Last updated 20 October 2026
This page explains what Mocash knows about you, why, and what you can ask us to do about it. It is written to be read, not to be impressive. If anything here is unclear, ask us and we will explain it.
Mocash is responsible for this information. In South African law we are the “responsible party” under the Protection of Personal Information Act (POPIA).
| What | Why we need it | How long |
|---|---|---|
| Your email address | It is how you sign in. We get it from Google when you create an account. | While your account exists |
| Your Google profile picture | So you see your own face in the app instead of your initials. We keep the web link Google gives us, not a copy of the photo. | While your account exists |
| Your phone number | To check a real person owns the number, and to send airtime or data if you choose that payout. | While your account exists |
| Your name, ID or passport number, a photo of that document, and a selfie | The law requires us to check who you are before we pay out money. A person on our team looks at it. | Five years after your last payout, as financial record-keeping rules require |
| The tasks you finish and what they paid | To work out what you are owed, and to spot patterns that mean someone is cheating. | Five years, as above |
| Your device, your network address, and how you use the app | To keep one person from making many accounts, and to see which parts of the app people actually use. | Usage records: 24 months. Security records: 12 months |
| Messages you send to support | To answer you, and so a person can pick up where the assistant left off. | 24 months |
We do not store your bank account number. When you ask for a bank transfer, those details are handled at the moment of payment and are not kept in the app. We never ask for your card details, because nothing here is ever bought with money — you only ever earn.
We do not sell your information. We do not use it to target you with advertising, and we do not let anyone else do that either.
| Who | What they get | Why |
|---|---|---|
| Your email address, a Google account identifier, and a link to your profile picture | Sign-in. We never see or store your Google password. | |
| Partner reward networks — CPX Research, Torox, Monlix, Notik, Timewall and others shown on the Offers screen | A random identifier for your account, and your device type and country | So they can show you tasks and tell us which ones you finished. They do not get your name, email or phone number. |
| Cloudflare | Everything, as it passes through | They run the servers and the database this app uses. |
| Mixpanel | How you use the app, under a scrambled identifier | To see which features help people earn. It does not receive your name, email, phone number, username, ID document or your balance. |
| Google Analytics | Which pages you visit, and roughly where in the country you are | To see how people find us. It is not told who you are, and we have turned off the settings that would let Google use it for advertising. |
Some of these companies are outside South Africa, so your information travels abroad. POPIA allows this where the receiving company is held to similar protections by contract, which is what our agreements with them do.
We will also hand over information if a court or the law requires it.
We record which screens you open and which features you use, so we can tell what actually helps people earn. This is tied to a scrambled version of your account number, not to your name — and the measuring company cannot turn it back into you.
We also use Google Analytics to count visits and see how people found us. It is not told who you are. We have switched off the settings that would let Google use it to build an advertising profile of you, and we have asked it not to record your full network address.
There are no advertising trackers on this site and nothing follows you to other websites. If your browser sends a Global Privacy Control signal, we stop recording your usage.
Email support@mocash.co.za and we will reply within 30 days. Asking costs nothing and we will not treat your account differently for asking.
Tell us first — most things are a misunderstanding we can fix. If we do not sort it out, you can complain to the Information Regulator of South Africa:
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
POPIAComplaints@inforegulator.org.za
inforegulator.org.za
Mocash is for people aged 18 and over. We do not knowingly keep information about children. If you believe a child has an account, tell us and we will delete it.
When what we collect changes, this page changes with it and the date at the top moves. If the change is a significant one, we will tell you in the app rather than expecting you to come back and check.
Questions about anything here? Ask on the support screen or email support@mocash.co.za.
