Privacy Policy

Last updated: June 7, 2026

1. Who we are

The Super Group is operated by Supergroup Digital (Pty) Ltd ("we," "us," or "our"), a company registered in the Republic of South Africa (registration number 2026/321165/07). We are the "responsible party" for your personal information under the South African Protection of Personal Information Act, 2013 (POPIA), and the "controller" under the EU/UK General Data Protection Regulation (GDPR) where it applies.

This Privacy Policy explains how we collect, use, share, and protect your personal information when you use The Super Group mobile application(the "App") and our website at thesupergroup.co(the "Site"), together the "Services" — a verified community platform for superyacht crew.

2. Information we collect

The Site is an informational marketing site and does not collect personal information from visitors.

From the App, to provide the Services we collect:

• Account & profile information — name, email address, phone number, date of birth, and the professional details you add to your crew profile (rank, nationality, vessel, and maritime licences or certificates).
• Verification documents — documents you upload so we can verify you as crew, such as a CV, Certificate of Competency, or sea-service record.
• Content you create — messages you send in rooms and direct messages, photos and videos (including your avatar and images in chats or marketplace listings), your bio, and any marketplace or job listings you post.
• Approximate location — only if you opt in to location sharing. Your device reads your location, but we only ever receive and store an approximate (coarse) location that is deliberately degraded by roughly 2.5 km. You can turn this off at any time in the App or your device settings.
• Identifiers — a user ID we assign to your account, and a device identifier (push-notification token / per-install identifier) used to deliver notifications.
• Usage and activity data — how you interact with the App, including presence and last-seen status, in-app actions, and in-app search activity.
• Diagnostics — crash reports and performance data that help us keep the App stable. These are not linked to your identity.

We do not use your data for advertising, we do nottrack you across other companies' apps or websites, and we do not use third-party advertising identifiers.

3. How we use your information

• To create and operate your account and crew profile.
• To verify that you are crew (using your verification documents).
• To enable the App's core features — messaging, the community directory and map, jobs, and the marketplace.
• To send you notifications you have asked for.
• To keep the Services safe — preventing, detecting, and acting on abuse, objectionable content, and fraud (including moderation, reporting, and user-blocking tools).
• To diagnose problems and improve performance and reliability.
• To comply with our legal obligations.

4. Our lawful basis for processing

We process your personal information where it is necessary to provide the Services you have asked for (performance of our agreement with you), where you have given consent (for example, optional location sharing — which you may withdraw at any time), where we have a legitimate interest (such as keeping the platform safe and secure), and where we are required to by law. This satisfies the conditions for lawful processing under POPIA and the lawful bases under the GDPR.

5. How we share information

We do not sell or rent your personal information, and we do not share it with third parties for their own marketing. We share information only with service providers who process data on our behalf, under contract and only as needed to run the Services:

• Supabase — secure database, file storage, and authentication.
• Sentry — crash and performance diagnostics.
• Expo — delivery of push notifications.

We may also disclose information where required by law, to protect the rights and safety of our users or the public, or as part of a corporate transaction (such as a merger or acquisition).

Content you choose to share with other members — your profile, posts, messages, and listings — is visible to those members as part of how the Services work.

6. Storage, security, and cross-border transfer

Your information is stored using our cloud providers with industry-standard security, and is encrypted in transit (HTTPS/TLS). Our primary database, file storage, and crash diagnostics are hosted in the European Union (our database and storage in Frankfurt, Germany; our diagnostics provider in Germany). Push-notification delivery (Expo) may involve processing in the United States. Because you may use the Services from anywhere, and because we are based in South Africa, your information may be transferred across borders. Where that happens, we rely on the safeguards permitted under POPIA section 72 and the GDPR (such as recipients bound by comparable data-protection obligations).

7. How long we keep your information

While you are a member: we keep your account, profile, verification documents, and content for as long as your account is active, so the Services work as intended.

When you delete your account: we delete or irreversibly anonymise your personal information without undue delay. Deletion runs immediately when you request it: we remove your uploaded files, scrub the content of your messages, delete your listings, jobs, reactions and other content, and anonymise your profile. This includes your verification documents (CV, certificates, sea-service records), which are removed promptly.

Limited retention after deletion: we may keep a limited subset of information for up to 12 months after deletion, and only where we have a lawful reason to do so:

• Safety and moderation records — records of reported content and of blocking or abuse actions, so we can enforce our zero-tolerance policy and address repeat abuse.
• Legal, tax, and dispute records — where the law requires us to keep them, or where we need them to establish, exercise, or defend a legal claim.
• Routine encrypted backups — which are overwritten on their normal rotation cycle.

After that period these records are deleted or anonymised.

8. Deleting your account

You can delete your account at any time, directly in the App (Settings → Delete Account). If you cannot access the App, you can request deletion by emailing hello@thesupergroup.co — you do not need to reinstall the App. See our Support page for the full account-deletion pathway. Deletion is handled as described in Section 7.

9. Your rights

Depending on where you live, you have the right to access the personal information we hold about you, to ask us to correct or delete it, to object to or restrict certain processing, to withdraw consent, and to data portability. To exercise any of these rights, contact us at hello@thesupergroup.co. We will respond within the timeframes required by applicable law.

10. POPIA (South Africa)

As the responsible party, we process your personal information in line with the conditions for lawful processing set out in POPIA. Our Information Officer can be reached at hello@thesupergroup.co. If you believe we have not handled your personal information lawfully, you have the right to lodge a complaint with the Information Regulator (South Africa) — Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191; tel. 010 023 5200 or 0800 017 160 (toll-free); email enquiries@inforegulator.org.za.

11. GDPR (EU/EEA & UK)

If you are in the European Economic Area or the UK, you have the rights described in Section 9, and you may lodge a complaint with your local data-protection authority. Our lawful bases are described in Section 4.

12. CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to opt out of its "sale" or "sharing." We do not sell or share personal information as those terms are defined under the CCPA.

13. Children's privacy

The Services are intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

15. Contact us

For any question about this Privacy Policy or your personal information, contact us at hello@thesupergroup.co.