Privacy Policy

1. What Data We Collect

When you use TuWatch Africa, we may collect the following categories of personal data:

• Account data: your email address and display name, provided when you sign up or update your profile.
• Payment data: your phone number (for M-Pesa via Paystack) and transaction records. We do not store raw card or banking credentials. These are handled exclusively by Paystack.
• Viewing history: the titles you unlock and watch, timestamps, and playback progress.
• Device & usage data: browser type, IP address, and interaction logs for security and quality purposes.

2. How We Use Your Data

• Account management: to create and maintain your viewer or filmmaker account, authenticate you, and let you recover access.
• Payments: to process Shilingi wallet top-ups and pay-per-view unlocks via Paystack (M-Pesa and card).
• Content delivery: to verify your unlocks and stream titles to you through our video CDN (Bunny.net).
• Communications: to send one-time login codes, payment receipts, and important service notices. We do not send marketing email without your consent.
• Security & fraud prevention: to detect abuse, protect your wallet balance, and enforce our Terms of Service.

3. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with trusted sub-processors necessary to operate the platform:

• Paystack: payment processing (M-Pesa, card). Paystack receives your phone number and transaction amount to fulfil payments. Paystack's own privacy policy applies to data they hold.
• Bunny.net: video delivery CDN. Bunny.net processes streaming requests to serve video content. They may log IP addresses and request metadata for delivery optimisation.
• Supabase: database and authentication infrastructure. Supabase stores your account data and wallet balance on our behalf.

We may disclose data if required by Kenyan law or a valid legal process, and only to the extent legally required.

4. Data Storage

Your data is stored in Supabase, hosted in the EU-West (Ireland) region. Video content is distributed globally through Bunny.net's CDN. We retain account data for as long as your account is active. Wallet transaction records are retained for a minimum of seven years for financial compliance purposes.

5. Your Rights

You have the right to:

• Access a copy of the personal data we hold about you.
• Correction of inaccurate data, including your name and email.
• Deletion of your account and associated data, subject to legal retention obligations (e.g. financial records).
• Portability of your data in a common machine-readable format upon request.
• Objection to processing where we rely on legitimate interests.

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

6. Contact