Dawa Mkononi
Sign in
Dawa Mkononi
Sign in
10 sections
Your Privacy Matters
We protect your personal data
B2B Platform Only
Encrypted data storage
No third-party sharing without consent
Request data deletion anytime
We value your trust and want to be transparent about how we handle your information. When you use our services, some of your data is collected to improve the functionality, reliability, and overall quality of our systems. This collection is necessary to provide you with the best possible experience and ensure that our services remain efficient, accurate, and safe.
The data we collect may include details such as usage logs, interactions with our application, and other information that helps us better understand how our services are being used. This data is not collected for marketing or unrelated purposes; rather, it is essential to enhancing the performance of our systems and ensuring that you benefit from the latest improvements.
An important part of this process is using the collected data to help train and improve our underlying models. These models power many of the intelligent features you interact with in the app. Training with real-world data ensures that the models stay relevant, accurate, and effective for all customers, including yourself.
To achieve this, your data may, at times, be transferred to secure servers located outside your country of residence. This process is commonly known as transborder data transfer. The reason for this transfer is to take advantage of specialized infrastructure and computing resources that enable us to handle data safely and efficiently on a global scale.
Even when your data crosses borders, we apply the same high standards of security and compliance. Your information is protected using advanced safeguards, including encryption, controlled access, and strict operational policies. We are committed to ensuring that your data is kept safe, no matter where it is processed.
It is important to emphasize that your privacy and control remain our top priorities. You have the right to request the deletion of your personal data at any time. If you decide you no longer want your information to be stored or used, we will honor your request and permanently delete the data from our systems.
There is no condition under which we will retain your personal data after you have requested its deletion, unless specifically required by governing laws. Outside of such legal obligations, your request for deletion will always be respected and acted upon without delay.
To make this process simple for you, we have provided an option directly within the app. In the app’s settings section, you will find a dedicated option where you can submit a data deletion request. This ensures that you remain in full control of your information without needing to go through complicated steps.
Once we receive your deletion request through the app, our team and systems will work promptly to ensure your information is fully erased. We will also confirm once the process has been completed so that you can be confident your data is no longer in our possession.
We believe transparency builds trust. By letting you know how your data is collected, used, and safeguarded, we aim to give you peace of mind. Your ability to request deletion at any time ensures that you remain in charge of your personal information while benefiting from secure, evolving, and high-quality services.
We are committed to protecting your personal data in line with the Tanzania Personal Data Protection Act, 2022 (PDPA). This introduction provides you with an overview of how we collect, use, store, and transfer your personal data, as well as the rights available to you under Tanzanian law. When you use our application, certain information about you and your activity is collected. This data is necessary for us to provide services effectively, maintain the security and functionality of our systems, and continuously improve the quality of the solutions we offer. The PDPA requires us to process your personal data lawfully, fairly, and transparently. We only collect data that is relevant and limited to the purposes stated in this notice. We do not process your information for unrelated or unauthorized uses.
We collect only the data we genuinely need to operate the service. The categories are: • Account & business profile: business name, contact person, phone number, email (if provided), facility type, region, and any documents you upload to verify your account. • Order & cart activity: items you add to your cart, quantities, prices, the orders you place, delivery destinations, and the payment method you choose. • Payment metadata: the mobile-money operator, transaction reference numbers, and amounts. We do NOT see or store your mobile-money PIN, card numbers, or banking credentials — those are handled directly by our payment partners. • Credit & finance activity: any credit you request, your repayment history, and the supporting documents you upload for verification. • Device & technical data: device model, OS version, app version, language, push-notification token, IP address at the time of a request, and crash diagnostics. This lets us route notifications, fix bugs, and detect fraud. • Location: your business delivery address (entered by you) and, when you grant permission, your current GPS location at the moment you set a delivery point. We do NOT track your location in the background. • AI assistant (Nora) inputs: text and short voice notes you send to the in-app AI assistant, plus the responses it returns, so we can give you accurate answers and improve the assistant. • Communication logs: chats and support messages you exchange with our team, and SMS/OTP delivery records when you sign up or reset your password. • On-device cache: a local copy of your stock listings, orders, and cart so the app works offline. This cache lives only on your device and is wiped on logout.
Your data is used strictly for the purposes you signed up for, namely: • Operating your account: signing you in, verifying your identity, processing your orders, and showing you your purchase history. • Delivering goods: planning routes, sharing your delivery address with our riders or our dispatch partners, and contacting you about delivery status. • Processing payments: passing the amount and transaction reference to our authorised payment gateways (Selcom, AzamPay, Cellulant, M-Pesa via Lipisha) so they can collect or refund money on our behalf. • Credit & financing: assessing eligibility for credit lines, recording repayments, and generating statements. • Customer support: responding to your chats, calls, and complaints, and improving our help articles. • Service improvement: aggregated and de-identified analytics that show us which features are useful and where the app is slow or broken. • Personalisation: showing you the most relevant products, offers, and re-order suggestions based on your past purchases — never sold to anyone else. • Fraud, security & legal compliance: detecting suspicious sign-ins, blocking abuse, and meeting our obligations under Tanzanian law (PDPA, anti-money-laundering rules, tax reporting where required). • Communication: sending you receipts, delivery updates, OTP codes, and (only with your consent) product news. You can opt out of marketing messages at any time from the Settings → Notifications page. We DO NOT sell your personal data and we DO NOT use it for advertising profiles outside our own service.
