Privacy Policy

1. Who we are

WAKILIFY LIMITED COMPANY ("Wakilify", "we", "us", or "our") operates the Wakilify platform from Dar es Salaam, Tanzania. We provide social networking, marketplace, messaging, LIVE features, wallet, and related services.

• Website: https://wakilify.online
• API: https://api.wakilify.online
• Media / storage: https://storage.wakilify.online
• Android package: app.wakilify.com

2. Scope

This policy applies to personal data processed when you visit our website, create an account, use the Android or web app, upload content, chat, buy or sell on the marketplace, use wallet or payment features, or contact support. By using Wakilify you acknowledge this policy. Related rules are in our Terms of Service.

3. Information we collect

Depending on how you use Wakilify, we may collect:

• Account & authentication: phone number, email and OTP verification data used to sign in, plus your password credential (stored only as a salted scrypt hash) when you set one for manual email or phone login.
• Profile: name, username, profile photo, bio, and similar details you choose to provide.
• Location: approximate or precise location when you grant permission (for example nearby sellers, agents, or delivery-related features). You can revoke permission in device settings.
• Device & push notifications: device identifiers and Firebase Cloud Messaging (FCM) / push tokens so we can deliver notifications you enable.
• Media: photos, videos, stories, reels, LIVE-related media, and other files you upload, stored on our media infrastructure (including storage.wakilify.online).
• Face data (AR face lenses): real-time face-tracking data from your device's front camera, including Apple's TrueDepth API on supported iOS devices, processed on-device only. See section 3.1 for details.
• Communications: chat and message content, support requests, and related metadata (timestamps, participants).
• Marketplace & orders: listings, cart/order details, delivery addresses you provide, and transaction status.
• Wallet & payments: payment and wallet metadata such as amounts, currency, status, mobile money operator, and reference IDs. Card numbers and full payment credentials are processed by licensed payment partners (for example Snippe, AzamPay, and mobile network operators such as M-Pesa / Airtel / Tigo / Halotel); we do not store full card PAN data on our servers when payments are completed through those partners.
• Usage & analytics: app and site usage data (pages/screens viewed, feature interactions, crash/diagnostics) as needed to operate, secure, and improve the service.
• Waitlist / marketing contact: email address if you join a waitlist or contact us.

3.1 Camera, AR face lenses, and face data

Wakilify includes optional AR face lenses in the camera and creation experience. When you open a face lens and grant camera permission, the app uses your device's front-facing camera and — on supported iOS devices — Apple's TrueDepth camera and the ARKit face-tracking API (on Android, ARCore Augmented Faces) to detect and track your face in real time so the selected lens is aligned with it.

What the TrueDepth API is used for. The API produces real-time face position, orientation, and a coarse facial geometry (mesh) that anchors the lens effect. This data is used only to render and align that effect and, if you choose to capture, to composite the effect into the photo or video you take.

What we do not do. We do not create a faceprint, facial-recognition template, or other biometric identifier from this data, and we do not identify you by your face.

Processing, storage, and retention. Face-tracking data is processed only on your device, in memory, while the face lens is open. It is not written to your device storage, not transmitted to Wakilify servers, and not retained after you close the lens.

Captured photos and videos. If you capture a photo or video with a lens applied, the resulting image — including your face as it appears in it — is handled as ordinary user content under section 3 (Media), section 6 (Sharing), and section 7 (Retention), and can be deleted under section 9.

Sharing with third parties. Face-tracking data is not shared with third parties, is not sold, and is not used for advertising. Captured media is shared only where you choose to post or send it.

Camera permission. Access is optional and requested only when you open a lens or another camera feature. You can deny or revoke it in your device settings; the rest of Wakilify remains usable.

4. How we use information

We use personal data to:

• Provide, operate, and improve the Wakilify service
• Authenticate users and protect accounts (including OTP)
• Send transactional and product notifications (including push)
• Enable social, chat, LIVE, marketplace, and commerce features
• Process orders, escrow where offered, and payment flows via partners
• Prevent fraud, abuse, spam, and security incidents
• Provide customer support and respond to requests
• Comply with applicable law (including Tanzanian requirements such as TCRA where applicable) and enforce our Terms
• Analyze aggregated or de-identified usage to improve reliability and UX

5. Legal bases (where applicable)

Where required by law, we process data based on: performance of a contract (providing the service you request); your consent (for example optional location or marketing); legitimate interests (security, fraud prevention, product improvement, balanced against your rights); and legal obligations.

6. Sharing of information

We do not sell your personal data. We may share information with:

• Service providers who host infrastructure, deliver SMS/OTP, push notifications (e.g. FCM), analytics, or customer support tools — under contractual confidentiality and use limits.
• Payment processors and MNOs (including Snippe, AzamPay, and mobile money operators) to complete collections, disbursements, and wallet top-ups.
• Other users when you publish profile information, posts, listings, or messages intended for them.
• Authorities when required by law, court order, or to protect rights, safety, and integrity of the platform.
• Business transfers in connection with a merger, acquisition, or asset sale, subject to appropriate protections.

7. Retention

We retain personal data only as long as needed for the purposes above: while your account is active; for as long as required to fulfill orders, resolve disputes, prevent fraud, or meet legal, tax, and accounting obligations; and thereafter for limited backup or archival periods. When data is no longer required, we delete or anonymize it where practicable.

8. Security

We use administrative, technical, and organizational measures appropriate to the risk — including encrypted transport (HTTPS/TLS), access controls, and segmented services for API and media. No method of transmission or storage is 100% secure; we work to protect your information but cannot guarantee absolute security.

9. Your rights and choices

Subject to applicable law, you may:

• Access or update profile information in the app or website
• Request a copy of personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account or certain data (subject to legal retention) — see our public Delete account page
• Withdraw consent where processing is consent-based (e.g. location, push)
• Opt out of non-essential marketing emails where offered

To exercise these rights, use wakilify.online/delete-account, or email [email protected] or [email protected]. We may need to verify your identity before fulfilling a request.

10. Children

Wakilify is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it. Where local law requires a higher minimum age (for example 18 for certain commerce or fintech features under our Terms), that higher age applies for those features. For our standards on child sexual abuse and exploitation (CSAE), including how to report CSAM and related concerns, see our Child Safety Standards.

11. International processing

We primarily operate from Tanzania. Data may be processed on servers or by providers in other countries that help us run the service. Where we transfer data internationally, we take steps designed to provide appropriate safeguards consistent with applicable law.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes may be communicated in-app, on the website, or by other reasonable means. Continued use after an update constitutes acceptance of the revised policy where permitted by law.

13. Contact

WAKILIFY LIMITED COMPANY
Dar es Salaam, Tanzania

• Privacy requests: [email protected]
• Account deletion: wakilify.online/delete-account
• General contact: [email protected]
• Support (app): [email protected]