Deleting your data

You may request the deletion of your Zana account and the associated personal data. This page explains how to proceed, what is deleted, what we must retain to meet our legal obligations, and within what timeframe.

1. How to request deletion

Send your request to dpo@getzana.africa from the e-mail address linked to your account, with the subject "Delete my data" and your account phone number. If you are signed in, you can also request it from the app (Profile → Support). We verify your identity before any processing in order to protect your account.

2. Data that is deleted

Once the request is verified, the following are deleted or anonymised:

• your profile and sign-in credentials;

• your saved addresses and stored payment phone numbers;

• your preferences and notification history;

• any personal data not subject to a legal retention obligation.

3. Data we retain (legal obligations)

Some data must be kept beyond account closure to meet our legal obligations; it is then deleted or anonymised once the retention periods expire:

• transaction and financial data: statutory accounting, tax and anti-money-laundering periods (typically ten years);

• KYC data: the period required by anti-money-laundering regulations;

• security logs: a limited period for security purposes.

This data is no longer used for other purposes and access to it is restricted.

4. Processing time

We handle admissible requests within 30 days and confirm the deletion by e-mail. Where the law requires us to retain certain data, or for manifestly unfounded or excessive requests, we inform you together with the reasons.

5. Contact

Data Protection Officer (DPO): dpo@getzana.africa. You may also lodge a complaint with the National Cyber Security Authority — Data Protection & Privacy Office (Kigali).