TRUE POTENTIAL App — TERMS OF USE & PRIVACY POLICY
PART A: TERMS OF USE
1. ACCEPTANCE OF TERMS
1.1. By creating an account on the True Potential App, you agree to these Terms of Use and our Privacy Policy.
1.2. These Terms govern your use of the True Potential app ("App"), operated by True Potential, a coaching business owned by Ivan Venter, a sole proprietor registered in South Africa ("we", "us", or "our").
1.3. If you do not agree with these Terms, do not use the App.
1.4. We may update these Terms from time to time. Material changes will be notified by email and/or in-app banner. Continued use after changes constitutes acceptance.
2. ELIGIBILITY
2.1. You must be at least 18 years old to use the App.
2.2. By using the App, you represent that you are at least 18 years of age.
2.3. The App is not intended for children. We do not knowingly collect personal information from anyone under 18.
3. DESCRIPTION OF SERVICE
3.1. The App is a free progressive web app that provides Christian spiritual reflection prompts, including:
- Morning reflection (verse, reflection, gratitude)
- Evening reflection (what went well, where you saw Jesus, challenges)
- Habit tracking
- Streak counting and history
- Data export
3.2. The App is provided free of charge. In exchange for free access, you agree to receive occasional emails from us (see Section 5 below).
4. NOT PROFESSIONAL ADVICE — IMPORTANT DISCLAIMER
4.1. The App provides spiritual reflection prompts and devotional content for personal enrichment.
4.2. THE APP IS NOT A SUBSTITUTE FOR:
- Professional counselling or psychotherapy.
- Medical advice, diagnosis, or treatment.
- Pastoral care from a qualified minister.
- Life coaching (unless separately arranged through True Potential's coaching services).
- Mental health crisis intervention.
4.3. If you are experiencing a mental health crisis, please contact:
- SADAG (South African Depression and Anxiety Group): 0800 567 567
- Lifeline: 0861 322 322
- Suicide Crisis Line: 0800 567 567
4.4. You are solely responsible for your own physical, mental, and emotional well-being. Any decisions you make based on App content are your own responsibility.
5. THE EXCHANGE: FREE APP FOR YOUR EMAIL
5.1. The Daily Reflection section of the App is completely free to use. In exchange for free access, your email address will be added to our mailing list, through which we share occasional insights, devotionals, coaching resources, and notifications of new services or workshops.
5.2. This exchange is the basis on which we offer the App for free. Without this exchange, we would not be able to provide the service at no cost.
5.3. By creating an account, you acknowledge and agree that:
- Your email will be used for both App authentication and our marketing communications
- You will receive occasional emails from us (typically 1-2 per week).
- This is a condition of using the free App.
5.4. YOU CAN UNSUBSCRIBE AT ANY TIME. Every email includes a one-click unsubscribe link. When you unsubscribe:
- You will stop receiving marketing emails from us.
- You will still receive essential service emails (password reset, account verification, security alerts).
- Your App access and data will continue to work normally — unsubscribing does NOT affect your account.
5.5. Important: Under South African law (POPIA), because you have an existing customer relationship with us, we are permitted to send you marketing communications related to similar products and services. You always retain the right to opt out. For EU users, see Section 13 of our Privacy Policy.
5.6. We will never sell, rent, or share your email with third parties for their marketing purposes.
6. USER CONTENT
6.1. You retain ownership of all reflection entries, habits, and other content you create in the App ("Your Content").
6.2. By using the App, you grant us a limited, non-exclusive licence to store, process, and display Your Content solely for the purpose of providing the App's functionality to you.
6.3. We do not share, sell, or distribute Your Content to third parties.
6.4. You are responsible for maintaining backups of your data. We provide an export function but are not liable for data loss beyond our reasonable control.
7. PROGRESSIVE WEB APP SPECIFICS
7.1. The App is a progressive web app (PWA). This means:
- It runs in your web browser and can be installed to your home screen.
- It works offline using a service worker that caches content on your device.
- Your data is stored on our servers (Supabase) and synchronised when you're online.
