Legal
Privacy Policy
Last updated: 8 October 2026
This policy explains how BongoBox, operated by Kabi Investment Limited of Dar es Salaam, Tanzania ("BongoBox", "we", "us"), collects, uses and protects your personal information when you use the BongoBox app for Android and iOS and the website www.bongobox.co.tz (together, the "Service").
By using the Service you agree to this policy. If you do not agree, please stop using the Service and uninstall the app.
1. Information we collect
Information you give us
- Account details. Your mobile phone number (verified by a one-time SMS or WhatsApp code) and an optional username and profile picture. If you choose to sign in with Google, Apple or TikTok, we receive the basic profile those services share with us, such as your name, email address and an account identifier.
- Payment details. The mobile money number you use to pay (M-Pesa, Tigo Pesa, Airtel Money or Halopesa) and a record of each transaction: amount, plan, date and status.
- Support messages. What you send us by WhatsApp, email or phone, so we can help you.
Information collected automatically
- Viewing activity. Episodes watched, playback position, likes, saved titles and downloads, so you can resume where you stopped and get recommendations.
- Device and network information. Device model, operating system and version, app version, IP address and connection type (Wi-Fi, 2G, 3G, 4G, 5G), used to choose the right video quality and to fix crashes.
- Notification token. If you allow notifications, a push token so we can tell you about new episodes.
- Usage information. Searches, screens visited and in-app reactions, used to improve the service.
We never see your mobile money PIN or card details. Payments are processed by licensed payment providers and mobile network operators; BongoBox does not collect or store PINs, bank account numbers or card security codes.
2. How we use your information
- To stream videos smoothly, adjusting quality to your connection.
- To run your account, VIP plan, unlocked episodes and downloads across your devices.
- To process payments and activate what you bought.
- To send login codes and, if you agree, notifications about new episodes.
- To answer support requests and fix playback problems.
- To keep the service secure, prevent fraud and stop account sharing or abuse.
- To meet our legal, tax and accounting obligations.
3. Legal basis
We process personal data in line with the Personal Data Protection Act, 2022 of Tanzania and other applicable laws. We rely on:
- Contract: to provide the service you signed up for.
- Legitimate interests: to improve performance and keep the service secure.
- Consent: for optional features such as notifications. You can withdraw consent at any time in your phone's settings.
- Legal obligation: for tax and regulatory records.
4. Who we share it with
We do not sell or rent your personal information. We share it only with service providers who help us run BongoBox, under agreements that require them to protect it:
- Payments: Snippe, ClickPesa and mobile network operators (Vodacom M-Pesa, Tigo Pesa, Airtel Money, Halotel Halopesa).
- Login codes: SMS and WhatsApp messaging providers (Twilio and Sakura SMS).
- Sign-in: Google, Apple and TikTok, only if you choose to sign in with them.
- Hosting and delivery: our cloud, database and video-delivery providers (including Neon, Cloudflare, Supabase and Vercel).
- Notifications: Expo push notification services, if you allow notifications.
- Authorities: where we are legally required, for example by a court order.
Some of these providers process data outside Tanzania. Where they do, we take steps to ensure your information remains protected.
5. How long we keep it and how we protect it
We keep personal data only while your account is active or as long as the law requires (for example, payment records for tax purposes). After that we delete or anonymise it.
All data travels over encrypted connections (TLS). Access to our databases is restricted, and we use authentication controls to prevent unauthorised access.
6. Your rights and account deletion
You have the right to:
- Access a copy of the personal information we hold about you.
- Correct inaccurate details, which you can do in the app.
- Delete your account and personal data.
- Object to or restrict certain processing, and withdraw consent.
To delete your account: email support@bongobox.co.tz with the subject "Data Deletion Request" and your registered phone number, or send the same request on WhatsApp +255 763 012 222. We may ask you to confirm the request from your registered number. We permanently delete your account, viewing history and profile within 7 business days. Payment records we must keep for tax purposes are retained for the period required by law and then deleted.
7. Children
BongoBox is not intended for children under 13, and some dramas contain themes suitable only for mature audiences. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it.
8. Changes to this policy
We may update this policy when our service or the law changes. We will post the new version here with a new date, and tell you in the app about important changes.
9. Contact us
Kabi Investment Limited (operator of BongoBox)
Dar es Salaam, Tanzania
Email: support@bongobox.co.tz
WhatsApp & phone: +255 763 012 222