Legal

Privacy Policy

Last updated: 24 October 2025

Protecting customer trust is core to FloatPesa. This policy explains the data we collect, the safeguards we maintain, and the choices available to you.

1. Introduction

FloatPesa Exchange Limited ("FloatPesa", "we", "our", or "us") operates a liquidity management platform for mobile money agents and partner institutions across Tanzania. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, mobile applications, and related services (collectively, the "Services").

By accessing or using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please refrain from using the Services.

2. Data we collect

We collect the following categories of information in order to operate, secure, and improve the Services:

  • Account information: names, phone numbers, email addresses, and business documentation provided during onboarding.
  • Operational data: transaction identifiers, float balances, reconciliation status, and audit logs required to process transfers and swaps.
  • Device and usage data: IP address, browser type, mobile device details, pages visited, feature interactions, and diagnostics to protect the platform.
  • Third-party data: information shared by partner banks, mobile money operators, and verification providers to meet compliance requirements.

3. How we use information

We process collected information to deliver contractual services, maintain security, and advance our product roadmap. Specifically we use the data to:

  • Provide, operate, and support float management features and agent tools.
  • Verify identities, monitor compliance, and detect fraud or suspicious activity.
  • Offer customer support, incident response, and service notifications.
  • Improve product performance, conduct analytics, and launch new capabilities.
  • Comply with legal obligations, regulatory reporting, and law enforcement requests.

4. Sharing and disclosure

FloatPesa may share information with trusted parties under strict safeguards:

  • Financial partners, banks, and mobile money operators who help process float swaps and settlements.
  • Compliance vendors and identity verification providers assisting with KYC and AML checks.
  • Technology providers delivering hosting, analytics, communications, and security infrastructure.
  • Regulators or authorities when legally compelled or to protect the rights, property, or safety of FloatPesa, our users, or the public.

We do not sell personal information. Any third party that processes data on our behalf is bound by confidentiality obligations and data processing agreements.

5. Data retention

We retain information for as long as necessary to meet contractual commitments, comply with regulatory obligations, resolve disputes, and enforce agreements. When data is no longer required, we securely delete or anonymise it in accordance with our retention schedules and applicable law.

6. Your rights and choices

Depending on your jurisdiction, you may have rights to access, correct, restrict, or delete your personal information. You may also object to specific processing activities or request data portability.

To exercise these rights, contact us at privacy@floatpesa.co.tz. We will respond within the timelines prescribed by law. We may request additional documentation to verify your identity before fulfilling requests.

7. Security

We employ administrative, technical, and physical safeguards to protect the information we store. These measures include encryption in transit, role-based access controls, continuous monitoring, and regular security assessments. Despite these efforts, no system is entirely secure, and we cannot guarantee absolute protection.

8. Cross-border transfers

Information collected within Tanzania may be transferred to and processed in other countries where our partners or service providers operate. When we transfer information internationally, we implement contractual safeguards to ensure the data receives an equivalent level of protection.

9. Children's data

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided data to FloatPesa, please contact us so we can delete it.

10. Updates to this policy

We may update this Privacy Policy periodically to reflect new products, legal requirements, or operational practices. When we make significant changes, we will post an updated notice on our website and adjust the "Last updated" date below.

11. Contact us

If you have questions about this Privacy Policy or how we handle information, reach out to our Data Protection Officer:

FloatPesa Exchange Limited Dar es Salaam, Tanzania privacy@floatpesa.co.tz +255 765 990 298