WingaPrime Privacy Policy

1. Who we are and how to contact us

• Controller: JayAgric Company Limited (WingaPrime), Arusha, Tanzania.
• Privacy and data protection contact: support@wingaprime.co.tz — write "Privacy" in the subject.
• You can also write to us from the app: Zaidi → Msaada.

2. Who this policy is about

• Sellers — people who open a shop on WingaPrime. The app is for sellers, who must be 18 or older.
• Buyers — people who order from a WingaPrime shop, message a shop, follow a shop or subscribe to updates.

3. What we collect from sellers

• Account: phone number and/or email, password (we store only a one-way hash, never the password itself), name and language.
• One-time codes we send by SMS or email to confirm your phone or email and to protect your account (stored hashed; they expire within minutes).
• Your shop: shop name, description, logo, colours, location (region, district, area), delivery settings, WhatsApp number and the TIN you enter.
• Payment details your buyers use to pay you: your mobile-money or Lipa Namba numbers and registered names, Selcom till, and — if you connect one — payment-gateway credentials, which we keep encrypted.
• Products: names, prices, descriptions, product knowledge ("Maarifa"), photos and short videos. We remove location and other hidden details (metadata) from photos and videos before they are published.
• Orders and receipts: what you sold, to whom (the buyer's name, phone, email and delivery address), amounts and how it was paid.
• Your WingaPrime plan and the payments you make to WingaPrime (plan, amount, date, transaction reference).
• Verification documents (optional): a copy of your national ID (NIDA) or passport, TIN certificate, business licence and other licences — for the verified-seller badge, and to sell regulated products such as seeds or pesticides.
• Camera ID check (optional, only when switched on): photos of your ID card (front and back) and a selfie. We compare your face with the photo on the card (this is biometric data), check that the selfie is of a person who is present, and read the name and number printed on the card. We do this only after you give written consent in the app, each time.
• Questions you ask the Studio assistant, and reports you send us.
• Security and technical data: the app version and language, and in our server logs your IP address and device or browser type. On the website, a device cookie lets us warn you when someone signs in to your account from a new device.

The Android app does not collect your location, contacts, SMS, call logs or advertising ID, and contains no advertising or analytics software.

4. What we collect about buyers

• Name, phone number, email (optional), delivery address and order details — when a buyer orders, or when a seller writes a receipt.
• Messages a buyer sends to a shop's assistant on the shop website or on WhatsApp, and the WhatsApp number they write from.
• Email address and interests — if a buyer follows a shop or subscribes to updates.

5. Why we use it

• To run your account and your shop, and to show your shop and products to buyers — the service you agree to in our Terms.
• To confirm phone numbers and emails, keep accounts secure and prevent fraud.
• To handle orders, create invoices and receipts, and show the TIN on receipts as tax rules require.
• To check sellers who ask for the badge, and to allow regulated products only for sellers with the right licence.
• Camera ID check: only to give the verified-seller badge, and only with your prior written consent. Biometric data is sensitive personal data under the Act.
• AI features: to write and translate product descriptions, suggest product knowledge, answer your questions in the Studio assistant, and answer buyers' questions about your products. You can switch off AI replies to buyers.
• To send service messages (codes, receipts, order and account notices). Marketing messages only if you agreed; you can stop them at any time.
• To improve WingaPrime, using statistics such as product views and shares.

6. Who receives your data

We do not sell personal data. We share it only as needed to run WingaPrime:

