Privacy Policy

• Account info: name, email, phone number, and password (stored securely hashed. We never see or store your raw password).
• Location: only if you grant permission, to show nearby deals and giveaways and to sort by distance. You can deny or revoke this at any time in your device settings.
• Listings & orders: Store Deal reservations, pickup codes, order status, and Giveaway listings/claims you create.
• Photos: images you upload for a listing (or a stock photo you pick instead).
• Payment metadata: for online Store Deal payments, transaction status and amount. Kupa does not collect or store your card number, mobile money PIN, or similar credentials. Those are handled directly by our payment processor, Payonify.
• Device & app info: if you use the Android app, basic device/app version info and a push-notification token (if you enable notifications).
• Usage data: pages visited and actions taken on Kupa, used to keep the service working and improve it.

• Operate core features. Reservations, pickup codes, listings, payments, favourites, notifications.
• Show you relevant nearby deals and giveaways.
• Prevent fraud and abuse (e.g. tracking no-show strikes).
• Send you order updates and, if you opt in, push notifications about deals near you.
• Improve the Platform and fix problems.

We do not sell your personal information to third parties.

• Supabase. Hosts our database and authentication.
• Payonify. Processes online payments. For Store Deals, online payments go directly to the business's own Payonify account; Kupa separately collects its commission from a prepaid business wallet, not from your payment.
• Vercel. Hosts the website.
• Firebase / Google. Delivers push notifications on Android, if you enable them.
• The other party to a transaction. A business sees your name and pickup code for a Store Deal; a Giveaway giver and claimant see each other's name so they can arrange pickup.

We may also disclose information if required by law, or to protect the safety of users or the public.

We use essential cookies/local storage to keep you signed in and remember preferences (like a floating widget's position). We don't use third-party advertising trackers.

We keep your account and transaction data for as long as your account is active, plus a reasonable period afterward for accounting, dispute-resolution, and fraud-prevention purposes. You can request deletion at any time (see below).

You can access, correct, or delete most of your information directly from your account settings. To request a full export or deletion of your data, email privacy@kupa.co.zw. We'll respond within a reasonable time, though some information (like transaction records) may need to be retained for legal or accounting reasons.

Kupa is not directed at children, and account holders must be old enough to form a binding contract under Zimbabwean law.

We use industry-standard practices (encrypted connections, hashed passwords, access controls) to protect your information, but no system is 100% secure. Please use a strong, unique password.

We may update this policy from time to time; we'll update the "Last updated" date above when we do.

Questions about this policy? Email privacy@kupa.co.zw or use Report a problem.