What personal information NETRA keeps, why, where, who sees it, how to have your account deleted, and the rights you have under South Africa's Protection of Personal Information Act 4 of 2013 (POPIA).
Who we are
CustomEApps (Pty) Ltd ("we", "us"), a software company registered in South Africa (registration number 2025/952060/07), at 2A Gouritz Street, Aerorand, Middelburg, 1050. We build and run NETRA, an explosives register, and its three apps: NETRA Registry (the company's register), NETRA Inspect (for SAPS explosives inspectors) and NETRA Field (for the drivers of explosives loads), on Windows, Android and iOS, with this website.
This policy covers all of them and the service behind them. Questions go to hallo@customeapps.com.
Our role and your company's role
NETRA is supplied to companies that keep explosives, and to the Explosives Section of the South African Police Service, not to the public. You use it because your company, or your section, has invited you.
For what is kept in its register, your company decides what is recorded and why, and is the responsible party under POPIA; for inspections, the Explosives Section is. We process that information on their behalf as an operator. For your account itself, and for a company's registration with NETRA, we are the responsible party.
What we keep
- Your account: your name, in its parts, your work email and phone number, the companies and roles you hold, the date you agreed to this policy, and when you last signed in. Your password is kept only as a one-way scrambled value our sign-in provider holds; nobody, us included, can read it. Your signing PIN is kept the same way.
- A company's registration: its legal name, kind of business, CIPC registration number, where it works, whether it keeps its own magazine, and the person who registered it.
- Your profile, if you add it: your South African ID number, kept encrypted; every time it is shown again, NETRA writes down who asked and when. Your certificates and appointments as a magazine master or explosives coordinator, your profile picture.
- The register: what you and your colleagues record (magazines and their licences, products, receipts, stock, counts, orders, dispatches and month end), and the documents scanned or attached to them. NETRA writes down who did what, and when, and what each change was. Nothing in a register is ever erased: a change is kept beside what it changed, as the law expects of an explosives register.
- In NETRA Field, the driver's app: the phone's precise location, also while the app is in the background, but only from the moment you start a trip until you arrive: about once a minute, and every 15 seconds after a panic. Never before a trip starts or after it ends. Also your vehicle inspection answers, stop reasons and seal numbers. While a trip runs, the phone shows a notification that says so.
- In NETRA Inspect, for SAPS inspectors: your rank, name, force number and section, the inspections you carry out, the boxes you scan, and the verdicts you sign.
- The camera: only to scan a code, a seal or a document you choose to scan. A licence or permit is read on your device; the scan is kept only when you keep it with its record. Nothing else is taken from your phone.
What we do not keep. NETRA does not read your contacts, messages, microphone or the photos on your phone, and does not follow your location outside a trip. It has no advertising and no advertising or tracking identifier, and we never sell personal information.
Google's own diagnostics. On Android, two parts of the apps come from Google and report to Google for their own diagnostics: the code reader behind the camera scan (Google ML Kit) and the maps (Google Maps). They send the phone's make, model and Android version, the app's version, how quickly they worked, crash and error reports, an identifier for that installation (not for you or the phone), the IP address, and, for the maps, panning and zooming. They do not send what you scan, the register, or your location. Google uses this under its own terms to keep those parts working; it is not passed on.
Why we keep it
- To sign you in and show you only what your role allows.
- To check and approve a company that registers, and to call it.
- To keep the explosives register the law asks your company to keep, and to show who did what in it.
- To keep a load of explosives safe on the road: so its company knows where it is, and help can find the driver after a panic.
- To let the Explosives Section inspect magazines and record what it found.
- To secure the service, find faults, give support and send updates.
- To meet our and your company's legal obligations.
Who sees it
- The people in your company, as far as their role allows.
- The Explosives Section, where the law gives it the right to inspect a register, or where your company asks it to.
- A load on the road: the company that sent it, and the company that ordered it until it arrives. The sending company may also give a link to a trip to people it chooses, such as its control room or insurer; the link shows where the load is and stops working when the trip ends or at the time the company set. The driver's phone number is shown only to the driver's own company.
- NETRA staff, to review companies and to help you when you ask.
We do not share personal information with anyone else, except where the law requires it or your company instructs us to.
Where it is kept, and who processes it
The apps keep a working copy of your company's data on your device, so that they work without signal, and send it over an encrypted connection to a database run for us by Supabase in the European Union (Frankfurt, Germany). Emails (invitations, order notices) are sent for us by Resend. On Android and iOS, maps come from Google Maps; on Windows and this website, from OpenStreetMap. Each acts on our instructions under its own data-protection terms. App updates come from Google Play or from our own update service.
Personal information therefore leaves South Africa. We use only providers bound by data-protection rules substantially like POPIA's, as section 72 of POPIA requires.
Security
Data is encrypted in transit. What each person may see and do is enforced in the database itself, by company and role, not only in the apps. ID numbers are encrypted at rest. Acts the law cares about (receiving, counting, dispatching, certifying a month) are signed with a personal PIN. A company can remove a person's access at any time. No system is perfectly secure; if a breach affects your personal information, we will tell your company, the Information Regulator and the people affected, as POPIA requires.
How long we keep it
Your account details are kept while your account exists. A register, and everything signed in it, is kept for as long as your company holds an agreement with us, and afterwards for as long as the law requires an explosives register to be kept. A trip's positions are kept with that load's dispatch record. When an agreement ends, we return or delete the company's data on its instruction, except what the law requires to be kept.
Cookies
This website sets one cookie, which keeps you signed in. No tracking, no analytics, and no third parties: even its fonts come from this site.
Your rights
Under POPIA you may:
- ask whether we keep personal information about you, and for a copy;
- ask for it to be corrected, or deleted where the law allows;
- object to how it is used, or withdraw consent where use rests on it;
- complain to the Information Regulator (South Africa) at inforegulator.org.za.
Your company's NETRA administrator can correct most of your details and is the right first contact. You may also write to our Information Officer at hallo@customeapps.com.
Deleting your account
To have your NETRA account and the personal details on it deleted, ask your company's NETRA administrator (or your section's, in NETRA Inspect), or email hallo@customeapps.com from the address you sign in with, with the subject "NETRA account deletion". We confirm the request with your company or section and act on it within 30 days.
Your account details are deleted: your sign-in, phone, ID number, profile picture and signing PIN. What you entered in a register, and what you signed, belongs to the company's explosives register, which the law requires to be kept; it stays, with your name on it, for as long as the law says.
Deleting some of your details, keeping your account
To have only some of your details deleted (your phone number, ID number, profile picture or certificates) while you keep using NETRA, remove them yourself on My profile where it lets you, ask your company's NETRA administrator, or email hallo@customeapps.com from the address you sign in with, with the subject "NETRA data deletion", saying what to delete. We confirm the request with your company or section and act on it within 30 days. What the law requires an explosives register to keep (entries, signatures, and the record of a load on the road) stays, for as long as the law says.
Children
NETRA is for people at work with explosives and is not meant for anyone under 18. We do not knowingly keep details of children.
Changes to this policy
We may change this policy. The version at the top is its date. We tell companies' administrators of a material change, and note it in the apps' release notes.
Contact
Information Officer: Thandulwazi Ngwenya, CustomEApps (Pty) Ltd (Reg. No. 2025/952060/07), 2A Gouritz Street, Aerorand, Middelburg, 1050, South Africa.
hallo@customeapps.com · 087 250 0310