Sera ya Faragha ya GariFix

1. Utangulizi

Sera hii ya Faragha inaeleza jinsi GariFix ("sisi", "yetu") ya Arusha, Tanzania inavyokusanya, kutumia, kuhifadhi, kushiriki na kulinda taarifa zako unapotumia app na tovuti ya GariFix (garifix.com). Kwa kutumia GariFix, unakubali taratibu zilizoelezwa hapa. Ikiwa hukubaliani na sehemu yoyote ya sera hii, tafadhali usitumie huduma zetu.

Tarehe ya sasisho la mwisho: 4 Oktoba 2026.

2. Taarifa Tunazokusanya

Tunakusanya aina zifuatazo za taarifa, kulingana na vipengele unavyotumia:

• Taarifa za usajili na akaunti: jina kamili, namba ya simu, barua pepe, nywila (inahifadhiwa kwa njia ya "hashing" isiyosomeka), picha ya wasifu (hiari), na lugha unayopendelea.
• Kuingia kwa Google: jina na barua pepe unavyoruhusu kupitia "Ingia na Google" (Google Sign-In).
• Kuingia kwa namba ya simu: namba yako ya simu na msimbo wa mara moja (OTP) unaotumwa kwa SMS ili kuthibitisha namba yako. Msimbo huhifadhiwa kwa njia ya "hashing" na huisha muda baada ya dakika chache.
• Taarifa za Fundi (kama umesajili kama Fundi): jina la garage, mkoa, wilaya, kata, mtaa, utaalamu, miaka ya uzoefu, maelezo binafsi, picha ya kitambulisho cha uthibitisho (NIDA, Leseni ya Udereva, au Kadi ya Mpiga Kura), pamoja na picha na video unazochapisha kwenye ukurasa wako wa Fundi.
• Eneo (location): eneo sahihi la GPS la simu yako, TU wakati unatumia app na umetoa ruhusa - tazama sehemu ya 6.
• Magari na matumizi: taarifa za magari uliyoorodhesha (aina, model, mwaka, namba ya usajili, rangi, tarehe ya kuisha bima) na gharama au kumbukumbu za mafuta unazoandika mwenyewe (kiasi, tarehe, maelezo).
• Maombi ya huduma na mawasiliano: taarifa za gari, maelezo ya tatizo, eneo la huduma, hali ya ombi, ujumbe wa mazungumzo (chat) kati ya Mteja na Fundi, pamoja na maoni na alama (reviews) unazotoa.
• Malipo na usajili: namba ya simu inayotumika kulipia kwa pesa-mtandao (mobile money), kiasi, namba ya muamala na hali ya malipo, mpango ulionao (Pro au Premium) na tarehe yake ya kuisha. HATUKUSANYI wala kuhifadhi PIN yako ya pesa-mtandao au taarifa za kadi ya benki.
• Rufaa na pointi: msimbo wako wa rufaa, aliyekualika au uliyemwalika, na "GariFix Points".
• Taarifa za kiufundi: aina ya kifaa, toleo la mfumo wa uendeshaji, "push notification token" (FCM), muda wa mwisho ulipotumia app (kwa kuonyesha hali ya "Mtandaoni"), anwani ya IP (kwa usalama na kuzuia matumizi mabaya), na historia ya arifa ndani ya akaunti yako.
• Mawasiliano nasi: ujumbe unaotutumia unapoomba msaada au unapotaka kutumia haki zako.

3. Jinsi Tunavyotumia Taarifa Zako

Tunatumia taarifa zako kwa madhumuni yafuatayo:

