Privacy Policy

Upstairs Technology Solutions operates Saka Fasta from Mbezi Beach, Dar es Salaam, Tanzania. Saka Fasta connects customers, stores, service providers, and couriers for local ordering and delivery.

This Privacy Policy applies to the Saka Fasta customer app, courier app, provider and admin services, website, support channels, and related services.

We collect account information that you provide, including your name, phone number, email address, profile image, password, account role, verification status, and communication preferences. If you sign in with Google, Google gives us the account identifier and profile details needed to authenticate you.

We collect saved delivery addresses, address labels, contact phone numbers, map coordinates, cart items, favourites, orders, selected stores, products, prices, delivery notes, order status, cancellations, reviews, and support messages.

We collect transaction records such as payment method, amount, currency, payment status, provider session and transaction references, receipts, refunds, webhook records, courier earnings, payout requests, and payout-account details. Payment providers process payment credentials. Saka Fasta does not store your mobile-money PIN or full card details.

We collect technical and security information such as IP address, browser or app user agent, device platform, device identifier, push token, session activity, failed sign-in attempts, app screens viewed, and feature-use events.

For couriers, we may collect vehicle type, driving licence number, vehicle registration, availability, accepted or declined jobs, earnings, payout details, delivery notes, and proof-of-delivery images.

Courier verification may require national identity, passport, driving licence, vehicle registration, vehicle insurance, or related documents. We keep verification documents in restricted storage and share them only with staff and providers who need them for verification, security, or legal compliance.

For stores and service providers, we may collect business ownership and contact details, tax or registration records, store locations, operating hours, product catalogues, prices, payout methods, and verification documents.

Customers give us delivery addresses and may select map coordinates so stores and couriers can fulfil an order. The current customer app does not use background location tracking.

The courier app collects precise location, location accuracy, battery level, and timestamps while the courier uses delivery features. We use this information to offer nearby jobs, support pickup and drop-off navigation, show delivery progress, protect users, and resolve delivery problems.

Couriers can control location permission through device settings. Turning it off may prevent job matching, navigation, and active-delivery tracking from working.

Saka Fasta may ask for photo-library access when you choose an image to upload. Couriers may upload proof-of-delivery photos and notes. Providers may upload product images and verification files.

We store messages sent about an order, including the sender, message text, order reference, and time, so customers, providers, couriers, and support staff can coordinate and resolve issues.

We use information to register and secure accounts, verify users and businesses, display stores and products, manage carts and orders, assign couriers, process payments and payouts, track deliveries, send receipts and notifications, provide support, handle refunds, prevent fraud, and enforce our terms.

We use order, delivery, and activity records to improve dispatch, service reliability, product availability, customer support, and application performance.

We share the order details needed for fulfilment with the selected store, assigned courier, and customer. These details may include names, phone numbers, ordered items, delivery address, coordinates, instructions, payment status, and delivery updates.

We use service providers for parts of the service. These may include Snippe for payments and payouts, Google for sign-in and maps, Firebase for push notifications, PostHog for product analytics, Resend for email, messaging-service.co.tz for SMS, and providers of hosting, databases, and file storage.

We may disclose information when Tanzanian law requires it, when a public authority sends a valid request, or when we need to protect users, providers, couriers, Upstairs Technology Solutions, or the public from fraud, abuse, or harm.

If Upstairs Technology Solutions completes a merger, financing, reorganisation, or sale of all or part of Saka Fasta, we may transfer relevant records as part of that transaction. The recipient must protect the information under this Policy and applicable law.

When configured, PostHog helps us understand app screens, searches, sign-ins, orders, delivery flows, and errors. Analytics may use a stable user identifier and account role. Session replay, when enabled, masks text inputs and images to reduce collection of sensitive content.

We use device push tokens and notification preferences to send order, delivery, payment, security, job, and account updates through the app, email, SMS, or push notification. You can change app-notification permission in your device settings and update supported preferences in the app.

We keep personal information while your account remains active or while we need it to provide Saka Fasta. We may retain order, payment, payout, tax, fraud-prevention, dispute, security, and legal records after account closure where the law or a legitimate business need requires retention.

Request account and personal-data deletion by emailing info@upstairstechnologysolutions.com from the email address or phone number linked to your account with the subject “Saka Fasta Account Deletion.” We will verify that you own the account. We will delete or de-identify information that we no longer need and explain any records that we must retain.

Account deletion does not cancel an order, delivery, payment, payout, refund, or dispute already in progress. Contact support first if one of those matters remains open.

We use protected password storage, authentication tokens, sign-in rate limits, account lockouts, role-based permissions, restricted administrative access, private file storage, and service monitoring to protect information.

No internet or storage system can guarantee complete security. Keep your password, verification codes, device, and account access confidential, and contact us if you suspect unauthorised use.

You can update supported account details and saved addresses, manage notification settings, change your password, sign out, and control photo, location, and notification permissions through your device settings.

You may ask us to provide access to, correct, or delete your personal information, or object to certain uses where applicable law gives you that right. Email info@upstairstechnologysolutions.com. We may ask for information needed to confirm your identity and account ownership.

Saka Fasta does not target children under 13. If you believe a child has given us personal information, contact us so we can investigate and remove it where required.

Some providers that support Saka Fasta may process or store information outside Tanzania. We require those providers to handle information under suitable privacy and security safeguards.

We may update this Privacy Policy when Saka Fasta changes or when legal requirements change. We will post the revised Policy on this page with a new last-updated date and may notify you in the app when a change affects how we use your information.

For privacy questions, requests, or complaints, contact Upstairs Technology Solutions at info@upstairstechnologysolutions.com, call +255 762 222 200, or write to Mbezi Beach, Dar es Salaam, Tanzania.