacy Policy, Terms of Service, and Safety page.