Privacy policy

This policy explains what personal information Prazi Point collects, why, who we share it with, how long we keep it and what you can ask us to do with it. It covers the Prazi Point app, the Prazi Point Rider app, the web shop at customer.prazi.co.zw and this website.

Prazi Point is operated by Devisal (Pvt) Ltd, Harare, Zimbabwe. We are the data controller. Contact us at prazipoint@gmail.com.

What we collect

Information you give us

• Account details: your name and mobile number, and a password you choose.
• Delivery addresses: the addresses and map pins you save.
• Orders: what you ordered, from which shop, and how you paid.
• Messages: anything you send us through in-order chat, WhatsApp or email.
• Store and rider details: if you sell or ride with us: shop name and location, licence documents, vehicle type and payout details.

Information collected automatically

• Location. Customers: your delivery location, so we can show shops within 3 km. Riders: your position while you are on an active delivery, so the customer and the shop can see the order moving. Rider tracking runs only during a delivery.
• Device identifier. Every sign-in is tied to a device key so we can spot a new device and ask for a one-time code before letting it in.
• Push notification token: to send order updates.
• Technical logs: IP address, app version, error reports and timestamps, used to keep the service working and to investigate abuse.

What we never collect

We do not collect your contacts, photos, call logs, SMS messages or browsing history. We do not ask for a card number: payments are cash on delivery or mobile money handled by the provider.

Why we use it

• To take, dispatch, deliver and settle your orders.
• To match you with shops and riders near you. The whole service depends on approximate location.
• To keep your account secure, including the one-time code sent to a new device.
• To send order updates by push notification and SMS.
• To handle refunds, wallet balances, rider earnings and store settlements.
• To answer support requests and investigate disputes.
• To meet accounting, tax and other legal obligations.

We do not sell your personal information, and we do not share it with advertisers.

Who we share it with

Only what each party needs to do its job:

• The shop filling your order: your first name, order contents and the delivery area.
• Your rider: your name, delivery address, map pin and phone number, for the duration of that delivery.
• Paynow (Webdev, Zimbabwe): to take EcoCash and OneMoney payments.
• Paypulse: to pay out rider earnings, store settlements and wallet withdrawals.
• Google Firebase: push notifications and crash reporting.
• Google Maps Platform: maps, geocoding and routing.
• BulkIT: to send SMS one-time codes and order alerts.
• Plausible Analytics: aggregate visitor counts for this website. It sets no cookies and does not build a profile of you.
• Authorities: where we are legally required to, or to protect someone's safety.

Some of these providers operate servers outside Zimbabwe, so your information may be processed abroad under their own terms.

How long we keep it

• Account details: while your account is open.
• Order and payment records: retained for accounting and tax purposes even after you delete your account, but stripped of your name and phone number so they can no longer be traced to you.
• Rider location history: kept only as long as needed to resolve delivery disputes.
• Device tokens and saved addresses: deleted outright when you delete your account.

Your rights

Under Zimbabwe's Cyber and Data Protection Act you may ask us to give you a copy of your information, correct it, delete it, or stop using it for a particular purpose. Write to prazipoint@gmail.com. We verify that you control the phone number on the account before acting, and we respond within 30 days.

You can delete your account yourself at any time. Here is how, and what happens to your data.

You can withdraw location permission in your phone's settings at any time. The apps will still open, but they cannot show nearby shops or track a delivery without it.

If you believe we have mishandled your information, you may complain to us first and then to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), which supervises data protection.

Security

Traffic between the apps and our servers is encrypted with TLS. Passwords are stored hashed, never in plain text. Access tokens are short-lived and refresh tokens rotate on every use, so a stolen token stops working quickly. On phones, credentials are held in the platform's encrypted storage. No system is perfect, so if a breach affects you, we will tell you.

Children

Prazi Point is not intended for anyone under 18. We do not knowingly create accounts for children. If you believe a child has an account, contact us and we will remove it.

Changes to this policy

We will update the date at the top when this policy changes. If a change materially affects how we use your information, we will tell you in the app before it takes effect.

Contact

Devisal (Pvt) Ltd, Harare, Zimbabwe
Email prazipoint@gmail.com
WhatsApp +263 713 219 735