Privacy Policy

Last updated 27 September 2026

This policy explains what personal information Dukagram collects, why, who we share it with and the choices you have. Dukagram is run by [Owner full name], [City], Tanzania, who is responsible for your data. Questions: [contact email].

1. What we collect

• Account: your phone number or email address (for login codes), or your Google account's name, email and photo if you continue with Google.
• Profile: full or shop name, username, profile photo, the area you type (e.g. Kariakoo) and your bio.
• What you post and do: products and their photos, prices and locations; likes, comments, saves, follows, reviews and reports; people you block.
• Messages: chats with other users, including photos you send.
• Orders: what you bought or sold, the name, phone and delivery area given at checkout, how you paid, and order status.
• Payments: the mobile money number used and the payment result. We never see or keep your mobile money PIN.
• Verification (only if you ask for the tick): your full name, ID type and a photo of your ID.
• Technical: basic information needed to keep you logged in securely. We do not collect your exact GPS location.

Some information is kept only on your phone, such as recent searches and which stories you have watched.

2. Why we use it

• To create your account and log you in.
• To show your profile and products, run the feed, search, likes, comments, chat and notifications.
• To process orders and payments and help buyers and sellers reach each other.
• To check verification requests.
• To keep Dukagram safe: handle reports, block abuse, prevent fraud and enforce our Terms.
• To meet legal duties.

We use your information because you asked for the service (your account and orders), because you agreed (for example to verification), or because we have a fair reason to keep the app safe and working.

3. What other people can see

• Everyone, including people without an account: your profile (name, username, photo, area, bio), your products, comments, reviews, follower counts and verified tick.
• Only the other person in an order: the name, phone and delivery details given for that order.
• Only the people in a chat: its messages and photos.
• Never shown to others: your login phone or email, what you saved, who you blocked, your reports and your ID photo.

4. Who we share it with

We do not sell your personal information. We share it only with companies that help us run Dukagram, and only what they need:

• Supabase (database, login and file storage);
• Google (only if you continue with Google);
• the SMS and email services that send login codes;
• the mobile money or payment company that processes a payment.

We may also share information when the law requires it, or to protect people from harm or fraud.

5. Where your data is stored

Dukagram's database and files are stored by Supabase on servers in Ireland (European Union), which has strong data protection laws. We transfer data there under the conditions of Tanzania's Personal Data Protection Act, 2022, and our providers must keep it secure and confidential.

6. How long we keep it

• Your account and content: until you delete them or your account.
• ID photos for verification: deleted as soon as the request is approved or rejected.
• Orders: when you delete your account, orders stay as a record for the other person (with your account removed), for as long as needed for disputes, accounting and the law.
• Login codes expire after 5 minutes.

7. Your rights

You can: see and correct your profile at any time (Edit profile); delete your account and its data (Settings → Delete account); and ask us for a copy of your information, to correct or delete it, or object to how we use it, by writing to [contact email]. We will reply within 30 days. You can also complain to the Personal Data Protection Commission of Tanzania.

8. Security

We use login codes instead of passwords, secure connections, and database rules so people can only reach what they are allowed to see. No system is perfectly secure, so keep your phone and login codes private and tell us if you notice anything wrong.

9. Children

Dukagram is not for children under 13. Users aged 13–17 may browse but not buy or sell. If you believe a child under 13 has an account, contact us and we will delete it.

10. Changes

We may update this policy. If a change is important, we will tell you in the app before it applies. The date at the top shows the latest version.