Patamjengo

1. Who We Are

Patamjengo ("we", "our", "us") is a digital real estate platform operating in Tanzania and the East African region. We provide services for buying, selling, and renting residential and commercial properties via our mobile application ("App") and progressive web application ("PWA").

Platform: Patamjengo Mobile App & Web
Country of Operation: Tanzania, East Africa
Contact: privacy@patamjengo.com

2. Age Requirement

This requirement aligns with Tanzania's contractual capacity laws, which recognise individuals aged 18 and above as legally capable of entering binding agreements, including property transactions.

3. Data We Collect

3.1 Account & Identity Data

• Full name and display name
• Email address (used for login, notifications, and account recovery)
• Phone number (optional, for contact purposes)
• Profile photo (optional, uploaded by you)
• User type: Buyer, Seller, or Both

3.2 Property Listing Data

• Property title, description, type, category, and status
• Price, bedrooms, bathrooms, floor area (sqft/sqm)
• Property address and GPS coordinates
• Property photos and videos uploaded by you

3.3 Location Data

With your explicit permission, we collect your device's location (GPS) to:

• Show properties near you
• Auto-detect your region and currency
• Display maps and directions to listed properties

Location access is foreground-only. We do not track your location in the background. You can revoke location permission at any time in your device settings.

3.4 Communication Data

• Messages exchanged between buyers and sellers within the in-app chat
• Notification preferences and delivery receipts

3.5 Payment Data

3.6 Technical & Device Data

• Device type, operating system, and app version
• App usage logs (screens visited, features used)
• Push notification tokens (for delivering alerts)
• Crash reports and performance diagnostics

4. How We Use Your Data

• To provide the service: Creating and managing your account, listing properties, and enabling search.
• To facilitate transactions: Connecting buyers, sellers, and agents; processing payments.
• To personalise your experience: Showing relevant properties based on your location and preferences.
• To communicate with you: Sending booking confirmations, price alerts, messages, and system notifications.
• To ensure security: Detecting fraud, verifying identity, and protecting your account.
• To improve the platform: Analysing usage patterns to fix bugs and develop new features.
• To comply with the law: Meeting obligations under Tanzanian law and applicable regulations.

5. Data Storage & Processing — Supabase

Patamjengo uses Supabase (supabase.com) as our backend infrastructure. Supabase provides:

• Secure PostgreSQL database for storing user profiles and property listings
• Authentication services (email/password and Google Sign-In)
• Real-time messaging and notification delivery
• Encrypted file storage for property photos and videos

Supabase servers may be located in regions outside Tanzania (including the EU or US). Data transfers are protected by Supabase's compliance with GDPR and SOC 2 Type II standards. For more information, visit: supabase.com/privacy

6. Third-Party Services

6.1 Google Sign-In

You may sign in using your Google account. When you do, Google shares your name, email address, and profile picture with us. We do not receive your Google password. Google's use of your data is governed by Google's Privacy Policy.

6.2 Stripe (Payment Processing)

Card payments are processed by Stripe, Inc. Stripe collects your card details directly; we never see or store your full card number. See stripe.com/privacy.

6.3 Flutterwave (Mobile Money & Card Payments)

Mobile money payments (M-Pesa, Tigo Pesa, Airtel Money, etc.) and card payments in East Africa are facilitated by Flutterwave. See flutterwave.com/privacy-policy.

6.4 Google Maps & Location Services

Maps and geocoding are provided by OpenStreetMap via the flutter_map library. No personal data is sent to map providers. Your GPS coordinates are only used locally to display nearby properties.

7. When We Share Your Data

We do not sell your personal data. We may share data only in these circumstances:

• With other users: Your property listings and public profile are visible to other users.
• With payment processors: Transaction data is shared with Stripe or Flutterwave to complete payments.
• With service providers: Supabase and hosting providers who process data on our behalf under confidentiality agreements.
• Legal compliance: If required by Tanzanian courts, regulatory authorities, or applicable law.
• Business transfer: In the event of a merger or acquisition, your data may be transferred as part of business assets (you will be notified).

8. Data Retention

• Active accounts: Data is retained for as long as your account is active.
• Deleted accounts: We delete your personal data within 30 days of account deletion, except where retention is required by law (e.g., transaction records for tax purposes — retained for 5 years).
• Property listings: Listings you delete are removed from public view immediately and permanently deleted within 30 days.
• Chat messages: Retained for 12 months then automatically deleted unless you delete them earlier.

9. Your Rights Under Tanzanian Law & International Standards

Tanzania's Personal Data Protection Act (PDPA) 2022 and applicable international privacy standards grant you the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data ("right to be forgotten").
• Right to Restriction: Ask us to limit how we process your data.
• Right to Data Portability: Receive your data in a portable format.
• Right to Object: Object to processing of your data for marketing or profiling.
• Right to Withdraw Consent: Withdraw consent at any time (this will not affect past processing).

To exercise any of these rights, email us at privacy@patamjengo.com. We will respond within 30 days.

10. Security

• All data is transmitted over HTTPS/TLS encryption.
• Passwords are never stored in plain text — we use Supabase's bcrypt hashing.
• Database access is restricted by row-level security (RLS) policies.
• File storage uses signed URLs with expiry — no public open buckets.
• We conduct regular security reviews and encourage responsible disclosure of vulnerabilities.

11. Cookies & Local Storage (Web Only)

On the PWA version, we use:

• Session cookies: To keep you logged in.
• Local storage: To cache property listings for offline use and store your preferences (theme, language).
• We do not use advertising cookies or third-party tracking pixels.

12. Children's Privacy

Patamjengo is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, please contact us immediately at privacy@patamjengo.com and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification and by updating the "Effective Date" above. Continued use of the App after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact: