Legal
Last updated: 8 June 2026Version 2.0
Pawuricloud Private Limited (operating as Hayah) is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your information when you use the Hayah platform, including hayah.africa, our mobile applications, and WhatsApp bot.
Pawuricloud Private Limited ("Pawuricloud," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Hayah platform, including our website at www.hayah.africa, mobile applications, WhatsApp bot, and related services (collectively, the "Platform").
Please read this Privacy Policy carefully. By using the Platform, you consent to the practices described in this policy.
We comply with the Cyber and Data Protection Act [Chapter 14:45] of Zimbabwe and all applicable regulations.
Account Information:
Verification Information (for Providers):
Transaction Information:
User Content:
Communications:
Usage Data: How you interact with the Platform, pages or features you use, time spent on pages, clickstream data, and referring website addresses.
Device Information: IP address, device type and model, operating system and version, browser type and version, mobile network information, and device identifiers.
Location Information: GPS coordinates (with your consent), approximate location based on IP address, and location data during active jobs (for Providers).
Log Data: Access times and dates, pages viewed, features used, and actions taken on the Platform.
To provide and operate the Platform: Create and manage your account, process transactions and manage escrow, facilitate communication between users, enable job posting, quoting, and completion, process payments and withdrawals, and provide customer support.
To verify and screen users: Verify Provider identities, conduct background checks (with consent), screen for prohibited conduct, and maintain platform integrity.
To improve and develop the Platform: Analyse usage patterns, develop new features, enhance user experience, troubleshoot technical issues, and conduct research and analytics.
To communicate with you: Send service notifications, respond to inquiries, provide updates, send administrative information, and deliver marketing communications (with opt-out option).
To ensure safety and security: Detect and prevent fraud, monitor for prohibited conduct, resolve disputes, enforce our Terms of Use, and protect the rights and safety of users and the public.
To comply with legal obligations: Maintain records as required by law, respond to legal requests and court orders, comply with tax and regulatory requirements, and report as required to authorities.
For dispute resolution: Investigate disputes between users, provide evidence in dispute proceedings, document user interactions, and support resolution decisions.
For users in jurisdictions with data protection laws requiring a legal basis for processing, we rely on the following:
With Other Users: Information necessary to facilitate jobs is shared between parties, including name, contact details (after job acceptance), location, and job-related communications. Your profile information, ratings, and reviews are visible to other users.
With Service Providers and Business Partners: Payment processors (to process transactions), cloud storage providers, analytics providers, customer support tools, identity verification services, and marketing partners (with your consent).
For Legal Reasons: To comply with legal processes (court orders, subpoenas, warrants), to respond to requests from government authorities including POTRAZ, ZIMRA, and law enforcement, to enforce our Terms of Use, and to investigate and prevent fraud or illegal activities.
Business Transfers: In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change.
With Your Consent: We may share your information for other purposes with your explicit consent.
We may also share aggregated or de-identified information that cannot reasonably identify you for research, marketing, or other purposes.
We implement appropriate technical and organisational measures to protect your information, including:
While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure.
In the event of a data breach affecting your personal information, we will notify POTRAZ within 24 hours as required by law, notify affected individuals within 72 hours, and cooperate with regulatory authorities.
| Data Type | Retention Period |
|---|---|
| Active account data | Until account deletion |
| Transaction records | 7 years (as required by Zimbabwean law) |
| Dispute records | 7 years |
| Chat messages | 2 years |
| Location data | 30 days |
| Deleted account data | Anonymised after 90 days |
| Backup data | Up to 1 year |
After the retention period, your data will be deleted or anonymised so that it cannot be linked back to you.
Access and Correction: You may access and update your account information at any time through account settings, or request a copy of your personal data by contacting us.
Data Portability: You may request a copy of your data in a structured, commonly used format.
Deletion: You may request deletion of your account through account settings. We will delete your personal information, subject to legal retention requirements.
Objection and Restriction: You may object to our processing of your data or request restriction of processing in certain circumstances.
Withdrawal of Consent: Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
Marketing Communications: You may opt out of marketing communications at any time through account settings or by following unsubscribe instructions in communications.
Location Tracking: You may disable location tracking through your device settings, though this may limit certain Platform functionality.
Complaints: You have the right to lodge a complaint with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) if you believe we have violated data protection laws.
Cookies are small text files stored on your device when you visit a website. We use the following types:
Most browsers allow you to refuse or accept cookies. However, disabling essential cookies may affect Platform functionality. Third-party services we use may also place their own cookies, which we do not control.
The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, please contact us immediately at dpo@hayah.africa.
Your information may be transferred to and processed in countries other than Zimbabwe. When we transfer data across borders, we ensure appropriate safeguards are in place, such as standard contractual clauses, binding corporate rules, or adequacy decisions where applicable.
We comply with POTRAZ requirements for cross-border data transfers.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform, sending you an email notification, and providing an in-app notification. Changes are effective 30 days after posting. Your continued use after this period constitutes acceptance of the changes.
If you have questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer:
Pawuricloud Private Limited
Harare, Zimbabwe
Data Protection Officer: dpo@hayah.africa
General Inquiries: admin@hayah.africa
Website: www.hayah.africa
For POTRAZ Complaints:
Postal and Telecommunications Regulatory Authority of Zimbabwe
P.O. Box CY277, Causeway, Harare
Email: potraz@potraz.gov.zw
Questions about your data? Email privacy@hayah.africa or review our Terms of Service.