Privacy Policy

Phynance (Pty) Ltd, trading as Dosh ("Dosh", "we", "us", or "our"), respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). This Privacy Policy explains what information we collect through our website and the Dosh app, how we use and share it, and the rights you have over it.

By using our website, registering for the Dosh app, or accessing Dosh through your employer, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We collect the following categories of information:

• Identity information — your full name, South African ID number, and date of birth, used to verify who you are.
• Contact information — your cellphone number, email address, and physical address.
• Banking and FICA information — your bank account details and supporting FICA documents (such as bank statements), used to verify your account and pay out advances.
• Employment and payroll information — your employer, salary, pay cycle, and days worked, shared with us by your employer's payroll system to calculate what you've earned.
• Transaction information — the advances you request, the fees charged, and your repayment history.
• Device and usage information — technical information such as your IP address, browser type, and how you interact with our website and app.

2. How We Use Your Information

We use your information to:

• Verify your identity and eligibility to use Dosh;
• Calculate the portion of your earned wages available to you and process advance requests;
• Communicate with you about your account, advances, and agreements;
• Detect and prevent fraud, and comply with our legal obligations, including FICA;
• Improve our website, app, and services; and
• Respond to your enquiries and provide customer support.

3. Our Legal Basis for Processing

We only process your personal information where we have a lawful basis to do so under POPIA — typically because processing is necessary to perform our agreement with you, to comply with a legal obligation (such as FICA verification), because you've given us consent, or because we have a legitimate interest in operating and securing our service that doesn't override your rights.

4. Who We Share It With

We do not sell your personal information. We share it only where necessary, with:

• Your employer — for payroll integration, salary verification, and deduction of advances and fees from your pay;
• Service providers — such as our hosting, payment, and SMS/communication providers, who act on our instructions and are bound by confidentiality obligations;
• Regulators and authorities — where required by law, such as for FICA and tax compliance; and
• Professional advisors — such as auditors or legal counsel, where necessary.

5. How We Protect Your Information

We use industry-standard technical and organisational measures — including encryption, access controls, and secure infrastructure — to protect your personal information against loss, unauthorised access, alteration, or disclosure. Access to your information within Dosh is restricted to staff who need it to perform their role.

6. How Long We Keep It

We retain your personal information for as long as your account is active and for a reasonable period afterwards, to meet our legal, accounting, and regulatory obligations (including record-keeping requirements under FICA), resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymise it.

7. Your Rights

Under POPIA, you have the right to:

• Request access to the personal information we hold about you;
• Request that we correct or update inaccurate or outdated information;
• Request that we delete personal information we no longer have a lawful reason to keep;
• Object to the processing of your personal information in certain circumstances; and
• Lodge a complaint with the Information Regulator of South Africa if you believe we've handled your information unlawfully.

To exercise any of these rights, contact us using the details in the "Contact Us" section below.

8. Cookies on This Website

Our website uses essential cookies to keep you securely signed in to the employee portal and to remember your preferences. We don't use cookies for third-party advertising.

9. Children's Privacy

Dosh is intended for use by employed adults and is not directed at children. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We'll post the updated version here with a new "Last updated" date.