CheckiCover Privacy Policy & POPIA Notice

CheckiCover is a digital information and legacy-management service designed to help individuals organise important information so that it can be more readily traced and accessed by authorised persons when needed. This may include insurance and funeral policy information, wills and other uploaded documents, beneficiary information, emergency contacts and, where the customer elects to use the feature, device access credentials.

CheckiCover's role is to provide secure information storage, organisation and controlled access in accordance with the customer's instructions and applicable law. CheckiCover does not determine inheritance, ownership of assets, succession, estate administration or the legal entitlement of any beneficiary.

Depending on the services selected and the information the customer chooses to provide, CheckiCover may collect and process the following categories of information:

• Identity information: name, identification information, date of birth and information reasonably required for identity verification.
• Contact information: telephone number, email address, physical or postal address and other contact details.
• Beneficiary information: names, contact details, relationship information and other information supplied about beneficiaries or authorised persons.
• Policy and financial-protection information: insurance, funeral policy and related policy details, policy numbers, provider information and supporting records.
• Wills and legal/estate documents: wills and other documents that the customer elects to upload or store.
• Uploaded documents: documents and records supplied by the customer for storage, tracing, administration or beneficiary access.
• Emergency and family contact information: details of people the customer designates as emergency contacts or relevant contacts.
• Account and platform information: login details, account settings, preferences, activity records, communications and information relating to use of CheckiCover.
• Billing and transaction information: subscription, payment, billing and transaction-related information necessary to administer paid services.
• Device and digital legacy information: device identifiers, usernames, passwords, PINs, passcodes, recovery information, security questions, recovery codes and other access credentials voluntarily provided for digital legacy purposes.
• Technical and security information: IP address, browser or application information, device information, logs, authentication records and security-related events, where collected through the platform.

CheckiCover may allow customers to voluntarily store information that can assist an authorised person in accessing a customer's personal devices after the customer's death. This may include mobile phones, tablets, laptops, computers and other electronic devices.

Device Access Credentials may include passwords, PINs, passcodes, usernames, recovery information, recovery codes, security questions and similar credentials. These credentials are provided voluntarily by the customer and are processed solely to support the customer's digital legacy instructions.

CheckiCover will not use stored Device Access Credentials for advertising, profiling, marketing or unrelated purposes. CheckiCover does not access, monitor, operate or control a customer's device merely because a credential has been stored.

Customers must only provide credentials and information for devices or accounts for which they are authorised to provide access. Customers are responsible for ensuring that stored credentials and digital legacy instructions are accurate and up to date.

CheckiCover will process personal information in accordance with applicable South African data-protection requirements, including the Protection of Personal Information Act 4 of 2013 (POPIA), where applicable. Personal information will be processed for specific, explicit and legitimate purposes and in a manner that is reasonably necessary for the services provided.

Where consent is required, CheckiCover will seek appropriate consent. Consent does not remove other lawful grounds for processing where processing is otherwise permitted or required by law.

Customers decide what information they choose to submit, subject to information required to provide a selected service, comply with law, maintain security or administer the customer's account.

Customers may update, correct, replace or delete stored information through available platform functionality or by contacting CheckiCover, subject to applicable retention, legal, security and evidentiary requirements.

A customer may nominate one or more beneficiaries or authorised persons to receive specified information, including selected Device Access Credentials, following the customer's death.

The existence of a beneficiary designation does not by itself establish legal ownership of a device, account, digital asset or information. CheckiCover does not determine whether a requester is legally entitled to inherit or access a device or third-party account.

Before releasing information following a reported death, CheckiCover may require reasonable evidence of death and verification of the requester's identity and authority. This may include a death certificate, proof of identity, evidence of beneficiary status, executor or estate documentation, or other reasonable supporting information.

CheckiCover may withhold, restrict or delay disclosure where it reasonably believes disclosure would be unlawful, unauthorised, fraudulent, harmful to another person, contrary to a court order, inconsistent with a third party's rights, or otherwise contrary to applicable legal requirements.

CheckiCover takes reasonable technical and organisational measures designed to protect personal information against loss, damage, unauthorised destruction, unlawful access, unauthorised disclosure or other unlawful processing.

• encryption of information in transit and, where technically appropriate, at rest;
• authentication and access controls;
• restricted administrative access based on legitimate need;
• secure handling and management of encryption keys and credentials;
• audit logging and monitoring;
• security testing, vulnerability management and system maintenance;
• backup and recovery controls;
• incident detection and response procedures; and
• confidentiality obligations for personnel and relevant service providers.

Security measures may change as technology, risks and industry practices develop. No electronic system can be guaranteed to be completely secure, and CheckiCover cannot guarantee that a security incident will never occur.

Because Device Access Credentials may enable access to devices and information stored on those devices, CheckiCover treats them as highly confidential information and applies security controls appropriate to the risks associated with such information.

Where technically feasible, credentials will be encrypted or otherwise protected so that access is limited to authorised systems and processes. CheckiCover will seek to minimise human access to raw credentials and will maintain appropriate controls around privileged access.

CheckiCover will not intentionally disclose Device Access Credentials to family members, beneficiaries, friends or other persons solely because of their relationship with the customer. Disclosure will be subject to the customer's instructions, verification procedures and applicable law.

CheckiCover may share personal information where reasonably necessary to provide its services, administer the platform, meet legal obligations or protect legitimate interests. Recipients may include:

• technology, hosting, storage, communications and security service providers;
• payment and billing service providers;
• identity or verification providers;
• professional advisers and service providers;
• regulators, law-enforcement bodies or courts where legally required or permitted;
• persons authorised by the customer in accordance with the customer's documented instructions; and
• other parties where disclosure is required or permitted by applicable law.

CheckiCover will not sell, rent or trade personal information for unrelated commercial purposes.

CheckiCover may use third-party technology and service providers to operate parts of the service. These providers may process personal information on CheckiCover's behalf and may be subject to their own contractual, security and privacy requirements.

A customer's device, operating system, cloud account, email account, social-media account or other third-party service may impose separate access, succession or authentication rules. CheckiCover cannot guarantee that a third party will permit access merely because a credential is stored with CheckiCover.

CheckiCover retains personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide the services, comply with legal or regulatory obligations, resolve disputes, maintain appropriate records, protect the platform and its users, or otherwise where retention is permitted by law.

Following completion of a digital legacy process, Device Access Credentials will be securely deleted or otherwise disposed of when they are no longer reasonably required, subject to legal, regulatory, evidentiary or legitimate business requirements.

Subject to applicable law and any lawful limitations, individuals may have rights to request access to their personal information, request correction or deletion of inaccurate or unlawfully retained information, object to certain processing, and lodge a complaint concerning the handling of personal information.

Requests should be directed to CheckiCover using the contact details in Section 21. CheckiCover may take reasonable steps to verify the identity of a requester before processing a request.

For questions, privacy requests, correction or deletion requests, security concerns or other matters relating to personal information, please contact CheckiCover:

Email: admin@checkicover.co.za

CheckiCover provides information storage and controlled digital legacy functionality. It does not act as an executor, attorney, estate administrator, trustee or legal representative of the customer unless separately appointed and legally authorised to do so.

Storing a password, PIN, passcode or other credential with CheckiCover does not itself transfer ownership of a device, account, digital asset or information. Access remains subject to applicable law, the rights of third parties, the customer's documented instructions and the terms and technical controls of the relevant device or service provider.

CheckiCover does not guarantee that a stored credential will remain valid, that a device will remain technically accessible, or that a third-party provider will permit access after the customer's death.