Privacy Policy
Effective: 15 June 2026
Pozi is a WhatsApp-based grocery delivery service operating in Dar es Salaam, Tanzania. This page explains what personal information we collect from you, how we use it, and what choices you have. We've tried to write it in plain language.
1. What we collect
When you order through Pozi we collect:
- Your WhatsApp phone number — required to receive your messages and send replies.
- The name on your WhatsApp profile — used to address you in conversation.
- Delivery location — only when you share it via WhatsApp's "Share Location" feature, or when you save a named address. We use this to deliver your order and to confirm you're inside our service area.
- Order details — products ordered, quantities, delivery address, payment method, timestamps.
- Conversation history with our bot — your messages and our replies. We retain these so the bot can recall recent context (e.g. an in-progress cart) and so we can review issues if you contact support.
2. What we don't collect
We do not access your WhatsApp contacts, photos, or any data outside our chat with you. We do not track your location continuously — only the single coordinate you explicitly share for a delivery.
3. How we use it
The information above is used to:
- Fulfil and deliver your orders.
- Confirm payment and send order updates.
- Improve our product catalogue, delivery routing, and chatbot accuracy.
- Send you occasional offers (only if you have opted in — see Section 6).
4. Who we share it with
We share limited information with:
- Our delivery riders — your name, phone number, and delivery address, so they can complete the delivery.
- Payment providers (e.g. M-Pesa, Tigo Pesa) — only the amount and reference necessary to process your transaction.
- WhatsApp / Meta — by virtue of using WhatsApp to message us, your conversation is also subject to WhatsApp's own privacy policy.
We do not sell your personal information, and we do not share it with third parties for marketing.
5. How we store it
Customer data is stored in our managed database (Supabase) on infrastructure in regulated cloud regions, and is encrypted in transit (TLS). Access is restricted to authorised Pozi staff and contractors who need it to operate the service.
6. Marketing messages and opt-out
We may occasionally send you promotional WhatsApp messages — only after you've placed at least one order with us and only during normal business hours. You can opt out at any time by replying with any of:
- STOP or UNSUBSCRIBE (English)
- ACHA or TOA (Kiswahili)
Opting out is instant. You will still receive transactional messages related to your active orders (confirmations, delivery updates).
7. Your rights
You can ask us to:
- Show you the data we hold about you.
- Correct any inaccurate information.
- Delete your account and associated data ("right to be forgotten").
To exercise any of these, message us on WhatsApp or email admin@pozi.co.tz. We aim to respond within 7 business days. For account deletion specifically, see our step-by-step data deletion instructions.
8. Data retention
We retain order records and basic account information for as long as your account is active, and for up to 3 years after your last order for tax and audit reasons. Conversation history with the bot is kept on a rolling 12-month window unless you request deletion sooner.
9. Children
Pozi is not directed at children under 13. We do not knowingly collect data from anyone under that age. If you believe a minor has shared information with us, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. The "Effective" date above always reflects the current version. Material changes will be announced via WhatsApp to active customers before they take effect.