Who we are
Nexus is a South African marketplace app that connects local vendors with nearby customers, starting in Ficksburg, Free State. Nexus is operated by Michael Mokhethea ("Nexus", "we", "us"). For anything in this policy, you can reach us at hello@nexusapp.africa.
This policy explains what information Nexus collects, why, where it is kept, and the choices and rights you have — in line with South Africa's Protection of Personal Information Act (POPIA).
What we collect, and why
Your phone number. Used once to verify your identity by SMS when you sign in, and afterwards as your account identifier. Signing in is optional — you can browse vendors and products without an account. We do not use your number for marketing and we never sell it.
Vendor business information — published by your choice. If you choose to create a vendor profile, the details you enter — your business name, category, description, usual hours, business address or landmark, map location (if you add them), open/closed status, business contact number, the products and services, prices, and photos you add, and your replies to reviews — are publicly visible in the app by design. Being findable by customers is the purpose of a vendor profile. You control this content and can edit or remove it at any time.
Product photos. Photos you add to your storefront are compressed on your device before upload (to save your data) and stored with your account. They are publicly visible as part of your storefront.
Reports. If you report a business, listing, review or private message, we store your report, the reason you chose, any details you add, and your account ID, so we can review it. The business you report does not see who reported it. Reports are kept until we've reviewed them, and deleted 12 months after they're resolved, or when you delete your account.
Contacts. If you're signed in and tap Call, WhatsApp or Directions for a business, we record that you contacted it (not what was said) and when. This is how we make sure only real customers can review. We delete these records after 12 months, or when you delete your account.
Reviews. Your rating, tags, comment and the name you choose are public. If you post anonymously, the public and the business see 'Verified customer', but Nexus knows who wrote it. Deleting your account deletes your reviews.
Private feedback. If you send private feedback, the business sees your message and the name you chose (or 'A customer' if you send it anonymously). Nexus keeps a record of who sent it to prevent abuse. Businesses can report or block senders. We delete messages after 12 months, or when either account is deleted. If a message is reported, a copy is kept with the report (visible only to Nexus moderation) until the report is resolved, then deleted 12 months later.
Saved. When you save a listing or business, we store it on your account so you can find it again. Businesses see only how many people saved them, never who. Removing a save deletes it, and deleting your account deletes everything you saved.
Orders. When you send an order, we store the items, prices, total, your name, your phone number, your note and the order's status. You and the business can see it; Nexus can see it to keep the service safe. Nexus doesn't handle payment. Orders are kept for 24 months.
Customer lists. When a business confirms your order, you appear in that business's customer list in Nexus. It shows your name, phone number, your orders with that business and what you spent on completed orders. Only that business can see it. The business can add a short private note about you (for example, your usual size); notes are checked for offensive language, and you can ask us for a copy of anything stored about you. Anonymous reviews and messages are never linked to you. Deleting your account removes you from every business's customer list.
Notifications. If you turn notifications on, we store a notification token for your phone so we can send them. Notifications show first names and counts only, never prices or messages. You can turn each kind off in the app, and signing out stops notifications on that phone.
Verification. If you ask us to verify your business, we record who visited, when, the checks we did, and any notes. We may look at an ID document if you agree, but we never copy it or record its number. The month of verification is shown publicly with the badge. These records are deleted when the business is deleted.
Usage analytics. To learn which parts of Nexus are useful and improve them, the app records how it is used — for example which screens are opened, what is searched for, which categories are chosen, which storefronts and products are viewed, and when the Call, WhatsApp, or Share buttons are tapped. We use Google Firebase Analytics for this. This information is linked to a random identifier created for your copy of the app, not to your name or phone number, and we never record phone numbers or names in it. We use it only to understand and improve Nexus — never for advertising.
Error reports. If something goes wrong in the app, we record what kind of error happened and on which screen, never your messages or details. These reports go through Google Firebase Analytics, like usage analytics above.
Basic technical information. Like almost every app, Nexus's infrastructure (Google Firebase) processes basic device information — such as device model, operating system version, and app version — to keep the app working and secure. We do not run advertising and we do not sell data.
What we don't do
- We don't sell or rent your personal information to anyone.
- We don't show ads or share your information with advertisers.
- We don't collect your device's advertising ID, and we don't use Google Analytics' advertising features.
- We don't read your contacts, messages, or files.
- We don't track your location. If you're a vendor and choose to pin your business on the map, the app asks for location permission and reads your location once, at that moment, to place the pin. We never collect location in the background, and we never collect customers' locations.
Where your information lives
Nexus runs on Google Firebase. Your information is stored in Google Cloud's Johannesburg, South Africa region (africa-south1), protected by security rules that limit who can read and write what — for example, only you can create, edit, or delete your own products, and this is enforced on the server, not just in the app.
Some processing happens outside South Africa. Parts of Nexus's server logic — such as generating public vendor web pages and keeping storefront previews up to date — run on Google Cloud servers in Europe, and usage analytics are processed by Google, which may include servers outside South Africa. Google is bound by data-protection commitments that provide protection comparable to POPIA.
Google acts as our service provider (an "operator" under POPIA) and processes this information on our behalf under its own strong security and privacy commitments. Google does not use Nexus's analytics data for its own advertising, and we have switched off Google's data-sharing options.
How long we keep it
Your account information is kept for as long as you have an account. If you delete your account, your profile, products, photos, reviews, contact records, saved listings and businesses, order lists you hadn't sent, notification tokens and settings, any reports you made, and your entry (with any note) in every business's customer list are removed from the app. Orders you sent stay with the business without your name, phone number or note (shown as "Deleted user"), so it keeps its record of the items, totals and status; they are deleted 24 months after they were sent. Some minimal records may persist briefly in backups or logs before being cleared in the normal course of operation.
A phone's notification token is deleted when you sign out on it, and after 60 days in which the app wasn't opened on it.
Usage analytics are kept for up to 14 months and then deleted automatically. Because they are linked to a random app identifier rather than to your account, they are not tied to you by name or number.
Your rights and choices
- Browse without an account. No sign-in is needed to look at vendors and products.
- See and correct your information. Your profile and products are visible and editable in the app. You can also ask us what personal information we hold about you.
- Delete your account. In the app, open your account (the Account screen if you have a business, or the account button on the Discover screen if you don't) and tap Delete account. This deletes your account and its data straight away: your business profile, products and photos if you have them, and any reports you made. You can also email hello@nexusapp.africa from a message that lets us verify you (or contact us via your registered number) and we will do it for you.
- Complain. If you believe we've handled your information unlawfully, you can contact us — and you always have the right to lodge a complaint with South Africa's Information Regulator (inforegulator.org.za).
Children
Nexus is intended for people aged 18 and over. We don't knowingly collect information from children. If you believe a child has created an account, contact us and we will remove it.
Changes to this policy
If Nexus changes in ways that affect your information — for example, new features like reviews, ordering, or location-based discovery — we will update this policy and change the effective date above before those features launch.
Contact
Questions, requests, or concerns: hello@nexusapp.africa