Privacy policy

Zawapay App · updated 12 November 2026

This policy explains what data the Zawapay App collects, why, who it is shared with, and how you can manage it. Zawapay App is published by JOHN KANDUKI LLC, the data controller.

1. Data we collect

• Account: first name, last name, e-mail address, password (never stored in plain text), @username, profile photo, country, the person who invited you.
• Mobile Money numbers: payment number and withdrawal number.
• Transfers: amounts, fees, recipient (@username or number), date and status of each transfer, invitation commissions and withdrawals.
• Identity verification (only if you want to send more than USD 100 a day): ID document and selfie, processed by our provider Didit. We keep the result of the verification.
• Security: PIN code (stored as an irreversible hash), devices signed in to your account, verification codes sent by WhatsApp or SMS.
• Notifications: your preferences and, if you turn them on, your phone’s notification token.

We do not collect your location, your contacts or any advertising data. There are no ads and no tracking tools in the app.

2. Why

• Create and secure your account, and sign you in.
• Carry out your Mobile Money transfers and withdrawals, and keep you informed.
• Calculate and pay invitation commissions.
• Prevent fraud, apply sending limits and meet legal obligations for payments.
• Answer your support requests.

3. Who we share it with

We never sell your data. It is shared only with:

• our payment partner and the Mobile Money operators, to carry out each transfer and withdrawal;
• Didit, for identity verification and WhatsApp / SMS codes;
• our technical providers (server hosting, e-mail delivery), bound by confidentiality;
• authorities, when the law requires it.

The recipient of a transfer sees your name and @username.

4. Retention and security

Your data is kept while your account is open. After deletion, transfer records are kept for the period required by law for financial transactions, then erased. Connections are encrypted (HTTPS), backups are encrypted, and access to data is restricted.

5. Your rights and account deletion

You can view and correct your information in the app, and ask for a copy or the deletion of your data. To delete your account: Settings → About Zawapay App → Delete account, or contact us. Deletion is completed within 30 days.

6. Minimum age

Zawapay App is for people aged 18 and over.

7. Contact us

• E-mail : support@qahala.com
• In the app: Settings → Contact support

We may update this policy; the date at the top shows the latest version.