Version 2026-09-10 · Effective 10 September 2026
MyGenie — Privacy Notice
Version: 2026-09-10 Effective date: 10 September 2026 Responsible Party: Maximum Wellness (Pty) Ltd (2020/672729/07), trading as MyGenie
This notice satisfies the notification duty in section 18 of the Protection of Personal Information Act 4 of 2013 (POPIA). It is also clause 17 of the Terms and Conditions.
Information Officer
Contact support@financialconsult.co.za. A named officer will be recorded here when registered with the Information Regulator.
What we collect
| Category | Examples |
|---|---|
| Identity and contact | Email address, display name, age, marital status |
| Household composition | Number and ages of dependants, roles such as spouse or child |
| Financial position | Income, expenses, assets, liabilities, retirement savings, investments, property and vehicle values |
| Insurance cover | Type and amount of cover held |
| Employment | Employer name and occupation, where you supply them |
| Goals and free text | Goals, beneficiary names, notes, and chat with Professionals |
| Medical scheme | Whether you are a main member and how many dependants are on the scheme — not diagnoses |
| Documents | Vault uploads and signatures you apply |
| Technical | Session cookie, and IP address or user agent where recorded in the audit log |
| Terms acceptance | That you ticked the Terms, the version, time, and which app (consumer or Professional Site) |
We do not ask for your South African ID number, date of birth, physical address, telephone number or banking details.
Purpose and lawful basis
| Purpose | Lawful basis |
|---|---|
| Authenticating you | Contract (POPIA s11(1)(b)) |
| Producing projections | Contract (s11(1)(b)) |
| Sharing with a Professional you select | Consent (s11(1)(a)) |
| Audit log of consent, Terms acceptance and access | Legal obligation (s11(1)(c)) and legitimate interests (s11(1)(f)) |
| Professional subscription payments | Contract (s11(1)(b)) |
| Marketing communications | Consent (s11(1)(a)) and s69 for electronic direct marketing |
| Hosting outside South Africa | Consent at registration (s72(1)(b)) and written operator agreements (s72(1)(a)) where those exist |
Special personal information
The Service is designed not to collect special personal information (POPIA s26). We do not ask for health conditions, biometrics, race, belief, political persuasion, trade union membership, sexual orientation or criminal history.
We record whether you belong to a medical scheme and how many dependants are on it. We do not record diagnoses. Do not enter health information in free text or chat unless it is necessary. Vault documents you upload may contain it if you choose to upload them.
Children
The Service is not for use by children. Where you record dependants, you do so as an adult modelling your household. We collect number and approximate ages only, not a child's name or identity number.
Operators and transfers
See Processors. We host outside South Africa (EU West, Amsterdam, with United States operator support access). Your registration tick records consent to that transfer.
Automated processing
Projections are produced by a deterministic engine on our infrastructure. No decision with legal or similarly significant consequences is made solely by automated means. Financial information is not sent to an external large language model.
Security
We apply measures appropriate to the risk, including encryption in transit, encryption at rest for hosted data and Professional chat, signed session cookies, one-time-code authentication with rate limiting, access controls, and audit logging. No system is perfectly secure.
If a compromise occurs in which your personal information has been or is reasonably believed to have been accessed by an unauthorised person, we will notify the Information Regulator and you as required by POPIA s22.
Retention
We retain your information while the account is active. After closure we keep only what a lawful purpose still requires — typically up to seven years for financial and audit records. Terms-acceptance records are kept for as long as needed to show what you agreed to.
Your rights
You may request access, correction or deletion, object to processing, withdraw consent for the future, and object to direct marketing. Write to support@financialconsult.co.za.
PAIA requests: there is not yet a published PAIA manual. Send the request to the same address. You may complain to us or to the Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001, complaints.IR@justice.gov.za.