Privacy Policy
Last updated: 2026-10-24
Moz Discounts helps you find discounts on your bank cards and mobile wallets in Mozambique and alerts you when you pass a place with an offer. This policy explains what data we handle, why, and what control you have. This is a demonstration service (POC): sample data is fictional and labelled as such.
1. Data we collect
- Account: first and last name, email, phone (optional), language, and your password, stored only as a secure hash (argon2).
- Cards and wallets: only the product you choose (for example “Absa Visa Debit” or “M-Pesa”). We never store a card number, expiry, CVV or the last four digits.
- Preferences: alert mode and quiet hours, extra banks and favourites.
- Location: the app uses your phone's location to centre the map and decide, on the device, whether you are near an offer. The server only receives your position (rounded to about 100 m) when an alert event is sent, and the current coordinates to request nearby offers. We do not sell or share your location.
- Alert history: alert type, place, discount and time.
- Your device's push-notification token, if you allow notifications.
- Security: sign-in and admin action logs, per-IP attempt counters and new-device notices.
- Business accounts: the business details, premises and discounts you publish.
2. How we use it
- To create and protect your account and send confirmation, password-reset and security emails.
- To show discounts that match your cards and wallets and to send proximity alerts.
- To give businesses aggregated statistics; businesses cannot see who you are.
- To prevent abuse and keep the service secure.
- We do not use your data for advertising, we do not sell it, and we do not use it to track you across other apps or websites.
3. Who we share it with
We use providers that process data on our behalf:
- Vercel (hosting of the website and API).
- Neon (PostgreSQL database, European Union region).
- Google (email delivery through Gmail; Google Maps on the web map).
- Apple (MapKit maps and APNs push notifications in the iOS app).
- Cloudflare Turnstile (anti-bot check, only after several failed sign-in attempts, when enabled).
4. Retention and deletion
We keep your data while your account exists. You can delete the account in the app (Profile) or the portal (Account): personal data is anonymised and the account can no longer be used. The security audit log is kept without data that identifies you.
5. Your rights
You can view, correct and export your data in the app's Profile and in the portal, change alert preferences, turn off location in iOS Settings, and delete your account. For any other request, contact us.
6. Security
Connections use HTTPS. Passwords are hashed, sessions use secure cookies, and administrators use two-step verification. No system is perfectly secure, but we limit access and stored data to what is needed.
7. Children
The service is not intended for people under 16 and we do not knowingly collect children's data.
8. Changes and contact
If we change this policy we update the date above. Questions and requests: jkbytesjr@gmail.com
Privacy label
A summary of the data the app and service collect, in the format of App Store privacy labels. All data below is linked to your account and used only to run the app.
| Data type | Used for | Notes |
|---|---|---|
| Name | App functionality | Account first and last name |
| Email address | App functionality | Sign-in, confirmation, password reset, security notices |
| Phone number | App functionality | Optional |
| Coarse location | App functionality | Position rounded (~100 m) in alert events and when requesting nearby offers; precise location stays on the phone |
| User ID | App functionality | Internal account id |
| Device ID | App functionality | Push-notification token, if you allow notifications |
| User content | App functionality | Favourites and chosen card/wallet products (never card numbers) |
| Product interaction | App functionality | Alert history (type, place, discount, time) |
| Other data | App functionality | Alert preferences |
Not collected: financial info (card number, expiry, CVV, last digits), health, contacts, browsing or search history, purchases, diagnostics, photos, audio, or precise location.
Tracking: no. We use no third-party SDKs for advertising or analytics.