We share your information only with the parties we need to in order to deliver the service to you: • Delivery partners — the rider or dispatcher fulfilling your order receives your name, phone, delivery address, and items. • Payment gateways (Selcom, AzamPay, Cellulant, Lipisha/M-Pesa) — receive your phone number, the amount, and a reference number so they can collect or refund payment. They never receive items list or business documents. • Cloud & infrastructure providers — encrypted storage and compute providers that host our backend. They process data on our instructions only. • Communication providers (SMS, FCM push, WhatsApp Business API) — receive your phone number and the message body for OTPs, delivery alerts, and the messages you send via the in-app chat. • AI providers — short, redacted prompts from Nora AI may be processed by AI inference providers to produce responses. We do not send them your phone, ID, or financial data. • Authorities — when we are legally required to disclose data (court order, tax authority, regulator request under PDPA), we will do so and inform you where the law allows. • Successor entity — if the business is acquired or restructured, your data may move to the successor, who must continue to honour this policy. We never sell or rent your personal data, and we never share it for third-party advertising.
We take the protection of your data seriously and use the following safeguards: • Encryption in transit: every request between the app and our servers is encrypted with HTTPS/TLS. • Encryption at rest: sensitive fields (passwords, OTP secrets, document scans) are hashed or encrypted in our database. • Access control: only authorised staff with a legitimate work reason can access your records, and every access is logged. • Authentication: phone-number + password sign-in, plus a one-time SMS code (OTP) at sign-up and password reset. • Local device safety: cached data on your device is stored in an app-private area and wiped on logout. We recommend you also enable a lock screen on your device. • Monitoring & breach response: we monitor our systems for unauthorised access. In the event of a personal data breach affecting your rights, we will notify the Personal Data Protection Commission and you within the timelines required by the PDPA. • Retention: we keep your data only as long as we need it for the purposes above or as required by Tanzanian tax / commercial law (typically 5 years for transaction records). After that it is deleted or anonymised. No system is 100% secure — if you suspect your account has been compromised, contact us immediately using the details below.
The Dawa Mkononi mobile app does not use traditional web cookies. We do, however, use the following on-device identifiers: • Authentication token: a short string stored on your device so you don't have to log in on every screen. Cleared on logout. • Push-notification token (FCM): a per-install identifier used to deliver order updates. You can disable push at the OS level at any time. • Crash & performance telemetry: anonymous identifiers used to group crash reports — they are not tied to your name or phone. • Locale & theme preferences: stored locally so the app remembers your language and dark/light choice. We do not embed third-party advertising trackers in the mobile app. If you use our website, the website may use standard cookies — see the website's cookie banner.
Under the Tanzania Personal Data Protection Act, 2022, you have the following rights regarding your personal data. You can exercise any of them through Settings → Account in the app, or by contacting us using the details below. • Right to access — request a copy of the personal data we hold about you. • Right to rectification — ask us to correct data that is inaccurate or incomplete. • Right to erasure ("delete my account") — request permanent deletion of your account and the personal data we hold, subject only to data we are legally required to keep (e.g. tax records). • Right to restrict processing — ask us to pause certain uses of your data while a dispute is resolved. • Right to data portability — receive your data in a structured, machine-readable format. • Right to object — object to processing for marketing or any use that goes beyond what is necessary to provide the service. • Right to withdraw consent — where we rely on your consent (e.g. marketing notifications, AI voice features), you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal. • Right to lodge a complaint — with the Personal Data Protection Commission of Tanzania. We respond to verified requests within 14 working days. To delete your account immediately, use Settings → Delete Account.
The Dawa Mkononi service is intended for licensed pharmacy businesses and adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal information, please contact us so we can delete the data and close the account.
We may update this policy from time to time — for example, when we add a new feature, change a service provider, or to reflect updates in Tanzanian law. When we make a significant change, we will notify you inside the app (and via push notification or SMS if it materially affects your rights) before the change takes effect. The "Last updated" date at the bottom of this page tells you when it was most recently revised. Continued use of the app after a change means you accept the updated policy; if you don't agree, you can stop using the service or request account deletion.
If you have any questions about this policy, want to exercise your rights, or wish to report a data concern, you can reach us through any of the channels below: • In-app chat: Open the app → Chat with us. • Email: [email protected] • Phone / WhatsApp: +255 710 962 652 • Postal address: Dawa Mkononi, Dar es Salaam, Tanzania. If you are not satisfied with how we have handled your data, you also have the right to lodge a complaint with the Personal Data Protection Commission of Tanzania.