This page explains how to delete your account in the eRunna app, developed by eRunna (Pty) Ltd (registration number 2025/693827/07), and how to request deletion of your account and personal information without the app installed. It summarises our Privacy Policy and Data Retention Policy; where this page and those policies conflict, those policies govern.
1. Delete your account in the app
- Open the eRunna app and sign in.
- Tap the Profile tab.
- Scroll to the bottom and tap Delete account.
- Turn on I understand this action is permanent.
- Tap Delete My Account. You will be signed out once the deletion completes.
This action cannot be undone. If you have an active delivery or errand in progress, it may be disrupted.
2. Request deletion without the app
You may request deletion of your personal information by submitting a written request to the Information Officer of eRunna (Pty) Ltd at info@erunna.app. Include your full name and the email address or phone number registered to your account.
We will verify your identity before processing the request. We will acknowledge within 3 business days and complete the deletion or provide a reasoned response within 30 days (extendable in complex cases, with notice to you). Where a deletion is actioned, we will notify relevant processors and sub-processors of the deletion obligation within a reasonable time.
You may also write to: Information Officer, eRunna (Pty) Ltd, 1 Wedgewood Link Road, Bryanston, Johannesburg, Gauteng 2191.
3. What is deleted
- Account and identity data (customers, runners, merchants, partners) — deleted within 30 days of a verified deletion request, subject to the legal-hold exceptions in section 5.
- Marketing and waitlist data — retained until you withdraw consent, opt out, or request deletion — whichever occurs first.
- Biometric data (runners) — deleted when no longer required for the stated purpose. [ATTORNEY-REQUIRED: confirm the maximum permissible retention period for biometric data and whether s57 prior authorisation affects this.]
Deletion is carried out as a logical deletion followed by a physical purge. Backup copies are purged within 30 days of the scheduled purge date.
4. What is retained, and for how long
Certain data must be retained to meet legal obligations. Where a legal-retention obligation applies, we will inform you and retain only the minimum data required. The periods below are our operational defaults; where a legal minimum exceeds the operational default, the legal minimum governs.
| Category | Retention period |
|---|---|
| Order/errand records (including pricing, route, and timestamps) | 5 years from the date of the transaction |
| Payment transaction metadata (Paystack tokens and authorisation codes; no full card numbers stored) | 5 years from the date of the transaction |
| Runner assignment and delivery-event records | 5 years from the date of the errand [ATTORNEY-REQUIRED: confirm minimum retention period in light of runner classification — employee vs independent contractor — and applicable labour/ SARS record-keeping requirements] |
| Precise location / route-tracking data | Up to 12 months from collection; aggregated or de-identified thereafter |
| Support communications and in-app chat logs | 24 months from the date of the communication |
| Technical logs and diagnostics | 12 months; aggregated where possible |
| Marketing consent records | For the duration of the marketing relationship, plus 3 years after opt-out or last contact, as evidence of consent |
| KYC / onboarding documents for merchants and partners | 5 years from end of business relationship, or longer if required by FICA |
| KYC data (runners) | For the duration of the runner relationship and for a post-termination period as required by FICA and applicable law |
| FICA / AML-CFT records | For the statutory period required by FICA [ATTORNEY-REQUIRED: confirm the applicable minimum retention period and the governing FICA provision] |
FICA records are subject to separate archival procedures and are not subject to data-subject deletion requests where lawful retention is mandated. Aggregated or de-identified data (from which you cannot reasonably be identified) may be retained beyond the retention period for analytical purposes.
5. Exceptions and legal holds
We may depart from the standard retention schedule in the following circumstances:
- A legal or regulatory requirement mandates longer retention (e.g., SARS, FICA, court order).
- The information is necessary to resolve an active dispute or enforce an agreement.
- A supervisory authority (including the Information Regulator or FIC) has directed that information be preserved.
- We have reasonable grounds to believe that deletion would harm the data subject's own legitimate interests.
Where a legal hold is applied, we will document the hold, its scope, and its basis, and will notify the data subject to the extent permitted by law.
You may lodge a complaint with the Information Regulator of South Africa (www.inforegulator.org.za) if you believe we have processed your personal information unlawfully.