Privacy Policy

Last updated: March 2026  ·  TuWatch Africa / Wabe Films

TuWatch Africa ("we", "us", "our") is operated by Wabe Films and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our platform at tuwatch.africa.

1. Information We Collect

We collect the following categories of personal data:

• Account information: Full name, email address, and phone number provided during sign-up or onboarding.
• Payment information: Mobile money transaction references and amounts processed via Paystack. We do not store card or M-Pesa credentials — these are handled entirely by Paystack.
• Usage data: Pages visited, titles viewed or unlocked, watch history, and interactions with platform features.
• Device data: Browser type, operating system, IP address, and general location (country level).
• Filmmaker data: Company name, biography, country, website, and submitted title information for users who register as filmmakers.

2. How We Use Your Information

• To create and manage your account and Shilingi wallet.
• To process payments and maintain transaction records.
• To deliver content you have unlocked and grant permanent access to purchased titles.
• To communicate with you about your account, transactions, and platform updates.
• To review and publish filmmaker title submissions.
• To improve platform features, performance, and content recommendations.
• To comply with applicable legal obligations under Kenyan law.

3. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy:

• Supabase — Database, authentication, and file storage. Your account data and transaction records are stored on Supabase infrastructure.
• Paystack — Payment processing for M-Pesa and card transactions. Paystack operates under PCI-DSS compliance standards.
• Bunny.net — Video delivery and streaming CDN. Video content is served through Bunny.net's global edge network.
• Anthropic — AI-powered features such as synopsis generation and title suggestions. Submitted text may be processed by Anthropic's API. We do not send personal identifying information to Anthropic.
• Vercel — Application hosting and deployment infrastructure.

4. Legal Basis for Processing

We process your personal data under the following legal bases as recognised by the Kenya Data Protection Act 2019:

• Contract performance: Processing necessary to deliver services you have requested, including wallet top-ups and content unlocks.
• Legitimate interests: Platform improvement, fraud prevention, and security monitoring.
• Legal obligation: Compliance with Kenyan tax, financial, and data protection regulations.
• Consent: Where we rely on consent, you may withdraw it at any time.

5. Your Rights Under the Kenya Data Protection Act 2019

As a data subject under Kenyan law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal retention requirements.
• Object to or restrict certain types of processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is consent-based.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.

To exercise any of these rights, contact us at hello@tuwatch.africa.

6. Data Retention

We retain your personal data for as long as your account remains active or as required by law. Transaction records are retained for a minimum of seven years in accordance with Kenyan financial regulations. You may request account deletion at any time; we will delete your personal data within 30 days unless retention is legally required.

7. Cookies and Tracking

We use cookies and similar technologies to maintain your session and improve your experience. We do not use third-party advertising cookies. The cookies we set are:

• Session cookies: Required for authentication and keeping you logged in.
• Preference cookies: Remembering your settings and language preferences.

You can disable cookies in your browser settings, but doing so may affect your ability to log in or use the platform.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data, including:

• Encrypted data storage and transmission (TLS/HTTPS).
• Row-level security policies on our database to restrict data access.
• Limited access to personal data on a need-to-know basis.
• Regular review of security practices.

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately.

9. International Data Transfers

Our third-party service providers (Supabase, Paystack, Bunny.net, Vercel) may process data in jurisdictions outside Kenya. Where this occurs, we ensure appropriate safeguards are in place consistent with the Kenya Data Protection Act 2019.

10. Children's Privacy

TuWatch Africa is intended for users aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a minor has created an account, please contact us at hello@tuwatch.africa and we will delete the account promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or via an in-app notice. Continued use of the platform after changes take effect constitutes acceptance of the updated policy. The date at the top of this page reflects the most recent revision.