YOUR SPACE, WITH CLARITY
Privacy Policy
Your personal space deserves clear information about what happens to your data.
Last updated: 13 October 2026
What we collect and why
The responsible party is Vanessa du Plessis, trading as Sovereign, at 29 Grace Road, Observatory, Johannesburg, 2187, South Africa; privacy enquiries: hello@hersovereign.com. We process your account email, authentication information, profile and the records you choose to enter to provide your workspace. These may include income and spending, goals, journals, relationships, spiritual practices, health measurements, cycle information and medication records. We also process membership, payment confirmation and cancellation records to manage subscriptions, and technical information needed for security and troubleshooting. Required account details enable sign-in; most personal workspace entries are optional.
Business application documents
Business applicants provide a logo, contact details, operating location, evidence of business activity and an applicant identity document for manual review. Registered businesses also provide registration documents. Supporting identity and registration documents are private to the applicant and authorised reviewer and are not published in listings. We use them to review identity, authority and eligibility; submission does not guarantee approval. Contact hello@hersovereign.com for correction or deletion requests and the retention period applying to these documents.
Sensitive information is your choice
Health, religious and other sensitive entries need particular care. Do not enter sensitive information unless you want Sovereign to store and process it for the relevant feature. You may leave them blank, remove them or contact us to withdraw consent and request deletion. Withdrawing this consent does not cancel your subscription. We do not use these entries for advertising.
Contacts, location and sharing
Emergency-contact names and phone numbers are stored with your plan. Obtain their agreement before adding them and direct them to this notice. During SOS setup, choose Enable location and grant browser permission on your device. While Sovereign is open and location is allowed, recent coordinates are kept in device memory; they are sent to the provider only when you deliberately trigger an alert. The permission applies to all three emergency contacts. Browsers can revoke or expire permission. Triggering SOS does not request a new location permission or wait for a location fix. A pin captured within the previous two minutes, its approximate accuracy and capture time may be included in a help message. If no recent pin is available, the help message is sent without one. This is a captured pin, not continuous tracking. Manual messaging passes the message to the app you open; it is sent only when you send it there. If automatic SMS is active, the sending provider processes the recipient numbers and message, including any location. Support-circle posts are shared with circle members. External WhatsApp groups and businesses apply their own privacy terms.
Service providers and overseas processing
Supabase provides authentication. Afrihost provides application hosting and storage, including saved plans. PayFast handles checkout, card details and recurring payments; Sovereign receives subscription identifiers and payment status, not your full card number or CVV. Twilio processes automatic SMS when connected. Our email provider handles support correspondence. Providers may process information outside South Africa. We must use lawful transfer arrangements and appropriate safeguards; contact us for information about the arrangements applying to your data.
Trial verification and eligibility
We use your verified email and mobile number to help prevent duplicate personal profiles and repeated free trials. When you request a verification SMS, Twilio processes your number and code message. Codes expire after ten minutes and allow five attempts; sending is rate limited. We keep keyed fingerprints and trial dates as limited eligibility records separate from your workspace. These fingerprints are not anonymous and may remain after account deletion to enforce the one-trial rule. Temporary verification and rate-limit records are removed after their short security lifecycle. Verification does not publish your number or automatically add it to your SOS profile. Contact hello@hersovereign.com about a reassigned/shared number, an incorrect match or retained eligibility records.
Security and retention
Access to private workspace requests requires authenticated sign-in. No internet service can promise absolute security. Keep your device and password secure, and log out on shared devices. Subscription cancellation does not automatically delete your account or saved plan. We retain records needed to provide the service and meet legal, accounting, security and dispute obligations, and delete or de-identify records when no longer needed. Backups may retain records for their backup lifecycle. Contact us for the retention period applying to a particular record.
Your rights and deletion requests
Email hello@hersovereign.com from your account email with “Privacy request” in the subject to request access, correction, deletion, objection to processing or withdrawal of consent. You can clear your private workspace or submit an account deletion request under My Profile → My data & account. Clearing the workspace keeps your login, subscription, application and circle messages. Account closure requires subscription cancellation and transfer or closure of circles you organise. A pending request is not a deleted account; the app shows confirmation only after completion. For support by email, use “Delete my account”. We may verify your identity before acting and will explain any records we must retain and the applicable reason. Do not email passwords, card details or identity documents unless a secure verification process has been agreed. Cancel any active subscription separately to stop future charges. You may complain to the Information Regulator at inforegulator.org.za.
Optional visitor analytics
If you choose Allow visitor analytics in Cookie preferences, Google Analytics measures visits to our public landing, Walk with Vanessa and business affiliate pages, including general traffic sources, browser and device information. It does not receive your private profile fields, journal, health, finance, support-circle or SOS records. We remove URL query strings and fragments and send only the referring website origin. Google may process visitor information outside South Africa. Advertising storage, ad personalisation and Google signals are disabled. No Analytics tag loads before you opt in. You can choose Essential cookies only or withdraw permission in Cookie preferences at any time; withdrawing removes accessible Analytics cookies and stops future collection from this browser, but does not automatically erase already collected data. Google explains its processing at https://policies.google.com/technologies/partner-sites.
Marketing and updates
Creating an account does not subscribe you to promotional emails. Service messages such as email verification, password resets and payment notices are separate from marketing. Promotional communication requires an appropriate lawful basis and an unsubscribe option. We will update this notice when processing changes materially.