- Local storage on your device is used for preferences and offline functionality.
7.2. We do not guarantee uninterrupted offline functionality. Sync requires internet connectivity.
7.3. The App is not distributed through Google Play or the Apple App Store. We may choose to list it there in the future, at which point additional terms may apply.
8. INTELLECTUAL PROPERTY
8.1. The App's design, branding, logos, and original content (excluding Your Content and Bible verses) are owned by us.
8.2. Bible verses quoted in the App are from publicly available translations and are used under fair dealing for spiritual reflection purposes.
8.3. True Potential's business name, logos, slogans, and related marks may not be used without permission. (See our website Disclaimer for full trademark and copyright terms.)
9. LIMITATION OF LIABILITY
9.1. To the maximum extent permitted by South African law, we shall not be liable for any indirect, incidental, or consequential damages arising from your use of the App.
9.2. Our total liability shall not exceed the amount you paid for the service (R0 for the free tier).
9.3. Nothing in these Terms excludes liability for:
- Gross negligence.
- Fraud.
- Personal injury or death caused by negligence.
- Any other liability that cannot be excluded by law under the Consumer Protection Act (2008).
10. TERMINATION
10.1. You may delete your account at any time via Settings → Delete My Account.
10.2. Upon deletion, we will remove your personal data within 30 days, except where we are legally required to retain it.
10.3. Deleting your account also removes you from our mailing list.
10.4. We reserve the right to suspend or terminate accounts that violate these Terms.
11. GOVERNING LAW
11.1. These Terms are governed by the laws of the Republic of South Africa.
11.2. Any disputes shall be resolved in the courts of South Africa.
11.3. Notwithstanding the above, if you are a resident of the European Union, you retain all rights under the GDPR regardless of the governing law clause.
12. GENERAL
12.1. If any provision of these Terms is found unenforceable, the remaining provisions remain in effect.
12.2. These Terms, together with our Privacy Policy, constitute the entire agreement between you and us regarding use of the App.
12.3. Our website Disclaimer (true-potential.co.za/disclaimer) applies to all coaching and spiritual content referenced through the App, including the Personal Responsibility, Medical Disclaimer, General Advice Disclaimer, Liability Disclaimer, and Guarantee Disclaimer provisions therein.
12.4. For privacy and data protection matters, our Privacy Policy (below) takes precedence.
═══════════════════════════════════════════════════════════
PART B: PRIVACY POLICY
═══════════════════════════════════════════════════════════
1. INTRODUCTION
1.1. True Potential ("we", "us", or "our") operates the True Potential app ("App"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the App.
1.2. This Privacy Policy should be read alongside our Terms of Use and our website Privacy Policy (true-potential.co.za/privacy-policy). Where there is a conflict, this App Privacy Policy takes precedence for App-related matters.
1.3. By creating an account, you consent to the collection and use of your information as described in this policy.
2. INFORMATION OFFICER
2.1. In compliance with the Protection of Personal Information Act (POPIA), our Information Officer is:
- Name: Ivan Venter
- Role: Information Officer, True Potential (the business)
