Privacy Policy

1. Who this applies to

This policy covers customers who browse, create a device session, sign in with a phone number, place orders, save favourites, or contact us through the app.

2. Information we collect

We collect the following categories of information:

• Account and contact data: mobile phone number, optional additional contact numbers, and a guest or verified account identifier.
• Device data: a unique device ID and a device secret stored on your phone so the app can start a session without forcing sign-in. We also receive platform (iOS or Android) and, when you request a code, the IP address used for that request.
• Order and commerce data: products ordered, quantities, delivery addresses, order status, payment phone number (MSISDN), and payment status from our mobile-money provider.
• App activity: favourites, cart contents stored on your device, and in-app notifications related to your orders.

We do not sell personal data. We do not use third-party advertising trackers in the app.

3. How we use information

• Create and keep your storefront session, including guest checkout.
• Send and verify one-time SMS codes when you link a phone number.
• Process orders, delivery, and mobile-money payments.
• Contact you about an order using the number you provide.
• Show order history, favourites, and support notices.
• Protect accounts, prevent abuse, and comply with Tanzanian law.

4. Payments

If you pay by mobile money, we send the payment phone number, amount, and order reference to our payment processor (currently Selcom) so a USSD prompt can be sent to your handset. The processor may also store transaction records required by financial regulations.

5. Sharing

We share data only as needed to run the service:

• SMS / OTP delivery providers, to send verification codes.
• Selcom or a successor payment provider, to collect payment.
• Hosting and storage providers (including DigitalOcean) that run our servers and product images.
• Authorities, if required by law.

6. Retention

Device credentials stay on your phone until you uninstall the app or delete your account. Order, address, and account records are kept for as long as needed to fulfil purchases, handle disputes, and meet tax or accounting rules, then deleted or anonymised.

7. Your choices

• You may browse and order as a guest, or link a phone number.
• You may request access, correction, or deletion of your account from Profile → Delete Account, via our web deletion page, or by emailing info@wixproducts.com.
• Deleting the app removes local cart and device secrets from that device. Server-side orders may remain until you ask us to delete the account.

8. Children

The app is intended for adults purchasing skincare products. We do not knowingly collect personal data from children under 16. If you believe a child has used the app, contact us and we will delete the data.

9. Security

Access tokens are stored in the device secure store. Traffic to our API uses HTTPS. No method of transmission is completely secure; please protect your phone and do not share OTP codes.

10. International users

Our servers may process data in Tanzania and in countries where our hosting providers operate. By using the app you understand that your information may be processed outside your home country with the safeguards described here.

11. Changes

We may update this policy. The “Last updated” date at the top will change, and continued use of the app after an update means you accept the revised policy.