Your information.
Clear choices.

How ONANA works: Customers browse listings and contact vendors directly, including by phone. ONANA does not provide in-app purchasing or payment processing. Any transaction arranged directly with a vendor takes place outside ONANA. Do not submit payment credentials to ONANA.

ONANA is a marketplace operated by Universe Advanced Technologies Limited, Kumbukumbu Street, Plot No. 73, Block 41, Dar es Salaam, Tanzania. We are responsible for personal information processed to operate ONANA.

This policy covers the ONANA Android and iOS app and related ONANA website and services. It applies to customers browsing or contacting businesses and to vendors creating business profiles, publishing listings and managing their presence. The app combines customer and vendor functions; the information processed depends on the features you use.

For privacy questions or requests, contact privacy@onana.co.tz, with “ONANA Privacy” in the subject.

• Account information: names, phone numbers, email addresses, account identifiers, login credentials and account preferences supplied when registering, signing in or updating a profile.
• Vendor information and public listings: business name, category, contact details, business address or map position, descriptions, prices, listing photos or videos and other information a vendor submits for publication.
• Verification information, where requested: business registration details and supporting documents submitted for vendor verification. Identity documents submitted privately for verification are not intended for public display.
• Customer activity and submitted content: searches, viewed listings, saved items and enquiries; reviews, reports or in-app messages where those features are available and used. We also process information sent directly to our support team.
• Location: a location you enter for searches or a business listing. If you grant device-location permission for a location feature, the app processes the location provided by your device to support nearby results or directions. The permission prompt explains the location access being requested; you can change it in your device settings.
• Device and service information: IP address, app and operating-system versions, request timestamps, security logs and technical error information generated when accessing the service. Where enabled, notification services process delivery tokens, and analytics or crash-reporting services process usage events and diagnostics.

Do not upload another person's private information without permission, or include identity documents or confidential payment details in public listings.

We use relevant information to create and manage accounts; display and search listings; help customers contact vendors and find locations; manage vendor profiles and verification; provide enabled messaging and notification features; respond to support enquiries; moderate content; investigate misuse and fraud; secure and maintain the service; and meet applicable recordkeeping and legal obligations.

Information collected for optional features is used for the purpose explained when that feature is enabled. Where consent is required, we request it before the relevant collection or use. You can opt out of optional marketing communications using the instructions provided with them.

Vendor business profiles and published listings are visible to other users and may be accessible on the public web or through search engines. This can include the business contact details, address, map position and media submitted for publication. Public reviews or other public content, where supported, can also be seen by others.

When a customer contacts a vendor, information the customer sends becomes available to that vendor. If you choose Call, WhatsApp, Email or an external map service, the selected application or service handles that interaction under its own terms and privacy policy. Opening an external service does not mean ONANA receives the full contents of calls or messages made there.

We disclose information to the people you choose to communicate with and publish information you submit for public display. We also use service providers supporting hosting, storage, communications, security and other enabled technical functions. These providers receive the information needed for their role, subject to appropriate contractual and security requirements.

We may disclose relevant information when required by applicable law or a valid legal request, to investigate abuse or protect people and the service, or in connection with a business transfer subject to applicable safeguards and notices. We do not sell personal information.

Public business listings may promote vendors’ products or services. Sponsored listings, if offered, are different from tracking across other companies’ apps or websites. Any advertising or tracking technology in a release must be identified in this policy and the relevant consent disclosures.

Camera or selected-photo access, where requested, supports taking or uploading profile and listing media. Location permission supports the location feature explained in the permission request. Notification permission supports alerts. You can manage these permissions through device settings; declining an optional permission may limit the related feature.

Choosing to call or message a vendor does not itself authorize ONANA to read your address book, SMS or call history. Do not grant a permission unless you understand the purpose explained by the app.

The ONANA website and app may use session tokens or local storage to keep you signed in and remember preferences. Browser settings let you manage website cookies and storage; clearing them may sign you out or reset preferences.

If optional analytics, advertising cookies or third-party SDKs are used, their actual providers, data and purposes must be identified for the relevant release. We request consent where required. This policy does not make an optional service necessary merely because it is mentioned here.

Links to external websites and services are subject to those services’ privacy practices. Review their policies before sharing personal information.

We use appropriate access controls and technical and organizational safeguards to protect personal information. We protect personal information transmitted between the app and ONANA services using encrypted connections such as HTTPS. No online service can guarantee absolute security.

Information may be processed where ONANA and its providers operate, including outside your country where international providers are used. We apply safeguards required by applicable data protection law to such transfers. You can contact our privacy team for information about the providers and locations involved in processing your information.

We retain information for as long as needed to operate the account and services, resolve outstanding enquiries or disputes, prevent fraud, protect security and meet applicable legal obligations. Retention depends on the type of record, its purpose, outstanding issues and applicable legal requirements.

When information is no longer needed, we delete it or anonymize it. Limited records may need to remain after account deletion for legal, security or dispute purposes; they must be restricted to those purposes. Backup copies are removed under the applicable backup lifecycle. We can explain which records are retained in response to a deletion request and why.

Delete data without deleting your account: Sign in to ONANA and use the available deletion controls for the data you want to remove. You can delete your data while keeping your account active.

Delete your account: Sign in to ONANA and use the account-deletion option. Customers and vendors can delete their entire combined account and its associated personal information, subject to the limited retention grounds explained in Section 8. You do not need to email us to use these in-app deletion controls.

Alternative help and deletion requests: If you cannot access your account or need assistance, email privacy@onana.co.tz with the subject ONANA Data or Account Deletion. Include your registered email address or phone number and identify the data or account you want deleted. Do not send your password. You can request removal of particular data without requesting deletion of your whole account.

For requests sent to our team, we may verify that the account belongs to you before acting. Deletion of the entire combined account covers its customer and vendor profiles and associated personal information. Removing only a listing or vendor profile is different from deleting the whole account; we will clarify the scope if necessary.

Account deletion removes the account and associated personal information, subject to the limited retention grounds in Section 8. Public listings and profile information linked to the deleted account are removed from ONANA's active public service. Copies already obtained by other users or indexed by third-party search engines may remain outside our control.

Uninstalling the app does not delete your account. Use the deletion controls after signing in. If you need assistance, contact our support team. We will explain any applicable retention exceptions when handling a support request.

Use your registered email or phone number. Never send your password.

You can update information using available account and listing controls, or contact us to request access, correction, deletion or information about processing. Where applicable law provides additional rights, you may request restriction, object to processing, withdraw consent or request a copy of your data. Withdrawing consent does not affect processing already lawfully completed. We may need to verify identity and explain any lawful limits on a request.

Where applicable law requires a legal basis, we process information to provide services you request, comply with legal obligations, pursue legitimate interests such as service security and fraud prevention where permitted, or with your consent where required. The appropriate basis depends on the information, purpose and applicable law.

Contact privacy@onana.co.tz if you have a concern. You may also raise a complaint with the competent data protection authority under the law applicable to you, including Tanzania’s Personal Data Protection Commission where relevant. Contacting ONANA does not limit that right.

ONANA is a general marketplace and is not specifically designed for children. If you believe a child has provided personal information in circumstances requiring parental consent without that consent, contact us so we can investigate and take appropriate action. A store content rating does not establish eligibility to enter contracts or operate a vendor account; applicable law and ONANA’s terms govern those activities.

We will update this policy when our practices change and show the updated date on this page. Where required, we will provide additional notice or request consent for material changes.