Effective 19 October 2026 · App version 2.4 · Package com.sabelalogic.ai
This policy explains what the SabelaLogic AI Android app (“the app”) collects, why, who it is shared with and what rights you have. The app is published by Lunga Xhamela, trading as SabelaLogic, Bloemfontein, South Africa (“we”, “us”). Contact: admin@sabelalogic.co.za.
| Data | Why | Where it goes |
|---|---|---|
| Random app device ID (generated by the app on first launch; not your IMEI, phone number or Android advertising ID) and your IP address | To apply daily free-use limits fairly and to stop abuse | Our server (a Cloudflare Worker). Counters reset daily; plan records are kept while you have a plan. |
| Chat messages you type or speak (speech is turned into text by your phone’s speech service) | To generate the AI reply | Sent through our server to an AI model provider: OpenRouter (and the model provider it routes to) or xAI. If you add your own API key, messages go straight from your phone to the provider you chose. We do not log or store message content on our server. The providers process it under their own policies. |
| Text you choose to have read aloud | To create speech in the app’s voice | Sent to our voice service to generate audio. If you pick “Phone voice”, it stays on your device. |
| Image/video prompts (Studio, own key only) | To generate images/video | Sent from your phone to xAI using your own key. |
| Camera (Face Twin) | One-time face scan to build an animated avatar | Processed on your device by a bundled face-tracking model. The camera is only available to the app’s own built-in page. We do not upload your camera images. |
| Your notes, canvas cards and settings | So the app remembers your work | Stored on your device. Your own API key is encrypted with the Android Keystore. Uninstalling the app deletes this data (app backup is switched off). |
| Email address and payment reference (only if you buy Plus or Pro) | To take payment, send your receipt and turn your plan on or restore it | Paystack (our payment processor) handles your card details; we never see or store your card number. We keep your email, plan, Paystack customer/subscription codes and payment reference linked to your device ID. |
The app does not show ads, does not use advertising or analytics SDKs, and does not sell personal information. It does not access your contacts, location, SMS or files other than a text or PDF file you choose to share into Read Aloud.
Internet and network state (to reach the AI); microphone (voice input, only while you hold to talk); camera (Face Twin only); notifications, foreground service and wake lock (Read Aloud playback with the screen off); vibrate (haptic feedback); battery-optimisation exemption (asked only so background reading isn’t cut off); storage on Android 9 and older only (saving generated media).
We share data only with the service providers listed above (Cloudflare for hosting, OpenRouter/xAI for AI replies, Paystack for payments, our voice-generation host), or when the law requires it. Some providers process data outside South Africa, including in the United States and the EU. We use providers that commit to protecting data, as section 72 of POPIA requires.
Usage counters: up to a few days. Plan and payment records: while the plan is active and then as long as tax and accounting law requires (up to 5 years). Message content is not stored by us.
Under the Protection of Personal Information Act, 2013 you may ask to see the personal information we hold about you, ask us to correct or delete it, object to processing, and withdraw consent. You may also complain to the Information Regulator (South Africa): inforegulator.org.za, complaints.IR@justice.gov.za. The responsible party is SabelaLogic (Lunga Xhamela), and the Information Officer is Lunga Xhamela, contactable at admin@sabelalogic.co.za.
To delete everything on your phone, clear the app’s data or uninstall the app. To delete server records (device ID, email, plan and payment references), email admin@sabelalogic.co.za with the subject “Delete my SabelaLogic AI data”, the email you paid with (if any) and the device code shown in Settings. We will reply within 30 days. Records we must keep for tax law are kept only for that purpose.
The app is not directed at children under 13, and we do not knowingly collect their data.
All connections use HTTPS. API keys are encrypted on the device. Payment checks happen on our server with signed Paystack webhooks. No system is perfectly secure; if a breach affects you we will notify you and the Information Regulator as POPIA requires.
We will post changes here and update the effective date. Material changes will be shown in the app.