Privacy policy

Last updated 7 October 2026

This policy covers everything on djaho.co.za, the Djaho desktop application and the Djaho Live Android app, and is written to meet the Protection of Personal Information Act (POPIA).

Djaho is run by one independent software developer in South Africa. There is no advertising on this site, no analytics or tracking scripts of any kind, and no cookies used to follow visitors. Nothing collected here is ever sold, rented or shared for marketing.

What we collect, and why

Four things happen on this site, and each collects only what that thing needs.

1 · Buying a licence

• Collected: your full name and email address, and optionally your club or school and a phone number. A record of the purchase (tier, amount, date and payment reference) is kept alongside it.
• Why: to email you the activation key, to prove the licence is yours if you lose it or change computers, and to meet the record-keeping any sale requires.
• Payment details: handled entirely by PayFast, a South African payment provider. Card and banking details are entered on PayFast's own secure pages. They never pass through, and are never stored on, this site.

2 · The contact form

• Collected: your name, email address and the message you write.
• Why: to answer you. It is emailed to support@djaho.co.za and kept with the rest of the support correspondence.

3 · Entering a meeting online (website or Djaho Live app)

• Collected: the athlete's name, surname, sex, date of birth, school or club and the race entered, plus the name, email address and optional phone number of the parent, guardian or team manager submitting the entry.
• Where the organiser allows it, a team entry may give an age instead of a date of birth. The age is then kept in place of the date of birth, for the same purposes.
• The IP address of the connection is recorded with each entry, only so that the number of entries from one connection in an hour can be limited to stop abuse. It is removed together with the entry.
• Why: to administer that meeting — start lists, age categories, results and team scores — and to let the organiser contact you about the entry. Date of birth decides the age category and is never shown publicly; published results show the age group only.
• Entries are for the organiser of that meeting, who receives them in the Djaho software. The fuller notice, including consent for athletes under 18, is on the online-entries privacy notice.

4 · Downloading the installer

• Collected: a salted SHA-256 hash of your IP address, your browser's user-agent string, the page you came from, and a two-letter country code.
• Why: to count downloads — how many, from where, of which version. The IP address itself is never written down: it is hashed on arrival with a secret salt, which lets two downloads from the same visitor be recognised as one without the address ever being stored or recoverable. Nothing here identifies a person and none of it is linked to a purchase or an entry.

Published results

Results and start lists published by a meeting's organiser show what a printed results board at the finish shows: name, team, race, position and time, and the age group. Nothing more is published — not dates of birth, not contact details. An organiser chooses whether to publish at all, and can unpublish at any time.

The Djaho application itself

The desktop application keeps every meeting, athlete and result in a database file on your own computer. None of it is uploaded to us. The application contacts djaho.co.za in only three situations, all of them started by you:

• Activating a licence — sends your licence key, your name and email as given at purchase, the application version, and a fingerprint of the computer. The fingerprint is what enforces the device limit on a key; it identifies a machine, not a person, and cannot be turned back into anything about your hardware.
• Checking for an update — fetches a small file listing the latest version. It sends nothing about you, and it only ever runs when you press the button on the About page.
• Publishing results — uploads exactly the results the organiser chose to publish, described above.

The application collects no usage statistics or telemetry of any kind.

The Djaho Live Android app

Djaho Live is a free app for following a meeting's live and final results and for entering athletes online. It has no accounts, no advertising, no analytics or tracking, and it asks Android for one permission only: internet access.

What the app does with information

• Looking at meetings and results — the app asks djaho.co.za for the list of meetings and their results. These requests contain nothing about you. As with any website, the server receives the device's IP address in order to answer.
• Entering an athlete — when you send an entry, the app sends the athlete's name, surname, sex, date of birth (where the meeting asks for it), any ID or licence number the meeting asks for, school or club, the races chosen, and the contact name, email address and phone number you typed. It goes to djaho.co.za and is handled exactly as an entry made on the website (see “Entering a meeting online” above). You tick a consent box in the app before an entry can be sent; for an athlete under 18 that must be a parent or guardian.
• No signal? An entry you have not been able to send waits on your phone and is sent when you tap Send, or when the app next has a connection.

What stays on your phone

• The entries you made, the contact details you typed (so you do not retype them for the next athlete), and the last list of meetings the app downloaded. They are stored inside the app on your phone and are not sent anywhere except as described above.
• You can remove an entry from the My entries screen, and uninstalling the app removes everything it stored.

Fonts from Google

• The app downloads its two typefaces (Barlow and Barlow Condensed) from Google Fonts the first time it runs, and keeps them on the phone. Google therefore receives the device's IP address and the request for the font files. No information about you or your entries is sent to Google.

Getting the app

The app is downloaded from djaho.co.za/get.php. We do not know who installs it: downloads are counted only as described for the installer above.

Deleting your information

To have an entry, or a licence or support record, deleted, write to support@djaho.co.za from the email address you used and say which entry or record it is. Entries on the website are in any case removed within six months of the meeting. Information inside the app on your phone is removed by deleting the entry in the app or uninstalling it.

How long we keep it

• Licence and purchase records — for as long as the licence may need supporting, and thereafter as long as South African tax law requires records of a sale.
• Support messages — up to two years, then deleted.
• Meeting entries — removed from this website within six months of the meeting. The organiser keeps their own records, as they would with paper entries.
• Download logs — kept as counts; individual rows are pruned after twelve months.

Where it is kept, and who else sees it

The site and its database are hosted on a South African shared-hosting provider. Email is sent from djaho.co.za's own mail server. The only third party involved in any of this is PayFast, and only for the payment itself.

Information is disclosed to nobody else, except where the law requires it.

Security

The whole site is served over HTTPS. Payment details never reach it. IP addresses are hashed before they are stored. Access to the administration area is password-protected and used only by the developer.

No system is perfect, and it would be dishonest to claim otherwise — but the best protection here is how little is collected in the first place.

Your rights under POPIA

You may ask what personal information is held about you, have it corrected, or have it deleted where there is no legal reason to keep it. You may also object to its use. Write to support@djaho.co.za and you will get an answer within 30 days. If you are not satisfied, you may complain to the Information Regulator of South Africa.

Children

Meeting entries are frequently for athletes under 18. They must be submitted by a parent or guardian, or by a team manager with that authority. No part of this site is marketed to children, and children are not asked to create accounts.

Changes to this policy

If this policy changes, the date at the top changes with it. Anything that materially affects how information already collected is used will be told to the people affected, not merely posted here.