Yugrow Privacy Policy
Last updated: 11 May 2026
Yugrow ("we", "us", "our") values your privacy. This Privacy Policy explains how we collect, use, share and protect personal information when you use our website, mobile app and related services ("Services"). It applies to all Yugrow products and services.
By using our Services, you agree to the practices described in this policy.
1. Information we collect
1.1 Information you provide
We collect information when you:
- Create an account in the Yugrow app
- Complete the Leadership ROI Benchmark on our website
- Book a call with our team
- Contact us directly
- Subscribe to communications
This may include:
- Name
- Email address
- Phone number
- City
- Company information
- Leadership ROI Benchmark responses
- Any other information you choose to share
If you apply for a role with us, we may also collect CV and employment information.
Payments are processed by third-party providers. Yugrow does not store your payment card details.
Providing this information is generally voluntary. However, some Services cannot be provided without specific information (for example, we cannot generate a Leadership ROI Benchmark report without your responses, and we cannot create an account without an email address).
1.2 Website analytics and cookies
We use cookies and similar technologies to operate our website and understand how visitors use it. This includes:
- Pages viewed
- Time spent on site
- General location (via IP address)
- Device and browser type
We use:
- Essential cookies (required for the site to function)
- Analytics cookies (Google Analytics, Microsoft Clarity) to understand site performance and improve user experience
You can manage your cookie preferences through our cookie banner or your browser settings. You can change your preferences at any time. Disabling analytics cookies will not affect your ability to use the website.
1.3 Information collected when you use the app
When you use our Services, we may collect:
- Device information (IP address, browser, operating system, device identifiers)
- Usage data (features used, dates and times of activity)
- General location (derived from IP)
This helps us improve performance, reliability and user experience.
Use of Google Health Connect
Yugrow's mobile app uses Google Health Connect to access step count and cadence data from your fitness tracker. This allows us to provide movement insights and rewards.
We qualify under the following Health Connect categories:
- Fitness & Wellness
- Rewards
You control this access and can revoke it at any time via Health Connect settings.
We do not sell or share your health data. It is used only to provide Yugrow services and improve our products.
Google integrations (Limited Use)
If you sign in with Google or connect Health Connect, any data received from Google APIs is handled in accordance with Google API Services User Data policies and Health Connect Limited Use requirements.
2. Legal basis for processing
Under POPIA, we process your personal information on the following lawful bases:
- Consent — where you have given clear consent for us to process your information for a specific purpose (such as marketing communications)
- Contract — where processing is necessary to provide the Services you have requested
- Legitimate interests — where processing is necessary for our legitimate business interests, such as improving our products, preventing fraud, and maintaining security
- Legal obligation — where we are required by law to process your information
3. How we use your information
We use your information to:
- Provide and operate Yugrow
- Generate Leadership ROI Benchmark reports
- Respond to enquiries and booking requests
- Communicate with you about our Services
- Improve our products and website
- Personalise your experience
- Prevent fraud and maintain security
- Meet legal and regulatory obligations
- Create aggregated, anonymised insights
We do not sell personal information.
4. How we share information
We may share information with:
- Service providers who help us operate Yugrow (hosting, analytics, scheduling, support)
- Affiliates
- Third-party integrations you choose to connect
We may also disclose information:
- If required by law
- To protect rights, safety or property
- In connection with a business transaction (such as acquisition or merger)
- With your consent
Analytics providers (Google Analytics and Microsoft Clarity) may collect usage data when you visit our website, in line with your cookie preferences.
5. International transfers
Yugrow is based in South Africa. Some of the third-party services we use to operate Yugrow store and process data outside South Africa. These include:
Infrastructure and hosting:
- Squarespace (website hosting) — primarily United States
- Amazon Web Services (application backend hosting) — primarily Ireland (EU)
- Self-hosted MongoDB on AWS infrastructure (region as per the backend application, which is currently Ireland)
Analytics and performance:
- Google Analytics — primarily United States and EU
- Microsoft Clarity — primarily United States and EU
Communication and scheduling:
- Microsoft 365 (email and collaboration tools used to communicate with you) — primarily United States and EU
- Microsoft Bookings — primarily United States and EU
- Mailchimp (email marketing and transactional emails) — primarily United States
Authentication and integrations:
- Firebase Authentication (mobile app login) — primarily United States and EU
- Google OAuth (calendar and meeting integrations) — primarily United States and EU
- Microsoft OAuth (calendar and meeting integrations) — primarily United States and EU
Mobile app integrations:
- Google Health Connect — primarily United States and EU
Where personal information is transferred outside South Africa, we rely on one or more of the following safeguards as required under section 72 of POPIA:
- The recipient is subject to laws, binding corporate rules, or binding agreements that provide an adequate level of protection
- Your consent to the transfer
- The transfer is necessary for the performance of a contract with you
- The transfer is for your benefit and consent is not reasonably practicable
We review our service providers periodically to ensure they continue to meet these requirements.
6. Data retention
We retain personal information only for as long as necessary to provide the Services and fulfil the purposes described in this policy, plus any additional period required to comply with our legal, accounting, or reporting obligations (typically up to 7 years after your last interaction with us).
Where you request deletion of your account or personal information, we will delete it promptly except where we are legally required to retain it. Some anonymised or aggregated data, which can no longer be linked to you, may be retained indefinitely for analytics purposes.
7. Account deletion (mobile app)
You can delete your Yugrow account in the app:
1. Log in
2. Go to Profile
3. Select Account Information
4. Tap Delete Account
5. Confirm
This will permanently remove your data, except where we are legally required to retain certain information.
Please email us at help@yugrow.co if you need any help.
8. Your rights under POPIA
You have the following rights in relation to your personal information:
- The right to be notified that personal information is being collected and how it will be used
- The right to access the personal information we hold about you
- The right to request correction of inaccurate or incomplete information
- The right to request deletion of your information
- The right to object to processing of your information in certain circumstances
- The right to withdraw consent at any time (where processing is based on consent)
- The right to lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, please contact us at hello@yugrow.co.
You may also contact the Information Regulator directly:
The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
PO Box 31533, Braamfontein, Johannesburg, 2017
Email: complaints.IR@justice.gov.za
Website: https://inforegulator.org.za
9. Your choices
- You may unsubscribe from marketing emails at any time
- You may manage cookie preferences via the cookie banner
- You may request access, correction or deletion of your data
- Some features may not work if certain information is not provided
10. Security
We use reasonable technical and organisational measures to protect your information, but no online system is completely secure. We will notify you and the Information Regulator without undue delay if we become aware of a security compromise that affects your personal information, as required under POPIA.
11. Children
Our Services are not intended for children under 13, and we do not knowingly collect their data. If you believe we have collected information from a child, please contact us at hello@yugrow.co and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the website or app. Continued use of our Services after changes are posted constitutes acceptance of the updated policy.
13. Information Officer
The Information Officer for Yugrow is responsible for ensuring compliance with POPIA and is your primary point of contact for privacy-related matters.
Kele Boakgomo: kele@yugrow.co
14. Contact us
If you have questions or wish to exercise your privacy rights, please email us at:
For privacy-specific matters, please contact the Information Officer using the details above.