Privacy policy

1. What we collect

We collect only what we need to operate the platform and to provide the service you have asked for.

• Account data: phone number, name, wedding date, theme preferences. Email and partner details are optional.
• Couple content: photos, story copy, guest list entries, RSVP responses, contribution destinations.
• Vendor business data: business name, category, service areas, portfolio images, packages, pricing, tax identifiers where legally required.
• Transaction metadata: the identifier, amount, currency, channel (M-Pesa, Mixx by Yas, Airtel Money, Halotel, TTCL Pesa, CRDB, NMB), and timestamps for every contribution and booking. We never see or store your MNO PIN or bank password.
• Contacts: when you tap Import on the People screen, the app opens your phone's contact picker and reads only the contacts you pick: their name and phone number. We use them only to build your guest list and send the invitations you ask us to send, never for marketing, and we never read the rest of your address book.
• Location: the app does not use your phone's precise location (GPS) and never asks for it. When you sign in, we look up an approximate city and country from your IP address and keep it in your sign-in history, so we can spot a sign-in that is not you. Venue addresses and map links you type for your wedding are part of your couple content.
• Camera and photos: the camera is used only to scan the QR code on invitation cards at the gate, and to take a photo you choose to add. Photos you add to your wedding page are stored so your guests can see them, and you can remove them from the Story page in the app at any time.
• Device + usage: IP address, user agent, referring URL, the push notification token of your phone, and event analytics linked to your account (for example sign-ins and the invitation links your guests open). Used to keep the service running, deliver notifications, and spot abuse.
• Crashes and performance: the mobile app does not include a crash reporting or analytics SDK. Errors are logged on your phone only; our servers keep standard request logs linked to your account to fix faults and keep the service fast.

2. Legal basis

We process personal information under the Tanzania Personal Data Protection Act, 2022, on one of the following bases:

• Contract: to set up your account, list a vendor profile, accept bookings, or run an RSVP.
• Consent: for marketing communications and any optional analytics beyond what is required to run the platform.
• Legal obligation: to comply with TRA fiscal receipting, anti-money-laundering rules, and lawful regulator requests.
• Legitimate interest: security monitoring, abuse prevention, and platform improvement.

3. How we use it

• To deliver the service you signed up for: vendor discovery, bookings, the budget planner, the guest list, and the personalised story page.
• To verify identity and prevent fraud, including before approving a vendor profile or releasing escrowed funds.
• To send service messages (OTP codes, booking confirmations, deposit receipts, RSVP notifications).
• To produce TRA-compliant EFD receipts on transactions where this is required.
• To respond to your support requests.
• To improve the platform with event analytics linked to your account, which we review in aggregate.

4. Where money goes

Contributions and booking payments are routed to your nominated Changisha, Mchango, Lipa Namba, or bank account through Malipopay, our payment partner. For event-day vendor payments, funds may be held in a Lockwood-managed escrow account at the partner bank and released 24 hours after the event, or refunded within 24 hours if a dispute is upheld. The platform is a facilitator, not a custodian, except for the limited escrow window described above. We do not hold client funds outside of that window.

5. Sub-processors

We share personal information only with the sub-processors we need to run the service. Each is bound by a written data processing agreement.

Each provider receives only the data it needs and is bound to protect it at least as well as we do. We do not sell personal information and we do not share it with advertisers.

6. Retention

We keep your data while your account is open and for 365 days after your wedding date, unless the law requires us to keep it longer: transaction records are kept for seven years as tax and anti-money-laundering law requires. Couple story pages, guest lists and RSVP entries follow the same 365-day rule, and you can delete them sooner.

Deleting your account. In the app, open Settings and tap Delete account. Or email support@wedding.co.tz from the email on your account, or see Delete your account. Deletion removes your name, phone, email, photo and sign-in history; money records stay with the wedding's books as the law requires.

Consent. Where we rely on your consent (marketing messages, and any optional analytics we add in future) you can withdraw it at any time: turn off notifications in the app's Settings, reply STOP to a marketing SMS, or email us. The app has no optional analytics today; if we add any, we will ask before it starts and you can switch it off in Settings.

7. Your rights

Under the Tanzania PDPA you have the right to access the information we hold about you, to ask us to correct or delete it, to object to processing, to data portability, and to lodge a complaint with the Personal Data Protection Commission. To exercise any of these, write to privacy@wedding.co.tz with enough detail for us to verify the request. We respond within 30 days. To delete your account, see Delete your account.

8. Security

Account access is protected by phone OTP and short-lived RS256 JWT access tokens. All traffic is TLS 1.2 or higher. Production databases are encrypted at rest. See our security page for the longer view.

9. Cookies and analytics

We use a small number of first-party cookies to keep you signed in and to remember your preferences. We use event analytics linked to your account to understand which parts of the product are useful. We do not run third-party advertising trackers and we do not track you across other companies' apps or websites.

10. Children

The platform is intended for adults planning weddings. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, write to us and we will remove the data promptly.

11. Changes to this policy

Material changes are posted on this page with at least 14 days' notice before taking effect. Continued use of the platform after the effective date is taken as acceptance of the updated terms.

12. Contact

Lockwood Technology Tanzania Ltd. Privacy office, Dar es Salaam. privacy@wedding.co.tz. For help with the app, or to report a guest message, email support@wedding.co.tz.