- Email: ivanventer@true-potential.co.za
- Registration: Registered with the South African Information Regulator
2.2. You may direct any privacy-related queries, complaints, or requests to the Information Officer at the email above.
3. WHAT WE COLLECT
3.1. Personal Data we collect when you create an account:
- Email address (used for authentication AND our mailing list — see Section 5)
- Password (stored as a hash via Supabase Auth — we cannot read your password)
- Display name (optional)
3.2. Content you create in the App:
- Morning reflection entries (verse, reflection, gratitudes)
- Evening reflection entries (what went well, where you saw Jesus, challenges)
- Habit tracking data
- Streak and history data
3.3. Technical data collected automatically:
- Device type and browser (for App functionality)
- Session tokens (for authentication, stored in browser localStorage)
- Service worker cache data (for offline functionality)
3.4. Marketing data:
- Mailing list subscription status
- Email open and click data (from email service provider)
- Unsubscribe status
3.5. We do NOT collect:
- Precise geolocation data
- Contacts or address book
- Photos or media files
- Health or biometric data
4. HOW WE USE YOUR DATA
4.1. We process your data for the following purposes, each with a specific legal basis:
| Purpose | Legal Basis | Details |
|---------|------------|--------|
| Account creation & authentication | Contract (POPIA §10(1)(b)) | Necessary to provide the App service |
| Storing reflection entries | Contract (POPIA §10(1)(b)) | Core App functionality you signed up for |
| Habit tracking & streaks | Contract (POPIA §10(1)(b)) | Core App functionality |
| Data export | Contract (POPIA §10(1)(b)) | Feature you requested |
| Mailing list (insights & resources) | Existing customer relationship (POPIA §69(2)) + Legitimate interest (GDPR Art.6(1)(f)) | The exchange for free App access — see Section 5 |
| Service improvements | Legitimate interest (POPIA §10(1)(c)) | Anonymised usage patterns only |
| Security & fraud prevention | Legitimate interest (POPIA §10(1)(c)) | Protecting your account|
5. THE EXCHANGE: FREE APP FOR YOUR EMAIL
5.1. The App is free because it is funded through our coaching business. In exchange for free access, your email address is added to our mailing list.
5.2. This means your email serves TWO purposes:
- **App authentication** — so you can log in and use the App
- **Marketing communications from us** — occasional insights, devotionals, and coaching resources, and notifications about workshops or new products from True Potential (typically 1-2 per week)
5.3. This exchange is transparent and upfront. You know before you sign up that your email will be used for both purposes.
5.4. SOUTH AFRICAN USERS (POPIA):
- Under POPIA Section 69(2), we are permitted to send marketing communications to existing customers, provided we give you the opportunity to opt out.
- You can unsubscribe from marketing emails at any time (see Section 5.6).
- Unsubscribing does NOT affect your App access.
5.5. EU USERS (GDPR):
- For EU users, we rely on legitimate interest (Article 6(1)(f)) as the legal basis for marketing communications, since:
- The App is provided free of charge in exchange for receiving communications.
- The marketing is related to similar services (Christian growth, coaching, spiritual content).
- You always have the right to object to this processing.
- If you object to receiving marketing, you may continue using the App but will no longer receive our resources by email.
- We will always honour an objection/opt-out promptly.
5.6. HOW TO UNSUBSCRIBE:
- Every email from us includes a one-click unsubscribe link
- You can also manage your preferences in Settings → Email Preferences
- Unsubscribing stops marketing emails only — you will still receive essential service emails (password reset, account verification, security alerts)
- Or email us at ivanventer@true-potential.co.za requesting that we unsubscribe you.
5.7. We will never sell, rent, or share your email with third parties for their marketing purposes.
6. DATA PROCESSING & STORAGE
6.1. We use Supabase Inc. as our data processor to store and manage your data.
6.2. Supabase details:
- Company: Supabase Inc. (USA)
- Compliance: SOC 2 Type 2 certified, regularly audited.
- Data storage: AWS servers (West EU Ireland).
- Security: Data encrypted at rest and in transit.
- Subprocessor: Amazon Web Services (AWS).
- Data Processing Agreement: Available upon request.
6.3. Your data may be stored on servers outside South Africa. By using the App, you consent to international data transfers as described in this policy.
6.4. We have taken reasonable steps to ensure that Supabase provides adequate protection for your personal information, including verifying their SOC 2 Type 2 certification and security practices.
6.5. For email marketing, we use an email service provider that processes email addresses and send data on our behalf. This provider complies with POPIA and GDPR requirements.
