Introduction
This Privacy Policy explains how HwaHwa ("we", "our", "us") collects, uses, shares and protects personal data when you use our alcohol delivery ecosystem (Delivery, Suppliers, Couriers). It also details your choices and rights. We do not sell personal data and we do not use personal data for third‑party advertising or behavioral tracking.
Using HwaHwa means you consent to this Policy. If you disagree, you should discontinue use and request account deletion via the channels provided below.
Data We Collect
We collect only what is necessary for account creation, safe alcohol delivery, regulatory compliance and platform reliability.
Contact Info
Mobile phone number (required), optional email for support & legal notices.
Account Identifiers
Internal user ID, role (customer / supplier / courier), session tokens.
Age Verification
National ID hash + extracted birth date. Full image discarded immediately after verification.
Location
Delivery coordinates & coarse device location for routing and safety checks.
Usage & Events
Non‑personal app events (screen opens, feature usage) aggregated for performance.
Device & Diagnostics
Model, OS version, crash logs, error traces to improve stability.
Support Interactions
Chat transcripts & ticket metadata retained for service quality & abuse auditing.
Data Not Collected
- No persistent payment card numbers (Cash On Delivery only at present).
- No advertising identifiers for cross‑app tracking.
- No biometric templates.
How & Why We Use Data
Sharing & Third Parties
We share limited data strictly for operational necessity:
- Suppliers: receive itemized order details (products, quantities) & delivery zone — no age documents.
- Couriers: receive delivery address, contact number (masked where possible), and verification status.
- Service Providers: infrastructure, analytics (aggregated usage, crash diagnostics), secure messaging.
- Regulators / Law Enforcement: only when legally required (substantiated request or mandated audit).
We do not sell data, permit data brokers, or enable third‑party ad targeting. Cross‑context behavioral tracking is disabled by design.
Retention & Deletion
- Account data: stored while account is active; deleted within 30 days of confirmed deletion request.
- Age verification hash: retained up to 5 years for compliance & anti‑fraud (non‑reversible, no image).
- Location & order events: operational records kept 12 months then aggregated or purged.
- Crash & diagnostics: anonymized after 90 days.
- Support transcripts: retained up to 24 months to improve service and investigate abuse.
You may request expedited deletion; regulatory or safety obligations may require limited retention overrides (e.g., outstanding legal investigation).
Your Rights
Subject to applicable law you may:
- Access: Request a summary of personal data we hold.
- Correction: Update inaccurate phone or email details.
- Deletion: Request account & associated personal data removal.
- Restriction: Temporarily limit processing during a dispute.
- Objection: Opt out of non‑essential analytics (performance metrics continue in aggregated form).
- Data Portability: Obtain a machine‑readable export (JSON) of core account & order history.
Submit requests via privacy@hwahwa.co.zw or in‑app Support. We respond within 30 days.
Security Measures
- Encryption in transit (TLS) for all API calls.
- Segregated service accounts & least‑privilege access.
- Hashed tokens for age verification; no raw ID images stored.
- Routine dependency & infrastructure patching.
- Abuse & anomaly detection for fraudulent patterns.
No method is 100% secure; we maintain incident response procedures and will notify you of breaches where legally required.
Age & Restricted Use
HwaHwa is for users of legal drinking age (18+ in Zimbabwe). Underage accounts are disabled and purged. Re‑verification may occur if misuse or identity fraud is suspected.
Platform Compliance (Apple & Google Play)
- Data Types Declared: Contact info, identifiers, location (approximate), usage data (non‑personal), diagnostics, age verification tokens.
- Purpose Limitation: All data tied to core functionality (ordering, delivery, safety) or stability improvements.
- Tracking: No third‑party advertising or cross‑app tracking SDKs; ATT (App Tracking Transparency) prompt not required presently.
- Security: Encryption in transit + controlled access; Play policy on data safety and Apple guidelines for secure storage met.
- Data Deletion: User can request deletion; irreversible after processing except compliance audit traces (non‑identifiable).
- Payment: Currently Cash On Delivery – no storage of card numbers, CVV or mobile wallet tokens.
Changes to This Policy
If we make material changes we will post an in‑app notice & update the "Last updated" date. Continued use after changes constitutes acceptance.
Contact
Questions or requests:
- Email: privacy@hwahwa.co.zw
- General Support: network@hwahwa.co.zw
- Safety / Age: safety@hwahwa.co.zw