Privacy Policy
What Musuwo collects, why, who else sees it, and how to get it deleted.
This describes actual system behaviour accurately. It has not been reviewed against Zimbabwe’s Data Protection Act by a lawyer, and the retention periods below are proposals rather than settled policy.
What this is
This describes what Musuwo actually does with information, checked against the running system rather than written from a template. If the system changes, this gets a new version.
1. What Musuwo collects
When you make an account Your email address, and your name and phone number if you give them. Your password is handled by our authentication provider and Musuwo never sees it.
When you place an order Your name, email and phone. The recipient's name and phone, and their relationship to you if you say. The delivery address, including any directions you type. If you choose to drop a pin, the coordinates of that pin. What you ordered and what it cost. Which country you ordered from - the diaspora case is a large part of why Musuwo exists.
When you pay The order reference, amount, payment status, Paynow reference and payment channel. Musuwo does not receive or store your card number, PIN or wallet password.
When you browse Which products were shown to you, which you opened, what you put in a basket and what you shared. This is what makes the "For You" feed work. Guests get a basket token so a basket survives closing the tab.
When you apply to sell Your legal name, identity document type and number, residential address and supporting evidence, operating area, and business registration number where you have one. Photographs of identity documents, including a photograph of you holding one where that is asked for.
Automatically IP address and browser or device information, recorded against privileged actions in an audit log.
Musuwo does not collect your contacts, your microphone, your SMS, or your location in the background. The Android app asks for the camera and photo access only to submit verification documents, and for location only when you choose to drop a delivery pin.
2. Why
- To run your account and your orders.
- To get a delivery to the right address.
- To check that a business is who it says it is.
- To show you things you are more likely to want.
- To answer you when you contact support.
- To keep records the business has to be able to account for.
- To detect and investigate abuse.
Musuwo does not sell your information and does not run advertising networks inside the product.
3. Who else sees it
These are the third parties that actually receive data, not a generic list:
| Who | What they do | What they get |
|---|---|---|
| Supabase | Database, sign-in and file storage | Everything stored, including verification documents |
| Vercel | Runs the website | Requests to the site, including IP addresses |
| Brevo | Sends transactional email | Your email address and the message |
| Expo | Builds the Android app and delivers updates | App update requests |
| Paynow Zimbabwe | Collects checkout payments | Order reference, amount, name, email and phone |
There is no analytics SDK, no advertising SDK and no crash reporting SDK in the mobile app. There are no advertising or tracking cookies on the website.
Merchants see what they need to fulfil your order: the recipient's name, phone and delivery address. They do not see your other orders, your browsing, or your details from other merchants.
4. Verification documents
Identity documents are the most sensitive thing here and are handled accordingly:
- Stored in a private bucket, never a public one.
- Never given a public link. A reviewer opens one through a link that expires
in about a minute.
- Every single view is written to an audit log with the reviewer's name, the
document and the time.
- Not visible to other merchants, to customers, or to staff without the
specific permission for it.
5. How long it is kept
Proposals, not settled policy, and marked as such:
- Account and order records: while your account exists, and afterwards only as
long as needed for legitimate business or legal reasons.
- Verification documents: while the business is on the platform, and deleted
when no longer necessary or lawful to keep.
- Browsing events: rolled into daily totals; the raw events are not needed
indefinitely.
- Audit logs: kept, because their purpose is to be a record.
6. Deleting your account
You can ask for your account and personal data to be deleted: [/legal/delete-account](/legal/delete-account), or from inside the app, or by writing to support@musuwo.online.
Musuwo does not merely freeze an account when you ask for deletion.
Some records may have to be kept - for example, a record of a completed transaction where the law requires it, or an audit entry that exists precisely so it cannot be removed. The deletion page says which.
7. Your choices
- See and correct your details in your account.
- Ask for a copy of what is held about you.
- Ask for deletion.
- Turn off the delivery pin: type your address instead.
Write to support@musuwo.online.
8. Security
RLS is enabled on every table in the database, meaning the public key that ships in the website and the app can read nothing directly. Authorisation is checked on the server on every request. Documents are in private storage. Privileged actions are audited.
No system is perfectly secure, and this page does not claim Musuwo is.
9. Children
Musuwo is not designed for or directed at children.
10. Where data is processed
Musuwo's providers operate outside Zimbabwe, so your information is processed outside the country.
11. Contact
support@musuwo.online.