Sokofy is a digital marketplace platform that connects buyers with local market sellers for the purchase and delivery of fresh produce, fruits, vegetables, and related goods in Tanzania. The platform is operated by Sokofy Limited ("Sokofy", "we", "us", or "our"), a company incorporated under the laws of the United Republic of Tanzania.
This Privacy Policy applies to all users of the Sokofy platform, including our website at sokofy.africa, our mobile applications for iOS and Android (when launched), and any related services we offer (collectively, the "Platform").
By accessing or using the Platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Platform.
We collect information you provide directly to us, information generated through your use of the Platform, and in some cases, information from third-party services. The categories of personal information we collect are described in the table below.
| Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number (for sellers) | Account registration, seller verification |
| Contact Data | Phone number, email address, delivery address | Account registration, order placement |
| Transaction Data | Order history, items purchased, amounts paid, payment method used | Automatically when you place or receive orders |
| Location Data | GPS coordinates, delivery address, general area | With your permission via device location services |
| Device & Usage Data | Device type, operating system, app version, pages visited, session duration | Automatically via app and web analytics |
| Communications Data | Messages sent to sellers or support, reviews and ratings | When you communicate through the Platform |
| Seller Business Data | Business name, market location, product listings, bank/mobile money details | During seller onboarding and account management |
| Notification Preferences | Email address submitted for launch notifications | Via the notification sign-up form on our website |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless you voluntarily provide such information and it is strictly necessary for a specific service.
We use the personal information we collect for the following purposes, each grounded in a legitimate basis under applicable law:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account on the Platform | Performance of a contract |
| Processing orders, payments, and deliveries | Performance of a contract |
| Verifying seller identity and business legitimacy | Legal obligation / legitimate interest |
| Sending order confirmations, status updates, and delivery notifications | Performance of a contract |
| Providing customer support and resolving disputes | Legitimate interest |
| Improving the Platform through usage analytics | Legitimate interest |
| Sending marketing communications (with your consent) | Consent |
| Detecting and preventing fraud, abuse, and security threats | Legal obligation / legitimate interest |
| Complying with Tanzanian laws and regulatory requirements | Legal obligation |
| Notifying early-access subscribers of the app launch | Consent |
We will never use your personal information for purposes that are incompatible with those stated above without first obtaining your consent or as otherwise permitted by law.
We do not sell your personal information to any third party. We share your information only in the limited circumstances described below.
With Sellers: When you place an order, we share your name, delivery address, phone number, and order details with the relevant seller so they can fulfil your order. Sellers are contractually required to use this information solely for order fulfilment and not for any other purpose.
With Buyers: When a buyer places an order, sellers receive the buyer's contact and delivery information. Sellers' business names, market locations, product listings, and ratings are visible to all users of the Platform.
With Payment Processors: We share transaction data with our payment gateway partners (such as Pesapal or Flutterwave) to process payments securely. These partners operate under their own privacy policies and are bound by strict data security standards.
With Delivery Partners: Where third-party delivery services are used, we share the necessary order and address information to complete delivery.
With Service Providers: We engage trusted third-party service providers for functions such as cloud hosting, SMS notifications, email delivery, and analytics. These providers are contractually prohibited from using your data for any purpose other than providing services to us.
For Legal Compliance: We may disclose your information to government authorities, law enforcement, or regulatory bodies when required by Tanzanian law, court order, or to protect the rights, property, or safety of Sokofy, our users, or the public.
Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
Sokofy facilitates payments through trusted third-party payment processors. We do not store your full mobile money PIN, card number, or bank account credentials on our servers. Payment transactions are processed through encrypted, PCI-DSS compliant payment gateways.
When you make a payment via M-Pesa, Mixx by Yas, Airtel Money, or card, the transaction is processed directly by the payment provider. Sokofy receives only a confirmation of the transaction outcome (success or failure) and a transaction reference number for record-keeping purposes.
Seller payouts are processed to the mobile money account or bank account registered during seller onboarding. Sokofy retains records of all financial transactions for a minimum of seven (7) years as required by Tanzanian financial regulations.
We retain your personal information for as long as your account is active or as needed to provide you with our services. The specific retention periods we apply are as follows:
| Data Type | Retention Period |
|---|---|
| Account and profile data | Duration of account + 2 years after deletion |
| Order and transaction records | 7 years (financial regulation requirement) |
| Delivery addresses | Until removed by the user or account deletion |
| Communications and support records | 3 years from last interaction |
| Device and usage analytics | 24 months (aggregated/anonymised) |
| Early-access notification email | Until you unsubscribe or 12 months, whichever is sooner |
| Seller verification documents | Duration of seller account + 5 years |
When retention periods expire, we securely delete or anonymise your personal information so that it can no longer be associated with you.
You have the following rights with respect to your personal information. To exercise any of these rights, please contact us using the details in Section 12.
| Right | What It Means |
|---|---|
| Access | You may request a copy of the personal information we hold about you. |
| Correction | You may request that we correct inaccurate or incomplete information. |
| Deletion | You may request deletion of your account and personal data, subject to legal retention obligations. |
| Portability | You may request your data in a structured, machine-readable format. |
| Objection | You may object to processing based on legitimate interest, including direct marketing. |
| Withdraw Consent | Where processing is based on consent, you may withdraw it at any time without affecting prior processing. |
| Restriction | You may request that we restrict processing of your data in certain circumstances. |
We will respond to all valid requests within thirty (30) days. In complex cases, we may extend this by a further thirty (30) days, and will notify you accordingly. We will not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand how visitors interact with our content. Cookies are small text files stored on your device.
We use the following types of cookies: Essential cookies that are necessary for the website to function correctly; Analytics cookies that help us understand how visitors use our site (using anonymised data); and Preference cookies that remember your settings and choices. We do not use advertising or tracking cookies that follow you across other websites.
You can control cookie settings through your browser preferences. Disabling essential cookies may affect the functionality of the website. Our mobile applications use similar analytics tools to understand app usage patterns, all in anonymised and aggregated form.
The Sokofy Platform is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at the address in Section 12 and we will take steps to delete such information promptly.
Users must be at least 18 years old to register as a seller on the Platform. Buyers under 18 must use the Platform under the supervision of a parent or legal guardian.
We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include data encryption in transit (HTTPS/TLS), secure password hashing, access controls and role-based permissions, regular security reviews, and secure cloud infrastructure with reputable providers.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant Tanzanian authorities as required by law.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you a notification via email or through the Platform.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Platform after any changes to this policy constitutes your acceptance of the updated terms.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through any of the following channels:
Sokofy Limited
📧 Email: privacy@sokofy.africa
📞 Phone: +255 768 619 375
📍 Address: 3 Regent, Dar es Salaam, Tanzania
We aim to respond to all privacy-related inquiries within 5 business days.