Privacy Policy

pesawow

PesaWOW Privacy Policy

Welcome to PesaWOW. We are dedicated to protecting your privacy and ensuring your personal data is handled with the highest level of security. This Privacy Policy explains how we collect, use, and safeguard your information when you use the PesaWOW mobile application ("the App"). By accessing our services, you confirm that you have read, understood, and agreed to the practices described in this policy.

Regulatory Compliance Statement: This Policy has been strictly designed in accordance with the Tanzania Data Protection Act, 2022 (Act No. 11 of 2022), the Google Play Developer Program Policies (including the Personal and Sensitive Information sections), and all applicable microfinance regulations supervised by the Bank of Tanzania (BoT).

Data Acquisition

To provide efficient digital credit services and perform risk assessments, we collect the following categories of information:

1.1 Information You Provide

  • Identity Data: Full legal name, date of birth, gender, and National Identification Number (NIDA number) for mandatory Know Your Customer (KYC) verification.
  • Contact Details: Valid phone number and active email address to send system alerts, payment reminders, and digital receipts.
  • Socio-Economic Info: Employment status, job title, monthly income details, payday cycles, and primary purpose of the credit line to determine appropriate loan eligibility.
  • Emergency Contact: Stored manually by the user for use in urgent account-related situations if we are completely unable to reach you via your primary communication channels.

1.2 Device Permissions (Subject to Consent)

  • SMS Access: We monitor and analyze transactional text messages, specifically financial alerts, institutional balance notifications, and mobile money receipt messages (M-Pesa/Tigo Pesa/Airtel Money) to build your credit profile and automate OTP (One-Time Password) verification. Personal, private chat logs are completely excluded from analysis.
  • Device Metadata: We collect technical machine parameters such as device model, OS version, SDK version, RAM status, storage metrics, and unique persistent hardware tokens (IMEI, Android ID, or Serial Numbers) to ensure App compatibility and prevent account hijacking or unauthorized multi-device cloning.
  • Location Access: Access to fine and coarse location coordinates (GPS) used to verify that the loan application originates within the legal borders of the United Republic of Tanzania for regulatory and anti-money laundering (AML) compliance.
  • Network Status: Required to monitor network connectivity type (Wi-Fi, 4G, 5G), signal integrity, and IP address to maintain a secure connection with our servers and prevent malicious interventions.

Purposes of Data Processing

We use your information to:

  • Verify Identity: Confirm your identity records against national repositories to fulfill legal compliance requirements and prevent identity theft.
  • Credit Scoring: Analyze your data behavior patterns to provide customized loan limits, interest structures, and maximum credit options.
  • Instant Disbursement: Facilitate immediate transfer of funds directly to your registered Tanzanian mobile network operator wallets (such as Vodacom M-Pesa, Tigo Pesa, Airtel Money, or Halopesa).
  • Security Monitoring: Continuous tracking of anomalous behaviors or multi-account logins to proactively isolate and neutralize fraudulent digital lending activities.
  • Support & Marketing: Respond to technical tickets, clarify loan repayment schedules, and send personalized promotional offers (you may opt-out of marketing at any time).

Data Security & Storage

PesaWOW prioritizes the safety of your information through rigorous technical standards:

  • Secure Transmission: We utilize 128-bit SSL/TLS encryption to safeguard your data during every transmission phase. All personal information is securely uploaded and stored on our encrypted central servers via HTTPS connections: (https://api.pesawow.com/).
  • Encrypted Storage: Your data is kept in a highly secure environment, protected by enterprise-grade multi-layered firewalls, cryptographic isolation, and restricted access protocols.
  • Proactive Protection: We perform regular security audits, system checks, and software updates to ensure your data remains confidential, accurate, and fully protected from unauthorized access.

Information Disclosure

We do not sell your personal data. We only share information with third parties in the following cases:

  • Service Providers: Such as integrated mobile network operators for payment processing or cloud hosting partners, under strict confidentiality agreements.
  • Credit Reference Bureaus: In accordance with local banking and microfinance regulations in Tanzania, your performance benchmarks, loan history, and default records may be reported to licensed Credit Reference Bureaus (CRBs).
  • Legal Compliance: When required by formal court orders, Bank of Tanzania directives, or local criminal statutes to protect our legal rights.
  • Business Transfers: In the event of an institutional merger, acquisition, joint venture, asset sale, or bankruptcy proceeding, where consumer data may be part of the transferred assets.

Your Rights & Data Retention

Under the provisions of the Tanzania Data Protection Act, 2022, you have the right to access, correct, object to automated profiling, or request the deletion of your personal data.

  • Retention: We retain your data only for as long as necessary to provide services or as required by financial regulations (Tanzanian regulations mandate archiving transactional profiles for a minimum statutory period after the closing of a credit line).
  • Deletion: You may request to close your account via our support email. Once your financial balances are entirely settled, we will permanently delete or thoroughly anonymize your data.

Children's Privacy

Our services are exclusively for individuals aged 18 and above. We do not knowingly collect data from minors. Any such data identified by our compliance system will be promptly removed.

Policy Updates

We may revise this Privacy Policy periodically. Changes will be updated within the App, and the "Effective Date" at the top will reflect the most recent version.

Contact Information

If you have any questions, concerns, or wish to exercise your statutory data rights under the Data Protection Act, please reach out to our dedicated Personal Data Protection Officer:

  • Official Website: https://www.pesawow.com/
  • Corporate Office Location: Makumbusho Wakatibado Street Makumbusho BraiWeb Technologies Ltd Dar es Salaam TZ, 14107, Tanzania

Disclaimer

This Privacy Policy shall be interpreted in accordance with applicable laws and regulations. It applies to all users of the PesaWOW application.