Privacy Policy

Version: October 2026

Who we are

ONA is run by [COMPANY LEGAL NAME], [COMPANY ADDRESS], Tanzania ("ONA", "we"). We are the controller of your personal data. Contact us through Help in the app or by email at [SUPPORT EMAIL].

What we collect

• Account details: your username, the phone number or email address you sign up with, and the one-time codes (OTP) we send to confirm it is you.
• Your profile and settings, such as your language, theme and notification choices.
• Delivery addresses and their map location, only when you add them.
• Your location while you use the app, if you allow it, to show shops and deals near you and the distance to shops. You can switch this permission off at any time in your phone settings.
• Your orders, payments, payment proofs, chats (including voice notes), reviews and saved items. Voice and video calls are not recorded.
• Pictures you upload, and pictures you choose when searching for a product by picture.
• The products and shops you open, to show you related products ("People also viewed") and to count a shop's visitors. We never show anyone what you opened.
• Your device details needed to send notifications, keep your account secure and prevent fraud.

Phone permissions

The app asks for the camera (product photos, barcode scanning, picture search and video calls), the microphone (voice notes and calls), photos (your recent photos for picture search), location and notifications. Each permission is optional and is used only when you use that feature.

Why we use it

To create your account, show you shops and products, process orders and payments, deliver your orders, let you chat and call shops, suggest products to you, keep ONA safe, prevent fraud, answer your questions and meet legal duties.

Who sees what

• Shops never see your phone number, email address or real name.
• A shop sees your delivery address only for an order you place with it, to deliver that order; the address is hidden 7 days after the order is completed.
• The mobile-money number you pay with is shown partly masked and is removed or made anonymous after 90 days, unless it is needed for a dispute.
• Other customers never see your private details.
• We do not sell your personal data and do not use it for other companies' advertising.

Services we use

We use trusted providers to run ONA: hosting and database (Supabase, servers in Europe), phone notifications (Firebase), SMS codes ([SMS PROVIDER]), sign-in with Google or Apple (if you choose them), voice and video calls (VideoSDK), and an automated image safety check (OpenAI) that scans pictures uploaded by shops to refuse adult content. They may process data only to provide these services. Because some servers are outside Tanzania, your data may be transferred abroad with suitable safeguards under the Personal Data Protection Act.

How long we keep it

We keep your data while your account is active and as long as the law or a dispute requires. Payment records are kept for the period required by financial and tax law, made anonymous where possible. Then we delete it.

Your rights

Under Tanzania's Personal Data Protection Act (2022) you have the right to see your data, correct it, ask for it to be deleted, object to or restrict its use for some purposes, and withdraw your consent. You can see and correct your information in the app, and ask for your account to be deleted through Help in the app or by email at [SUPPORT EMAIL]. We reply within 30 days. If you think we have not handled your request properly, you have the right to complain to the Personal Data Protection Commission (PDPC).

Children

ONA is not for children under 18 without a parent or guardian. We do not knowingly collect children's data.

Security

We protect your data as described in our Security notice.

Changes

If this policy changes in an important way we will tell you and ask you to accept the new version. This version: October 2026.