7. DATA RETENTION
7.1. We retain your data only for as long as necessary:
| Data Type | Retention Period | Reason |
|-----------|-----------------|--------|
| Account data (email, password hash) | Until you delete your account | Contractual necessity |
| Reflection entries | Until you delete your account or individual entries | Service functionality |
| Habit & streak data | Until you delete your account | Service functionality |
| Mailing list subscription | Until you unsubscribe or delete your account | The exchange for free access |
| Email engagement data | 24 months | Improving email relevance |
| Technical logs | 90 days | Security and debugging |
| Deleted account data | 30 days after deletion, then permanently erased | Grace period |
| Anonymised usage statistics | Indefinitely (anonymised) | Service improvement |
7.2. When you delete your account, you are also removed from our mailing list.
8. YOUR RIGHTS
8.1. Under POPIA (South Africa) and GDPR (EU), you have the following rights:
| Right | What it means | How to exercise it |
|-------|---------------|-------------------|
| Access | Request a copy of all personal data we hold about you | Settings → Export My Data, or email ivanventer01@gmail.com |
| Correction | Request correction of inaccurate data | Edit your profile, or email us |
| Deletion | Request deletion of your personal data | Settings → Delete My Account, or email us |
| Objection | Object to processing based on legitimate interest (including marketing) | Email us, or click unsubscribe in any marketing email |
| Portability | Receive your data in a structured, machine-readable format | Settings → Export My Data |
| Withdraw consent | Withdraw consent for marketing emails | Unsubscribe link in any email, or account settings |
| Complain | Lodge a complaint with a supervisory authority | SA: inforegulator.org.za | EU: Your local DPA |
8.2. We will respond to your request within 30 days.
8.3. There is no fee for exercising your rights.
8.4. Objecting to marketing emails does NOT affect your App access. You can continue using the App without receiving marketing.
9. COOKIES & LOCAL STORAGE
9.1. The App uses browser localStorage and a service worker for:
- Maintaining your login session (authentication token).
- Saving your preferences for offline use.
- Caching App content for offline functionality.
9.2. These are NOT tracking cookies. They are essential for App functionality and do not collect personal data beyond what is necessary for the service.
9.3. We do NOT use:
- Third-party advertising cookies.
- Cross-site tracking cookies.
- Analytics cookies that identify individual users.
9.4. If we add analytics in the future, we will use privacy-friendly tools that do not track individual users, and we will seek your consent where required.
10. SECURITY
10.1. We take reasonable measures to protect your data, including:
- Encrypted data transmission (HTTPS/TLS)
- Encrypted data storage at rest (via Supabase).
- Row-level security on all user data tables.
- Password hashing (never stored in plain text).
- Regular security reviews.
10.2. No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
11. DATA BREACH NOTIFICATION
11.1. If we become aware of a data breach that affects your personal information, we will:
- Notify you via email within a reasonable time.
- Notify the Information Regulator (South Africa) as required by POPIA.
- For EU users: Notify the relevant supervisory authority within 72 hours as required by GDPR.
12. CHILDREN'S PRIVACY
12.1. The App is not intended for anyone under 18.
12.2. We do not knowingly collect personal information from children.
12.3. If we discover that we have collected data from someone under 18, we will delete it promptly.
13. INTERNATIONAL USERS
13.1. The App is accessible worldwide. If you are accessing the App from outside South Africa:
- Your data will be processed in South Africa and on Supabase's servers (AWS region as selected).
- South African law applies to these terms.
- If you are an EU resident, you retain all GDPR rights regardless of the governing law.
- If you are a California resident, you retain all CCPA rights as described in our website Privacy Policy.
13.2. We have not appointed an EU representative. EU users may contact us directly at ivanventer@true-potential.co.za.
14. CHANGES TO THIS POLICY
14.1. We may update this Privacy Policy from time to time. Changes will be notified by:
- Email notification for material changes.
- In-app banner requiring acceptance for significant changes.
- Updated "Last Updated" date at the top of this document.
14.2. We will honour the terms that were in effect when you last accepted them for 30 days after a change.
14.3. Continued use after changes constitutes acceptance of the updated policy.
15. CONTACT
15.1. For privacy questions, data requests, or complaints:
- Information Officer: Ivan Venter
- Email: ivanventer@true-potential.co.za
- Website: true-potential.co.za
15.2. For coaching-related inquiries (not data/privacy):
- See true-potential.co.za/contact