Lineage by Cura · Hellocura (Pty) Ltd
PAIA manual
Version 1.1 – 10 November 2026
This is the manual of Hellocura (Pty) Ltd under section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA), which also covers what section 51 requires under the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Introduction
Back to contentsPAIA gives everyone the right to ask for records held by a private body when they need them to exercise or protect a right. This manual tells you what records Hellocura holds and how to ask for them.
Hellocura (Pty) Ltd builds and runs Lineage by Cura, a church app. Each church on Lineage is responsible for its own members’ information, and Hellocura stores it for the church as its operator. A request for records a church keeps about you is made to that church, not to Hellocura. This manual covers Hellocura’s own records.
2. Contact details
Back to contents| Company | Hellocura (Pty) Ltd, registration number 2026/164195/07 |
|---|---|
| Head of the company and Information Officer | Nevana Phalynn Pillay, Managing Director (registered with the Information Regulator, 3 November 2026) |
| Deputy Information Officer | None appointed |
| hello | |
| Phone | 065 861 6164 |
| Street address | 47 707 Road, Montford, Chatsworth, Durban, KwaZulu-Natal, 4092 |
| Postal address | 47 707 Road, Montford, Chatsworth, Durban, KwaZulu-Natal, 4092 |
| Website | lineage.hellocura.co.za |
3. The Regulator’s guide to PAIA
Back to contentsThe Information Regulator publishes a guide, in each official language, explaining how to use PAIA and POPIA (PAIA section 10). You can get it from the Regulator’s website, inforegulator.org.za, or ask the Information Officer for a copy.
Information Regulator: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191 · 010 023 5200 · enquiries@inforegulator.org.za.
4. Records available without a request
Back to contentsThese are on the Lineage website for anyone to read; no PAIA request is needed.
This PAIA manual
The Lineage privacy policy
The Lineage terms of service and operator agreement
Information about Lineage and how a church applies to join
5. Records kept under other laws
Back to contents| Law | Records |
|---|---|
| Companies Act 71 of 2008 | Company registration (CIPC) documents, director records, share register, minutes |
| Income Tax Act 58 of 1962 and Tax Administration Act 28 of 2011 | Tax returns and supporting records |
| Value-Added Tax Act 89 of 1991 | VAT records, once registered (Hellocura is not VAT registered yet) |
| Basic Conditions of Employment Act 75 of 1997 | Employee records, if any |
| Protection of Personal Information Act 4 of 2013 | Information Officer registration, operator agreements, breach records |
| Electronic Communications and Transactions Act 25 of 2002 | Records of online agreements, such as which terms a pastor accepted at sign-up |
6. Records Hellocura holds
Back to contents| Subject | Categories of records |
|---|---|
| Company | Registration documents, director and share records, minutes, Information Officer registration |
| Finance and tax | Accounts, invoices to churches, bank statements, tax records |
| Churches (customers) | Pastor applications, approvals, signed terms and operator agreements, billing, correspondence |
| Lineage app (as operator) | The information each church keeps in Lineage – held for the church; requests go to the church (section 1) |
| Security and operations | Sign-in and audit logs, backups, incident and breach records |
| Intellectual property | Lineage source code, syllabus and course content, trade mark filings |
| Suppliers | Agreements with Supabase, Vercel, Brevo, Cloudflare and others |
| Correspondence | Emails sent to Lineage and Contact Lineage messages |
7. How to request a record
Back to contentsSend the prescribed request form to the Information Officer by email; Hellocura answers within 30 days.
Fill in Form 2 (Request for access to record) from the PAIA Regulations, available on the Regulator’s website.
Say which record you want, how you want it (copy, email, inspection), and which right you need it for.
Email it to hello
.curateam@ gmail .com. Pay the request fee of R140 if it applies. You do not pay a request fee to ask for your own personal information (PAIA s54(1)).
Hellocura decides within 30 days and may extend once by up to 30 more days, telling you why (PAIA ss56-57).
If access is granted, access fees may apply, and you are told the amount first:
Item Fee Request fee (not for your own personal information) R140 Printed or copied A4 page R2 per page Electronic copy on your flash drive or CD R40 Search and preparation, after the first hour R145 per hour, at most R435 Deposit if the search takes over 6 hours One third of the access fee Fees as published by the Information Regulator.
A request can be refused only on the grounds in PAIA Chapter 4 of Part 3, for example to protect other people’s privacy or confidential commercial information. If you disagree, you can complain to the Information Regulator or go to court.
8. Personal information (POPIA)
Back to contentsThe full detail is in the Lineage privacy policy; this is the summary section 51 requires.
Purposes: running and securing the Lineage app for churches; reviewing pastor applications; billing and support; meeting tax, company and safeguarding duties.
| People | Information |
|---|---|
| Pastors and church leaders | Name, email, phone, church details, role, clearance checks |
| Church members and visitors (held for their church) | Contact details, church life records, private notes, giving records |
| Children (held for their church) | Records by name only with a parent’s Yes on the consent form |
| Suppliers | Company and contact details, agreements |
| Anyone who signs in | Sign-in codes, security and audit logs |
Recipients: only the services that run Lineage (Supabase, Vercel, Brevo, Cloudflare), professional advisers, and authorities where the law requires. Never sold; never shared between churches.
Cross-border flows: the database is in Ireland (EU); other services are in the EU and USA, under data protection law or agreements at least as strong as POPIA (s72).
Security: access rules enforced in the database itself; one-time sign-in codes, no passwords; audit log of sensitive changes; encryption in transit and in backups; nightly off-site backups; logged-out visitors cannot read any table; automatic nightly removal of information past its keeping period.
9. Where this manual is available
Back to contentsThis manual is on the Lineage website, at Hellocura’s address for inspection, from the Information Officer on request, and to the Information Regulator when asked (PAIA s51(3)). It is updated whenever the details change. Version 1.1, 10 November 2026.