2Clipby Timbuk2

2Clip App Addendum

Last updated 2 September 2026

This Addendum amends the 2Clip Privacy Policy and Terms & Conditions for the 2Clip mobile app, which those master documents predate. Where this Addendum and a master document differ about the app, this Addendum governs. Everything else in the master documents continues to apply.

Timbuk2 AI is the responsible party for personal information processed for 2Clip.
Registered address: 155 West Street, Sandown, Sandton 2031, South Africa.
Information Officer: Matimba Nkuna (mjnkuna@timbuk2.ai).
Support: support@timbuk2.ai.

Part A — Privacy additions

These additions extend the master Privacy Policy for the mobile app. Section references (e.g. “master policy s9”) point at the corresponding section of the Privacy Policy.

A1. The app is a processing channel

The 2Clip mobile app is a processing channel alongside WhatsApp and field missions. Personal information processed through the app is handled on the same lawful grounds and for the same purposes set out in the master Privacy Policy (ss5–6), as extended below.

A2. Analytics

We use PostHog for product analytics inside the app. This processes device and other identifiers, IP address, and app activity and in-app interactions (screens viewed, buttons tapped, and similar events) so we can understand how the app is used, fix problems, and improve it.

A3. Session recording

PostHog session replay is enabled on the mobile app. Session replay records how screens are navigated so we can diagnose issues and improve the experience.

What is masked. Text inputs, images, and sandboxed views are masked before anything leaves the device, so content you type (such as a phone number, email, delivery address, or one-time code) and on-screen images are not captured in the recording. Console/log capture is off. Session replay applies to the mobile app only.

A4. App permissions

The app requests these device permissions, each for a stated purpose:

  • Location (precise and approximate) — when-in-use only, never in the background. Used to drop a delivery pin on your exact spot when you place or fulfil an order. The app does not track location in the background.
  • Camera. Used to photograph the storefront of a shop you are signing up (2Clip Supply).
  • Microphone. Used only if you choose to film a short optional walk-in video of a shop; it records sound for that video.
  • No photo-library access. The app captures photos and video with the system camera and does not browse your photo library.
  • Notifications. Used to send the app notifications described in A5 (applies once push notifications are enabled in a released build).

A5. Push notifications

This section applies once push notifications are enabled in a released build. When push is live, the app registers a device push token and we process it to deliver notifications (for example, that a new daily game is live, or an update to an order you placed). Push tokens are delivered through Expo’s push relay and the platform push service (see A6). Notifications that carry value — such as vouchers, one-time codes, or payout confirmations — are sent by SMS, not push. You can turn notifications off at any time in your device settings.

A6. Named operators (processors)

This section extends master policy s9 (cross-border transfers) by naming the operators that power the app and identifying which of them process personal information outside South Africa.

  • Supabase — database, authentication, and file storage. Processes in the EU (Ireland, aws eu-west-1) — outside South Africa. (Region verified.)
  • Vercel — app and API hosting. Serverless functions run in Vercel’s default region in the United States — outside South Africa. (To confirm before publishing.)
  • Paystack — card payments for 2Clip Sell. Card details are entered with Paystack and never reach 2Clip. Paystack may process payment data outside South Africa. (Region to confirm before publishing.)
  • Twilio — SMS (one-time codes and value notifications). Twilio’s messaging infrastructure is based in the United States — outside South Africa. (To confirm before publishing.)
  • PostHog — product analytics and session replay. Processes on PostHog US Cloud (us.i.posthog.com) in the United States — outside South Africa. (Region verified.)
  • Expo (Expo Application Services) — push notification delivery, once push is live. Expo’s push relay is based in the United States — outside South Africa. (To confirm before publishing.)

Where an operator processes information outside South Africa, we take the steps required by applicable law to ensure adequate protection and appropriate contractual safeguards, as described in master policy s9.

A7. Rewards data

When you earn or spend the app’s reward currency (buk2s), we process your buk2s ledger and balance, your redemption records, and the details needed to fulfil an airtime or data redemption (such as the mobile number you are topping up).

A8. 2Clip Sell

When you buy through 2Clip Sell, we process your delivery address, your order history, and the Paystack transaction reference for each order (we do not receive or store your card details — see A6).

A9. Account deletion

You can request deletion of your account and personal information from inside the app (Settings → Delete my account) or, without installing the app, at foona.timbuk2.ai/account/delete. We action deletion within 30 days. This extends master policy s12 (data-subject rights).