• Kuunda, kuthibitisha na kusimamia akaunti yako (ikiwemo kutuma msimbo wa SMS na barua pepe za uthibitisho au kubadilisha nywila).
• Kukuunganisha Mteja na Fundi aliye karibu na mwenye utaalamu unaohitajika, ikiwemo maombi ya dharura.
• Kuthibitisha utambulisho wa mafundi kabla ya kuwaruhusu kupokea maombi ya huduma, ili kulinda usalama wa wateja wote.
• Kukutumia arifa (push notifications) kuhusu maombi, mazungumzo, malipo, uidhinishaji, kumbusho la bima na taarifa za mfumo.
• Kukuwezesha kuwasiliana (kupiga simu na kuchati) na Fundi au Mteja mwenzako.
• Kukuonyesha hesabu na ripoti za matumizi ya magari yako (kila gari kivyake), ikiwemo ripoti ya PDF unayoomba.
• Kuchakata malipo ya mipango (Pro/Premium) na kuwasha huduma zake.
• Kuboresha ubora wa huduma, kutatua hitilafu za kiufundi, na kuzuia udanganyifu na matumizi mabaya ya mfumo.
• Kutii wajibu wa kisheria pale inapohitajika.

4. Msingi wa Kisheria wa Kuchakata Taarifa

Tunachakata taarifa zako kwa misingi ifuatayo: (a) utekelezaji wa makubaliano - kukupa huduma uliyoomba kwa kujisajili; (b) ridhaa yako - kwa mfano unapotoa ruhusa ya eneo au ya arifa (notifications); na (c) maslahi halali ya kibiashara - kama vile kuzuia udanganyifu na kuboresha huduma.

5. Ushirikishwaji wa Taarifa na Wahusika Wengine

HATUUZI taarifa zako binafsi kwa mtu au kampuni yeyote. Hatuonyeshi matangazo ya wahusika wengine, na hatutumii SDK za matangazo wala za uchambuzi wa tabia za watumiaji. Tunashiriki taarifa zako TU katika mazingira yafuatayo:

• Kati ya Mteja na Fundi: Mteja anapotuma ombi, Fundi husika anaona jina, eneo na maelezo ya ombi la Mteja. Namba ya simu ya Mteja inaonekana kwa Fundi anapokubali ombi (na mara moja kwa maombi ya dharura). Namba ya simu ya Fundi inaonekana kwa Mteja baada ya Fundi kukubali ombi, au mapema kwa Mteja mwenye mpango wa Pro/Premium.
• Wasifu wa Fundi wa umma: jina, picha, jina la garage, eneo (mkoa/wilaya/kata), utaalamu, uzoefu, alama na maoni, na machapisho (posts) vinaonekana kwa watumiaji wa GariFix. Picha ya kitambulisho cha Fundi HAIONEKANI kwa watumiaji - inaonekana kwa wasimamizi walioidhinishwa wa GariFix tu.
• Watoa huduma wa kiufundi (sub-processors) wanaotusaidia kuendesha mfumo: Google (Firebase - arifa za push, na Google Sign-In), Cloudinary (kuhifadhi picha na video), KiboNet (kutuma SMS za msimbo wa OTP), PalmPesa (kuchakata malipo ya pesa-mtandao), Brevo (kutuma barua pepe za mfumo), OpenStreetMap/Nominatim (ramani na utafutaji wa mahali), na watoa huduma wa seva na hifadhidata (Railway, Aiven). Wanaruhusiwa kutumia taarifa zako kwa kiwango kinachohitajika kutoa huduma yao kwetu tu. Baadhi yao wako nje ya Tanzania, kwa hiyo taarifa zako zinaweza kuchakatwa nje ya nchi.
• Wakati inapohitajika kisheria: kama vile amri ya mahakama au ombi halali la mamlaka husika ya serikali.
• Kwa ridhaa yako wazi: endapo utakubali kushiriki taarifa kwa sababu nyingine yoyote.

6. Eneo la Simu Yako (Location)

GariFix inaomba ruhusa ya eneo sahihi la simu yako. Tunatumia eneo lako TU wakati unatumia app (foreground) - HATUKUSANYI eneo lako ukiwa nje ya app (background).

• Kwa Mteja: kutafuta Mafundi walio karibu, kuambatanisha eneo na ombi la huduma au la dharura, na kuchagua eneo kwenye ramani.
• Kwa Fundi: eneo lako linasasishwa wakati app iko wazi ili Wateja wa karibu wakupate, na linatumika kuchagua Mafundi wa karibu kwa maombi ya dharura.
• Ramani zinapakiwa kutoka OpenStreetMap. Unapotafuta mahali, maneno ya utafutaji (au kuratibu za eneo) hutumwa kwa huduma ya Nominatim ya OpenStreetMap.

