Privacy Policy

This Privacy Policy explains how KweliAuto ("we", "us", or "our") collects, uses, shares, and protects your personal data when you use our website, vehicle check tools, vehicle-history reports, marketplace, auctions, and wallet payments (the "Service").

We handle personal data in line with the Personal Data Protection Act, 2022 of the United Republic of Tanzania and its regulations, which form the applicable data protection framework for this Service.

1. Data We Collect

• Account information — your name, email, phone number, city, and role (for example buyer, dealer, inspector, finance or insurance partner).
• Vehicle lookup queries — the chassis/registration numbers and vehicle details you search or check.
• Payment & wallet transactions — wallet top-ups, balances, bids, subscriptions, and transaction history (we do not store full card details).
• Usage & audit logs — actions taken on the Service, device and log data, timestamps, and IP address.
• Consent records — records of the consents you give, including for vehicle-history lookups.

2. How We Use Your Data

• To create and manage your account and verify business accounts.
• To deliver car checks, vehicle-history reports, marketplace, and auction features.
• To process wallet top-ups, subscriptions, bids, escrow, and fees.
• To communicate with you about your account, transactions, and support.
• To keep audit logs, prevent fraud and abuse, and secure the Service.
• To improve our products and meet legal and regulatory obligations.

3. Legal Basis & Consent

We process personal data on the bases permitted under the Personal Data Protection Act, 2022 — including your consent, the performance of a contract with you, our legitimate interests, and compliance with legal obligations.

Vehicle-history lookups require your consent or a legitimate interest, and we record the consent you give for such lookups. You may withdraw consent at any time, although this may limit your ability to use certain features.

4. How We Share Data

We share personal data only as needed, including with:

• Payment processors (for example Flutterwave) to process top-ups and payments.
• SMS and email providers to send notifications and verification messages.
• Partners such as inspectors, dealers, finance, and insurance providers, where reasonably needed to complete a transaction you have requested.
• Authorities or third parties where required by law or to protect rights, safety, and the Service.

We do not sell your personal data.

5. Data Retention & Audit Logs

We keep personal data for as long as needed to provide the Service, meet legal, accounting, and regulatory requirements, resolve disputes, and enforce our agreements. Audit logs and transaction records may be retained for longer periods to support security, fraud prevention, and compliance. When data is no longer needed, we delete or anonymise it.

6. Security

We use reasonable technical and organisational measures to protect your data. Passwords are hashed, data is encrypted in transit, and access is restricted to authorised personnel. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any incident.

7. Your Rights

Subject to the Personal Data Protection Act, 2022, you may:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, where the law allows.
• Withdraw consent you previously gave, including for vehicle-history lookups.

To exercise these rights, contact us at privacy@kweliauto.co.tz.

8. Cookies

We use a small number of essential cookies, including a session/authentication cookie to keep you signed in and to keep the Service secure. These are necessary for the Service to work. You can control cookies in your browser, but disabling essential cookies may stop parts of the Service from functioning.

9. Children

The Service is intended for adults (18 years and older) and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us so we can remove it.

10. International Transfers

Some of our service providers (for example payment, SMS, email, or hosting partners) may process data outside Tanzania. Where data is transferred internationally, we take steps to ensure it remains protected in line with the Personal Data Protection Act, 2022.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you. Please review this page periodically.