Privacy Policy
Last updated: September 2026
1. Overview
Dondoa ("we", "us", "our") operates a digital growth and consumer intelligence platform that connects consumers with local businesses across East Africa, rewards verified purchases, and issues digital receipts. This Privacy Policy explains what data we collect, why we collect it, and the choices you have.
2. Data we collect
Account data: your name and email address when you sign in with Google or email. Profile data: optional details you add to your profile, such as a display name or phone number. Transaction data: records of purchases you verify by scanning a merchant QR code, including the business, amount, and points earned. Location data: approximate location used to surface nearby businesses and offers. Usage data: device and interaction data such as the pages you view and features you use, collected for product improvement and analytics.
3. How we use your data
To create and manage your account, verify purchases and award Dondoa Points, generate digital receipts, show relevant businesses and offers, send service and rewards notifications, detect and prevent fraud, and improve our services through aggregated, privacy-safe analytics.
4. Google sign-in
When you use "Sign in with Google", we receive only your basic profile (name and email) to identify your account. We do not request, and cannot access, your Google emails, files, contacts, or any other Google data. You can revoke Dondoa's access at any time from your Google Account permissions.
5. Location
With your permission, we use your device location to show businesses and offers near you. You can withdraw this permission at any time in your device settings or within the app.
6. Data sharing
We do not sell your personal data. We share data only as needed to operate the service (for example, with our hosting and analytics providers under strict data-processing agreements), to comply with legal obligations, or with your consent. Merchants see only the purchase information you verify with them.
7. Data retention
We keep your data for as long as your account is active and as needed to provide the service. Dondoa Points expire 180 days after they are earned. You can request deletion of your account and associated data at any time.
Request account deletion8. Security
We protect your data with industry-standard safeguards including encrypted transmission and access controls. No method of transmission or storage is completely secure, but we work to protect your information using reasonable measures.
9. Your rights
You may access, correct, or delete the personal data we hold about you, and withdraw any consents you have given. You can exercise these rights from within the app or by contacting us. Deleting your account removes your personal data from active use, subject to limited legal retention requirements.
10. Children
Dondoa is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy as our services evolve. We will post the updated version here and revise the "Last updated" date. Material changes will be communicated through the app or by email where appropriate.
12. Contact
If you have questions about this policy or your data, please contact us through the in-app support options or the contact details provided in the app.