Privacy Policy

NuBien Enterprises Ltd runs Swyipa and decides how the information below is used. We handle it in line with the data protection law of Malawi.

From sellers: business name, business address, phone number and a password (kept only as a one-way hash). We also keep the payment requests you create: amount, description, and the customer name and phone number if you enter them.

From customers who pay: the phone number you type to pay, the name a seller entered for you, and the payment details OneKhusa returns (amount, status, reference). If you contribute to a collection you may enter a name.

Technical: an approximate network address for abuse limits, and a sign-in cookie. We do not use advertising or tracking cookies.

We never see or store your PIN, bank login or card details. Bank and mobile money numbers for payouts stay at OneKhusa; we keep only the last four characters to show you. OneKhusa API credentials are stored encrypted.

• To open your payment account and carry out payments.
• To show you and your customers what was paid, and to issue receipts.
• To keep accounts safe, prevent fraud and meet legal duties.
• To support you when you ask for help.

OneKhusa receives what it needs to open your merchant account and process payments. It has its own privacy practices.

The seller sees what a customer paid, the number used and the name given. A customer sees only the seller's business name, the description and the amount. On a collection, names and amounts are public only if the organiser chose that, and contributors are told first.

We do not sell personal information. We share it with authorities only when the law requires.

Payment records are kept for as long as the law and our dealings with OneKhusa require, which can be several years. Account details are kept while your account is open.

You can ask to see, correct or delete your information, and to close your account. Some payment records must be kept by law and cannot be deleted. Write to support@swyipa.com. You may also complain to Malawi's data protection authority.

We protect data with encryption in transit, encrypted credentials and access limits, but no system is perfectly safe. If this policy changes in an important way we will say so in the app.