Privacy Policy
Last updated: 20 July 2026
1. Who is responsible
Mnadani Inc. is the data controller for personal information collected through the marketplace. You can contact our Data Protection team through the Contact page.
2. What we collect
- Account data — name, email, phone, password hash, username, profile photo, city.
- KYC data (sellers) — national ID or business registration number, ID photo, selfie, address.
- Transaction data — orders, bids, payments (masked card / MSISDN), refunds, disputes, payouts.
- Delivery data — shipping address, courier ticket, proof of delivery.
- Communications — in-app messages, dispute evidence, support tickets, review text.
- Device data — IP address, user agent, referrer, coarse location, session identifiers.
3. Where it comes from
Directly from you (sign-up, listings, checkout, KYC uploads), automatically from your device (cookies, logs), and from third parties (our verified payment partner for payment confirmation, couriers for shipping status).
4. How we use it
- Run the marketplace: accounts, listings, bids, checkout, escrow, payouts, wallet, gift cards.
- Verify identity, prevent fraud, comply with anti-money-laundering rules.
- Resolve disputes and improve dispute outcomes.
- Send transactional notifications (order, shipping, dispute).
- Send marketing (with your opt-in) — you can turn this off any time in Privacy choices.
- Improve the product using aggregated analytics.
5. Lawful bases
We process personal data on the following lawful bases: performance of the contract with you, our legitimate interests in operating and securing the marketplace, your consent (for optional marketing and analytics cookies), and compliance with legal obligations (tax, AML, court orders).
7. International transfers
Some of our providers process data outside Tanzania (for example, on EU or US infrastructure). Where we transfer personal data internationally, we rely on the provider's standard contractual clauses or equivalent safeguards.
8. Retention
- Account data — for as long as your account is active, plus 12 months.
- Transactions, tax, and AML records — 7 years, as required by Tanzanian law.
- Messages — 24 months after the related order or dispute closes.
- Marketing preferences — until you change them.
9. Security
We use TLS for data in transit, encryption at rest for KYC uploads and sensitive columns, row-level security on the database, hashed passwords, rate limiting on high-risk actions, and re-authentication for sensitive account changes. No system is perfectly secure — please use a strong, unique password and enable phone verification.
10. Your rights
- Access — request a copy of the data we hold about you.
- Correction — fix inaccurate information from Account settings or by contacting support.
- Deletion — close your account at any time; some records are retained where the law requires.
- Object / restrict — opt out of marketing and non-essential analytics.
- Portability — export your listings, orders, and messages on request.
Manage most of these directly under Account → Security & Privacy, or contact us using the details below.
11. Children
Mnadani is not for users under 18. If we learn we've collected data from a child, we will delete it promptly.
13. Changes
We'll notify you of material changes by email or in-app notice at least 14 days before they take effect.