Privacy notice
How PewPew Renew handles personal information, under section 18 of the Protection of Personal Information Act 4 of 2013.
Who is responsible
PewPew Renew is operated by an individual, not a company. Questions about this notice, or a request to access, correct or object to the processing described here, go to privacy@pewpewrenew.com.
The responsible party's full name and postal address are still to be added to this notice by the operator.
Whose information this covers
Three people, and only one of them is the user:
- The applicant
- The person using the app. Name, identity or passport number, gender, contact details, addresses, employer and occupation, firearm and licence particulars, competency and dedicated-status details, association memberships, and the documents uploaded to support an application.
- The applicant's spouse
- Name, identity or passport number, and contact details, where the applicant is married. A certified copy of their identity document, if uploaded.
- The applicant's referees
- Name, contact details, and their stated relationship to the applicant. A signed reference letter, if uploaded.
Spouse and referee details are supplied by the applicant, not collected from the person concerned. That is the source disclosure section 18(1)(a) requires where information is not collected from the data subject directly.
Why it is collected
To assemble the forms and supporting documents that a firearm licence application or renewal to the South African Police Service requires, and nothing else. It is not used for marketing, is not sold, and is not shared with anyone for any other purpose.
Whether you have to supply it
Supplying it is voluntary. The consequence of not supplying a particular item is simply that the forms which need it cannot be completed — the app will still assemble and hand over whatever pack it can.
Who receives it
The South African Police Service receives the completed pack — handed over by the applicant, not by this app. The app does not submit anything to SAPS on anyone's behalf.
Where the applicant asks the app to email a reference letter for signature, that email goes to the referee at the address the applicant gave, through Amazon Simple Email Service. Everything else is stored on Amazon Web Services infrastructure in the Africa (Cape Town) region. Nothing is transferred outside South Africa.
How it is protected
Documents and answers are encrypted in the browser before they are sent, under a key derived from the applicant's password and held only on their own device. The server stores ciphertext and cannot read it. That means the operator cannot read an applicant's documents either — and it also means that if the applicant loses both their password and their recovery key, the data cannot be recovered by anyone.
Your rights
- Access and correction
- An applicant can see and change everything held about them from inside the app. A spouse or referee can ask, at the address above, what the applicant has entered about them and have it corrected — though because the data is encrypted to the applicant's key, the operator will have to route that request through the applicant rather than answer it directly.
- Objection
- A spouse or referee may object to their details being held, at the address above. The consequence, under section 11(4), is that the application those details support may not be able to proceed — a firearm licence application requires a spouse's particulars where the applicant is married, and requires referees.
- Deletion
- An applicant can delete their account and all of its data from the app at any time, which removes the spouse and referee details with it.
- Complaints
- A complaint may be made to the Information Regulator (South Africa), inforegulator.org.za.
What this app is not
PewPew Renew assembles forms from what the applicant enters. It does not give legal advice, is not a law firm, and no one operating it acts as a legal practitioner. It does not check anything against SAPS records, and whether an application succeeds is SAPS's decision alone.