Skip to main content

Your data, your rights

Privacy & Security

What you can do with your personal information, how to do it, and what we do to protect it. The full detail is in our Privacy Policy.

What you can do

Download or request a copy of your data

A file with your profile, wallet transactions, tasks, withdrawals, referrals, notifications, badges, missing-reward reports and reviews.

Sign in to download it now, or use the POPIA request form (choose "Access" or "Export").

Correct your information

Add or check your details on your Profile. For anything you can't change there, such as your name, email or phone number, send a correction request. We verify it's you first.

Delete your account

Signed in on the website: Profile, then Delete Account. In the Android app: Settings, then Delete Account. Can't sign in: use the POPIA request form and choose "Deletion".

Withdraw any available balance first: points left in a deleted account are forfeited. Deletion waits until any payout in progress has finished. Some records must be kept, see below.

Object to processing or withdraw consent

Use the POPIA request form and choose "Objection" or "Withdraw consent". Withdrawing consent doesn't undo earlier lawful processing, and some features may stop working without it.

Contact our Information Officer, or complain to the regulator

Email info@earnify.co.za for anything about your personal information. ABODIGITAL (Pty) Ltd, Sandton, Johannesburg, Gauteng, South Africa. You also have the right to complain to the Information Regulator (South Africa).

We verify identity before disclosing, changing or deleting data, and respond within the period applicable law requires. Never send an ID document unless we ask for it through a suitable channel.

How we protect accounts

We use encrypted connections, secure password hashing, access controls and fraud-prevention safeguards to protect accounts and personal information. Specifically:

  • Encrypted connectionsThe site only works over HTTPS, and browsers are told to always use it. Sign-in cookies are secure and not readable by page scripts.
  • Password hashingPasswords are stored only as salted one-way hashes. Nobody at Earnify can see your password, and we will never ask for it.
  • Payout safeguardsWithdrawals above R50 need a one-time code emailed to you. Capitec and bank EFT payouts, payouts to a method added in the last 48 hours, and any withdrawal from an account less than 7 days old start with a 48-hour security hold. Payout times count from the end of the hold.
  • Access controls and audit recordsStaff access is limited by role and permission, and actioning a payout needs a specific permission. Financial and security events are written to an audit log.
  • Fraud preventionSign-in and form rate limits, duplicate-account and bot checks, and signed provider callbacks, so rewards can't be credited by forged requests.
  • Minimal identity dataVerification uses your South African ID number only. We never ask for a photo or copy of your ID, and screenshots you send with a missing-reward report have hidden image data removed.

No internet service can guarantee absolute security. If a compromise affects personal information, we will investigate and notify affected people and authorities when the law requires.

What we keep, and for how long

  • Profile and contact details: while your account is open, then deleted or de-identified when you delete it.
  • Wallet, payout, accounting, audit and fraud records: kept for as long as the law requires or allows, in de-identified form after deletion.
  • Missing-reward screenshots: deleted 30 days after the report is resolved.
  • Support and privacy requests: kept while needed to answer them and show how they were handled.
  • Data held by offer providers: partners such as survey and offer walls keep their own records under their own policies. Deleting your Earnify account doesn't delete them; see section 6 of the Privacy Policy for how to contact them.

What we publish

Review comments appear only if the member allowed it, without their name. Published comments never include names, contact details, bank accounts or ID numbers. We don't sell your name, phone number or email address.