DOME Guard privacy notice
Who we are
Ionity Global (Pty) Ltd (registration 2026/276325/07), Centurion, Gauteng, South Africa, is the responsible party for DOME Guard. Information Officer: Johan Wilhelm van Antwerp — info@ionity.today.
The short version
- DOME Guard's security checks run on your PC and their results stay on your PC, unless you switch on the mobile view.
- We hold your sign-in email and, only if you use DOME VPN, the public parts of your VPN keys.
- We do not sell, rent or advertise with your information.
- Reports and alerts are emailed through your own mail server, not ours.
What we collect
| Information | Why | Where | How long |
|---|---|---|---|
| Email address and password (stored as a one-way hash by Google) | To sign you in | Google Firebase Authentication (may be processed outside South Africa) | Until you delete your account |
| VPN public keys, device ID, PC name, VPN address, gateway name | To connect your devices to your own DOME VPN server | Google Cloud Firestore, Johannesburg (africa-south1) | Until the device is removed |
| Device summary — PC name, DOME score, segment scores, number of gaps and threats, app version (only if you switch on "Show this PC in DOME mobile") | So you can see your PCs on your phone | Google Cloud Firestore, Johannesburg | Until you switch it off (it is deleted then) |
| Security readings, scan results, audit logs, reports | To show and prove your protection | Only on your PC | Readable logs 90 days; audit chain until you delete it |
| Mail server settings for reports | To send your reports | Only on your PC, password encrypted by Windows | Until you remove them |
Your VPN traffic goes through a server that you or your IT provider run. Ionity does not see or log it. Payments are handled by Stripe or PayPal under their own privacy policies; we receive the payment confirmation and your email.
Lawful basis
To provide the service you signed up for (POPIA section 11(1)(b)) and our legitimate interest in keeping it secure (section 11(1)(f)). The mobile device summary is based on your consent, which you can withdraw at any time.
Information leaving South Africa
Sign-in is handled by Google Firebase Authentication, which may process your email outside South Africa under Google's data processing terms (POPIA section 72). Firestore data is kept in Johannesburg.
Your rights
- Ask what we hold about you and get a copy; ask us to correct or delete it.
- Delete your account yourself in DOME Guard › Settings.
- Object to processing and withdraw consent.
- Complain to the Information Regulator: www.inforegulator.org.za.
Write to info@ionity.today. We reply within 30 days.