Privacy Policy
This policy explains what personal data Peso collects, why we collect it, who we share it with and what you can do about it. It applies to the Peso mobile app and this website.
1. Who we are
Peso is operated by Peso Tanzania Limited, Dar es Salaam, Tanzania. We are the data controller for the information described below. You can reach us at peso.app@gmail.com.
2. What we collect
We collect only what the service needs to work. We do not ask for your name, email address, date of birth, photograph or national ID.
| Data | Why we hold it |
|---|---|
| Mobile phone number | It is your account identifier and how we verify it is really you, using a one-time code sent by SMS. |
| Wallet balance and subscription status | To show your balance and to know whether Peso Plus is active. |
| Transaction records — amount, type, direction, reference, time and status | To show your history, to operate the Public Wallet and to keep the financial records the law requires of us. |
| The other party's phone number on a transfer | To deliver the transfer. It is stored separately from the public record and is visible only to you. |
| Device push token and device platform | So we can send you notifications. It identifies a device installation, not you personally. |
| App activity — when you last opened the app and when you last checked the Public Wallet | So reminders are useful rather than repetitive, and so we do not notify you about something you have already seen. |
| Notification history and preferences | To respect the switches you set and to avoid sending you the same message twice. |
What appears publicly. The Public Wallet activity feed shows transfers and withdrawals to other signed-in users. Phone numbers in that feed are always masked before they are stored, so the full number is never published. Your personal top-ups and your account balance are never shown to anyone else.
3. How we use your data
- To create and secure your account, and to verify your phone number.
- To carry out transfers, withdrawals, top-ups and subscription payments.
- To send you notifications you have not switched off.
- To prevent fraud and abuse, including rate limits on sensitive actions.
- To meet our legal, accounting and regulatory obligations.
We do not sell your personal data, and we do not use it for advertising.
4. Who we share it with
We share data only with the service providers that make Peso work, and only what each one needs:
| Provider | What they receive | Why |
|---|---|---|
| Supabase | All account and transaction data | Database, authentication and server hosting |
| Google Firebase Cloud Messaging | Device push token and notification content | Delivering push notifications |
| Beem Africa | Your phone number and the one-time code | Sending verification SMS |
| Mobile money provider | Your phone number and the amount | Processing top-ups |
We may also disclose data where we are legally required to — for example a valid order from a court or a regulator.
5. Where your data is stored
Peso's database and servers are hosted by Supabase in the European Union (Ireland). This means your personal data is transferred outside Tanzania and stored abroad. We rely on our providers' contractual data protection commitments to keep it protected to the standard described in this policy.
6. How long we keep it
- Account and transaction records — for as long as your account is open, and afterwards only where we must keep financial records to comply with the law.
- App activity used for notifications — 60 days, then automatically deleted.
- Device push tokens — removed automatically once a device has been inactive for 180 days, or immediately when you sign out.
7. Your rights
Under the Tanzanian Personal Data Protection Act, 2022, you have the right to:
- ask what personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have your account and data deleted;
- object to how we use your data, and withdraw consent;
- complain to the Personal Data Protection Commission.
To delete your account and data, use the account deletion page. For anything else, email support@peso.co.tz and we will respond within 30 days.
8. Notifications
You control notifications in the app under Profile → Settings → Notifications, where withdrawals, reminders and re-engagement messages can each be switched off independently. You can also turn off all notifications for Peso in your phone's system settings.
9. Security
Traffic between the app and our servers is encrypted in transit. Access to your data is restricted at the database level so that one user's records cannot be read by another. Balances can only be changed by the server, never directly by the app. No system is perfectly secure, but we take these safeguards seriously and review them.
10. Children
Peso is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
11. Changes to this policy
If we change this policy we will update the date at the top of this page, and where the change is significant we will tell you in the app.
12. Contact us
Questions about privacy or this policy:
peso.app@gmail.com
Peso Tanzania Limited, Dar es Salaam, Tanzania