Privacy Policy

Tangaza-Mtaani helps small Kenyan businesses keep a customer list and send product updates and shop news by SMS. This policy explains what data we hold, why we hold it, and your rights under Kenya's Data Protection Act, 2019.

Your phone number, a scrambled (hashed) record of your 4-digit PIN — never the PIN itself — and your business profile: name, phone, location, description, logo and brand colour. We also keep your products, campaigns and delivery records so the service works.

When a customer joins a shop's list through the QR form, we store the name, phone number and optional email they enter, together with which shop they joined. Customers join voluntarily and can ask the shop to remove them at any time.

We use data only to run Tangaza-Mtaani:

• Sign shop owners in and keep their accounts secure.
• Show public product and business pages to visitors.
• Deliver SMS and WhatsApp updates to customers who opted in.
• Enforce plan limits and prevent spam, fraud and misuse.

We do not sell personal data to anyone, and we do not use it for advertising.

SMS and WhatsApp providers receive the recipient phone numbers and message text needed to deliver each update — nothing more. Our hosting and database providers store data on our behalf. We may disclose data where Kenyan law requires it, for example to investigate fraud reported to the Directorate of Criminal Investigations (DCI).

PINs are stored as salted hashes, sessions are managed securely, product photos live in private storage served through short-lived signed links, and database access is restricted so each shop only sees its own records.

You may ask us what data we hold about you, ask for corrections, or ask for deletion of your account and data. Customers on a shop's list should first ask the shop to remove them; if that fails, contact us and we will act. Complaints can also go to the Office of the Data Protection Commissioner.

We keep account and campaign records while your account is active and for a reasonable period afterwards for security and legal purposes, then delete or anonymise them.

Tangaza-Mtaani is for business use by adults. Shops must not knowingly collect details of children under 18.

If this policy changes, we will post the new version here with a new date. For any privacy question or request, contact the Tangaza-Mtaani team through the app.