Records we are required to keep for tax and financial record-keeping obligations — in particular the append-only rewards/financial ledger — are retained in anonymised form (with your name and contact details removed) for the period the law requires, rather than deleted.

Part B — Terms additions

These additions extend the master Terms & Conditions for the mobile app.

B1. Scope — the app and its in-app games

Master Terms s1 (scope) and s4 (nature of the programme) describe a field data programme and WhatsApp groups. Those Terms apply equally to the 2Clip mobile app and its in-app digital games. By using the app you accept the master Terms as extended by this Addendum.

B2. Buk2s (the reward currency)

Buk2s are the app’s in-app reward currency. 10 buk2s = R1 for the purpose of the redemptions we make available. Buk2s:

  • have no cash value outside the redemption paths we publish in the app (for example airtime or data), and cannot be exchanged for cash directly;
  • are personal and non-transferable — they cannot be sold, gifted, or moved between accounts;
  • do not currently expire. If we introduce an expiry rule in future, we will give reasonable notice through the app or another operational channel, consistent with master Terms s7 and s12.

As under master Terms s7, the Company may correct obvious errors in buk2s balances and reverse buk2s awarded in breach of these Terms or a campaign’s rules.

B3. Buying physical goods through 2Clip Sell

v0 — PENDING LEGAL REVIEW. This commerce section is a conservative first draft so the app does not ship without terms for the goods it sells. It has not had a Consumer Protection Act review. Treat as provisional until legal sign-off.

2Clip Sell lets you buy physical goods that are sold by the Company (or by sellers through the Company) and paid for via Paystack. The following apply to those purchases, in addition to the master Terms, and are intended to be read consistently with the South African Consumer Protection Act (CPA) — where these terms conflict with a right you have under the CPA, the CPA prevails.

Order formation. Displaying a product in the app is an invitation to deal, not an offer. Your order is an offer to buy at the price shown. A contract of sale forms only when we confirm the order after successful payment; until then we may decline or cancel the order (for example if the item is out of stock or the price was shown in error), in which case any amount paid is refunded.

Pricing and availability. Prices are shown in South African rand and include VAT where applicable. Stock and promotional (flash) prices are limited and can change or sell out; the price that applies to your order is the price confirmed at checkout. We correct obvious pricing errors as above.

Payment. Payment is processed by Paystack. Card details are entered with Paystack and do not reach 2Clip. We keep only the transaction reference for your order.

Delivery / collection. Delivery or collection arrangements and any timeframes are shown at checkout or in your order details. Timeframes are estimates and are not guaranteed. Risk in the goods passes to you on delivery or collection.

Cancellation. You may cancel an order before it is dispatched or handed over for collection by contacting support; we refund amounts paid for a cancelled order. Once goods are dispatched, cancellation is handled as a return.

Returns and refunds. You may return goods and receive a refund, replacement, or repair in line with your rights under the CPA — including goods that are defective, unsafe, or not as described, and the CPA cooling-off right where it applies to the sale. To start a return, contact support@timbuk2.ai. Refunds are made to the original payment method. Nothing in this section limits any right you have under the CPA.

B4. App accounts

You may hold one account per person. You must give accurate account details and keep them current (extends master Terms s3). You can delete your account as described in A9. We may suspend or remove an account on the grounds in master Terms s10 — including suspected fraud, safety or data-protection breaches, misconduct, or breach of these Terms — and for the app-specific breaches in B5.

B5. Acceptable use of the app and its games

This extends master Terms s5 (participant obligations — you “must not submit fabricated, copied, misleading, duplicate, stale, or manipulated content”) and s6 (validation) to the app’s games. You must not:

  • use bots, scripts, emulators, or any automated means to play the games or interact with the app;
  • create or use multiple accounts, or play through another person’s account, to gain extra rewards;
  • farm, collude on, or otherwise manipulate answers or game outcomes, or exploit a bug to obtain buk2s or rewards you would not otherwise earn.

As under master Terms s6, we may reject, hold, or reverse rewards, and suspend accounts, for activity that breaches this section.

B6. How rewards are determined

PENDING REVISION. The reward mechanic is under separate review. This describes the current mechanic factually and will be revised when that review concludes.

As under master Terms s7, any points, rewards, or bonuses in the app are governed by the campaign rules published for the applicable activation. Currently, buk2s earned from an in-app game are determined by your play and the rules shown for that game at the time you play; the amount credited to your balance is the amount recorded by the Company’s systems. Payment and validation follow master Terms s6–s7, and we may correct obvious errors and reverse rewards obtained in breach of B5.

© Timbuk2 AIPrivacyTermsApp AddendumGet the app