• Buyers and the public see what you publish: your shop name, products, prices, location, the WhatsApp and payment numbers you choose to show, your TIN on receipts and your badge. Your ID number and ID photos are never shown.
• Hetzner Online GmbH — our servers (Finland, European Union).
• Cloudflare, Inc. — storage of photos, videos and documents, and delivery of our websites (United States and other countries).
• Brevo (Sendinblue SAS) — email delivery (France, European Union).
• SMS providers (such as Sakura SMS and NextSMS) — delivery of codes and notices by SMS.
• AI model providers — Moonshot AI (Kimi, Singapore) or DeepSeek (China), depending on the model in use: product and shop text, questions you ask the assistant and buyers' questions to your shop's assistant are sent to them to produce answers. Do not type ID numbers or passwords into AI features.
• Web search providers (Tavily or Brave, United States) — product names and categories only, to suggest product knowledge.
• Meta Platforms (WhatsApp Business Platform) — messages between buyers and the WingaPrime WhatsApp number.
• Payment partners — mobile-money networks, Selcom, AzamPay and DPO Group — when a payment is made through them.
• Selcom Paytech Ltd — only if you ask us to open a Selcom merchant account for you: we send your documents with your consent, which you can withdraw in the Studio.
• Google — when you install or update the app through Google Play (Google's own privacy policy applies).
• Authorities — when the law requires it (for example the PDPC, TRA or a court order).

7. Transfers outside Tanzania

Some of the providers above store or process data outside Tanzania — in Finland, France, the United States, Singapore, China and other countries. We transfer personal data abroad only as the Personal Data Protection Act, 2022 and its regulations allow, and we use providers that protect it under contract.

8. How long we keep data

• Account and shop data: while your account is open. When you delete your account, we delete it within 14 days.
• Products, photos, videos, orders, invoices and receipts: while your account is open, and deleted with it. Download your sales records first if you need them (on the Futa akaunti page in the app, or Oda → Pakua in the Studio).
• Verification documents: until you remove them, withdraw consent or delete your account.
• Camera ID check photos: until the check is decided and reviewed, and no longer than 30 days after the decision. We keep the result (passed or not, the match scores and the name read from the card) while your account is open. (The camera check is switched off today, and will not be switched on before this deletion is in place.)
• One-time codes: they expire within minutes, and their records are deleted within a day after that.
• Chats with a shop's assistant on the shop website: at most 30 minutes in our system's memory. Messages to the WingaPrime WhatsApp number and the answers: up to 90 days, so we can check and improve the answers (the buyer's number is kept as its last three digits only), then deleted. The AI provider may keep data under its own terms.
• Records of payments you made to WingaPrime: 5 years, because tax law requires us to keep our accounts.
• Server logs: only as long as needed for security and fixing faults.

9. Your rights

Under the Personal Data Protection Act, 2022 you may:

• ask what data we hold about you, and get a copy;
• correct data that is wrong or out of date — most of it you can edit yourself in the app or the Studio;
• ask us to delete your data or your account;
• withdraw your consent at any time (for example for the camera ID check or for sending documents to Selcom) — this does not affect what was done before;
• object to some uses of your data, and stop marketing messages;
• complain to the Personal Data Protection Commission (PDPC) — www.pdpc.go.tz.

How to ask: in the app (Zaidi), in the Studio (Mipangilio), or by email to support@wingaprime.co.tz from the email or phone number of your account. We reply within 72 hours and complete a correction or deletion within 14 days.

10. Deleting your account

In the app: Zaidi → Futa akaunti. Full details, including what we keep: Delete your WingaPrime account.

11. How we protect data

All connections use HTTPS. Passwords are stored as one-way hashes and one-time codes as keyed hashes. Each shop's data is kept apart in the database. Verification documents are kept in a private store that only our system can read, and payment-gateway credentials are encrypted. Only authorised JayAgric staff can reach personal data. No system is perfect: if a breach affects your data, we will notify the PDPC and, where it could harm you, tell you.

12. Children

WingaPrime is for adults. You must be 18 or older to open a shop. We do not knowingly collect data about children; if you think a child has given us data, write to us and we will delete it.

13. Cookies

The Studio and shop websites use only essential cookies: your sign-in session, your language, and a device marker for new-device alerts. We use no advertising cookies.

14. AI

Some features use AI. AI can make mistakes — check descriptions and translations before you publish them. You can report an AI answer in the app (Zaidi → Ripoti jibu la AI) or by email.

15. Changes to this policy

When our practices change we update this page and the date at the top. For important changes we tell you in the app or by email.