Privacy Policy

Last updated: 6 August 2026

This Privacy Policy explains how BongoBox (“BongoBox”, “we”, “us”, or “our”), a service operated by Kabi Investment Limited of Dar es Salaam, Tanzania, collects, uses, shares, and protects your personal information when you use the BongoBox mobile app and website (together, the “Service”).

By creating an account or using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Information we collect

Information you give us

• Account details — your phone number and a username, which you provide when you register. BongoBox accounts are created with a phone number rather than an email address.
• Payment requests — when you buy coins or a VIP subscription, the phone number you choose to pay from and the amount and item you selected.
• Communications — messages you send us for support, and anything you choose to include in them.

Information created as you use the Service

• Viewing activity — the dramas and episodes you watch, your watch history and progress, and titles you save to your list.
• Wallet and purchases — your coin balance, coin transactions, and subscription status and dates.
• Device and technical data — device type, operating system, app version, general location inferred from your IP address, and diagnostic or crash information used to keep the app working.

Information we do not store

We do not collect or store your mobile-money PIN, bank card numbers, or full financial account credentials. Payments are authorised by you directly with your mobile-money provider through our payment processor (see “Who we share with”).

2. How we use your information

• To create and manage your account and let you sign in.
• To provide the Service — stream episodes, remember your progress, and keep your list and wallet in sync.
• To process payments for coins and subscriptions and to credit your account.
• To provide customer support and respond to your requests.
• To keep the Service secure, prevent fraud and abuse, and fix problems.
• To understand which content is popular so we can improve BongoBox.
• To comply with legal obligations that apply to us.

3. Our basis for processing

We process your information where it is necessary to provide the Service you have asked for, where we have a legitimate business interest (such as security and improving the app), where we need to meet a legal obligation, and where you have given consent. Where Tanzanian law — including the Personal Data Protection Act, 2022 — applies, we handle your data in line with its requirements.

4. Who we share your information with

We do not sell your personal information. We share it only with the parties below, and only as needed to run the Service:

• Payment processing — our mobile-money payment provider (Snippe) and your chosen mobile-money network (such as M-Pesa, Airtel Money, Mixx by Yas, or Halotel) process your payment. They receive the payment details needed to complete the transaction.
• Hosting and infrastructure — we use trusted cloud providers (including Supabase) to store account data and power the Service.
• Legal and safety — authorities or advisers where we are required to disclose information by law, or to protect our rights, users, or the public.
• Business transfers — if BongoBox or Kabi Investment Limited is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Where your data is processed

Some of our service providers store and process data on servers located outside Tanzania. Where your information is transferred internationally, we take steps intended to ensure it remains protected consistent with this policy.

6. How long we keep your information

We keep your information for as long as your account is active and for as long as we need it to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When we no longer need it, we take steps to delete or anonymise it.

7. Your choices and rights

Subject to applicable law, you may:

• Access the personal information we hold about you.
• Ask us to correct information that is wrong or out of date — you can edit your username in the app.
• Ask us to delete your account and associated personal information.
• Object to or ask us to restrict certain processing.

To make a request, contact us at support@bongobox.co. We may need to verify your identity before acting on a request.

8. Security

We use technical and organisational measures designed to protect your information, including access controls on our databases. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond appropriately if something goes wrong.

9. Children

BongoBox is intended for adults and is not directed to children under 18. Some content is intended for mature audiences. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect means you accept the updated policy.

11. Contact us

If you have questions about this policy or how we handle your information, reach us at: