Introduction
This Privacy Policy describes how Afya Intelligence Limited (“DukaDawa”, “we”, “us”) collects, uses, and protects your personal information when you use the DukaDawa web platform and mobile applications (the “Service”). It applies to all DukaDawa products including the iOS and Android apps published under the DukaDawa name.
Information we collect
- Account information: name, email address, phone number, role (pharmacist, cashier, owner), and pharmacy you are linked to.
- Usage data: pages visited, features used, sales and inventory actions performed inside the app, and timestamps. Used to operate the Service and improve it.
- Device information: device model, operating system, app version, language, and IP address. Used for diagnostics and security.
- Push notification identifiers: when you opt in to push notifications we receive a device subscription ID from OneSignal so we can send alerts (e.g. low stock, new orders).
- Business records: sales, purchase orders, stock movements, customer records, and other operational data you enter into the Service.
How we use your information
We use the information we collect to:
- Provide, operate, and maintain the Service.
- Authenticate you and keep your account secure.
- Send transactional notifications (e.g. shift reminders, stock alerts, receipts).
- Comply with tax, pharmacy, and accounting regulations.
- Improve the Service, fix bugs, and develop new features.
- Respond to support requests and communicate with you.
Sharing your information
We do not sell your personal data. We share information only with the following categories of recipients, and only as needed:
- Service providers we rely on to run the Service — including cloud hosting, encrypted file storage (Cloudflare R2), push-notification delivery (OneSignal), and email delivery. These providers process data on our behalf under contract.
- Your pharmacy — if you are part of a pharmacy team, the pharmacy owner and authorised administrators can see your role, activity, and the records you create inside the pharmacy.
- Authorities — when required by law, court order, or to investigate fraud or abuse.
How we protect your information
We use industry-standard measures including encryption in transit (HTTPS/TLS), encryption at rest for backups, role-based access controls, and audit logging. No system is perfectly secure, but we work continuously to protect your data.
Your rights
You have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information through your account settings or by contacting us.
- Delete your account and personal data. You can do this from inside the app under Settings → Delete Account, or by visiting our account deletion page. Full details on what is deleted, what is retained for legal reasons, and the timeline are described on that page.
- Object to, or request restriction of, certain processing.
- Withdraw consent for push notifications at any time from your device settings.
Data retention
We keep personal account information for as long as your account is active. After you delete your account, we remove personal identifiers from production systems within 30 days and from encrypted backups within 60 days. Business records such as sales invoices, tax records, and stock movements are anonymised but retained for the period required by Tanzanian tax and pharmacy law (currently 5 years).
Children’s privacy
The Service is intended for use by pharmacy staff and business owners. It is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at dukadawa@afyaintelligence.co.tz and we will delete it.
Compliance
We process personal data in accordance with the Personal Data Protection Act, 2022 of the United Republic of Tanzania, and where applicable, the EU General Data Protection Regulation (GDPR).
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when the policy was last revised. Material changes will be communicated through the Service.
Contact us
Questions about this Privacy Policy or your data? Email us at dukadawa@afyaintelligence.co.tz, or visit our contact page.