Privacy Policy
This policy explains what personal data Joinly collects, why, and the choices you have. We collect as little as we can.
1. Who we are
Joinly (the Android app and joinly.revopaytech.com) is run by Revopay (Private) Limited, Harare, Zimbabwe (“Joinly”, “we”, “us”). We are the data controller for the personal data described here. Contact us about privacy at legal@revopaytech.com.
2. What we collect
Everyone who uses the app. You don’t need an account to browse. The app creates an anonymous account on your phone so it can remember your choices. With it we keep:
- An anonymous account identifier.
- The city or town, languages and interests you choose, and your confirmation that you are 18 or older.
- Listings you save.
- Reports you send about a listing: the reason and any note you write.
- Usage events: when a listing is shown, opened, joined, saved or shared, with the city you chose. These are stored against a one-way scrambled (hashed) identifier, not your account, and owners only ever see totals.
- What you search for and how many results came back, with the city you chose and nothing that identifies you. We use it to see what people look for and which groups to add.
- Which announcements from Joinly you opened, so we know how many people saw each one.
- Crash and error reports: if the app or website goes wrong, a technical report of what failed, with the phone model, Android and app version, and a random code made for this install of the app so repeat crashes can be grouped. It doesn’t include your account, email or IP address.
Owners. If you sign in to list a group or channel, we also keep:
- Your email address, used to sign you in with a one-time code and to write to you about your listings.
- A display name, if you add one.
- Your listings: link, name, description, rules, category, city, languages, member count and cover image.
- Ownership checks and claims, and a record of moderation decisions about your listings or account, including strikes.
What we don’t collect. We don’t ask for your name, phone number, contacts, precise location, camera or microphone, and we never see messages in the groups you join. Tapping Join opens the group in its own app, which has its own privacy policy.
3. How we use it, and why we’re allowed to
- To provide Joinly: show listings, rank them for your city and interests, remember your saves, and let owners list and manage groups. (Needed to provide the service you asked for.)
- To keep Joinly safe: review every listing before it goes live, act on reports, and enforce the Community Rules with strikes and bans. Automated checks only flag listings for a person to look at; a person makes every decision. (Our legitimate interest in a safe, trustworthy directory, and legal obligations.)
- To show owners how their listings are doing, as totals. (Legitimate interest.)
- To send owners the emails the service needs: sign-in codes, moderation decisions, a note if a listing’s link stops working, and a weekly summary of their listings’ views, which they can turn off in the app’s Settings or on the owner portal. (Needed to provide the service.)
- To find and fix crashes, errors and slow screens. (Legitimate interest in a working app.)
- To meet legal obligations and respond to lawful requests.
We don’t sell personal data, we don’t use it for advertising, and we don’t show ads. Where we rely on your consent, you can withdraw it at any time.
5. International transfers
Our providers may store and process data outside Zimbabwe. Where they do, we rely on their contractual and security commitments to protect it to the standard this policy describes.
6. How long we keep it
- Account data, preferences, saves and listings: while your account exists. Deleting your account removes them straight away.
- Reports: while the listing they concern exists, or until you delete your account.
- Usage events: 90 days as they happen, then only as daily totals; they aren’t linked to your account.
- Search terms: 180 days.
- Which announcements you opened: while your account exists.
- Crash and error reports: up to 90 days.
- Moderation records: kept to enforce the Community Rules. When an account is deleted we keep only a note that a deletion happened, with nothing that identifies the person.
- Backups: removed data can remain in encrypted backups for a short period until they expire.
7. Security
Data is encrypted in transit (HTTPS). Access is limited by account, database rules on every table and staff roles, and secret keys never leave our servers. No system is perfectly secure; if a breach affects you, we will tell you and the regulator as the law requires.
8. Your rights
Under Zimbabwe’s Cyber and Data Protection Act, and similar laws elsewhere, you can ask to access, correct or delete your personal data, object to or restrict how we use it, and receive a copy of it.
- Delete your account yourself: in the app, My Joinly › Settings › Delete my account; owners can also use the owner portal.
- Change your city, languages and interests any time in Settings.
- For any other request, email legal@revopaytech.com. We answer within 30 days.
If you’re unhappy with how we handle your data, you can complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the data protection authority.
9. Children
Joinly is only for adults. Everyone confirms they are 18 or older before using the app, and groups mainly for under-18s aren’t listed. If you believe a child has given us personal data, contact us and we’ll delete it.
11. Changes to this policy
We may update this policy. The date at the top shows the latest version. If a change is significant, we’ll tell you in the app or by email before it takes effect.
12. Contact
Revopay (Private) Limited, Harare, Zimbabwe. legal@revopaytech.com