Unaweza kukataa au kuondoa ruhusa ya eneo wakati wowote kupitia mipangilio ya simu yako; app bado itafanya kazi ukichagua eneo mwenyewe kwenye ramani.

7. Muda wa Kuhifadhi na Kufuta Taarifa

Tunahifadhi taarifa zako kwa muda akaunti yako ikiwa hai.

KUFUTA AKAUNTI NA TAARIFA ZAKO: tuma ombi kwa barua pepe iliyoandikwa mwishoni mwa ukurasa huu, ukitumia barua pepe au namba ya simu ya akaunti yako, na ueleze "Futa akaunti yangu". Baada ya kuthibitisha kwamba ombi ni lako, tutafuta akaunti yako na taarifa zake binafsi - wasifu, picha, magari, matumizi, maombi ya huduma, mazungumzo, malipo, na picha za vitambulisho ulizopakia - kwa kawaida ndani ya siku 30.

Tunaweza kuhifadhi kwa muda mrefu zaidi taarifa fulani TU pale sheria inapotutaka (mfano kumbukumbu za kifedha). Msimbo wa OTP huisha muda ndani ya dakika chache na haukai kwenye mfumo.

8. Usalama wa Taarifa

Tunatumia hatua za kiusalama zinazokubalika kikanuni kulinda taarifa zako, zikiwemo: usimbaji (encryption) wa mawasiliano kati ya app na server (HTTPS/TLS), uthibitisho wa akaunti kwa "token" salama (JWT), uhifadhi wa nywila na misimbo ya OTP kwa njia ya "hashing" isiyoweza kusomeka, na uhifadhi wa picha za vitambulisho vya Mafundi mahali pa faragha pasipofikika kwa umma. Hata hivyo, hakuna mfumo wowote wa kidijitali ulio salama kwa asilimia 100 - tunakushauri kutokushiriki taarifa zako za kuingia (login) na mtu yeyote.

9. Haki Zako Kuhusu Taarifa Zako

Una haki zifuatazo wakati wowote:

• Haki ya kuona: kuomba nakala ya taarifa tulizonazo kukuhusu.
• Haki ya kurekebisha: kubadilisha taarifa zisizo sahihi (kupitia "Hariri Wasifu" ndani ya app, au kwa kuwasiliana nasi).
• Haki ya kufuta: kuomba akaunti yako na taarifa zake zifutwe kabisa - tazama sehemu ya 7.
• Haki ya kupinga: kupinga matumizi fulani ya taarifa zako, kama vile kupokea arifa (unaweza kuzima kupitia mipangilio ya simu yako) au matumizi ya eneo.

Ili kutumia haki hizi, wasiliana nasi kupitia barua pepe iliyoorodheshwa mwishoni mwa ukurasa huu.

10. Faragha ya Watoto

GariFix haikusudiwi kutumiwa na watu chini ya miaka 18. Hatukusanyi kwa makusudi taarifa za watoto. Endapo tutagundua akaunti ya mtoto chini ya umri unaotakiwa, tutaifuta mara moja.

11. Huduma za Wahusika Wengine (Third-Party Services)

App na tovuti vinatumia huduma za wahusika wengine zilizotajwa katika sehemu ya 5. Matumizi yako ya huduma hizo pia yanaongozwa na sera zao za faragha, ambazo tunakushauri kuzisoma:

• Google (Firebase, Google Sign-In): https://policies.google.com/privacy
• Cloudinary: https://cloudinary.com/privacy
• OpenStreetMap: https://osmfoundation.org/wiki/Privacy_Policy

12. Mabadiliko ya Sera Hii

Tunaweza kubadilisha Sera hii ya Faragha mara kwa mara ili kuendana na mabadiliko ya huduma zetu au sheria. Mabadiliko makubwa yatatangazwa ndani ya app kabla ya kuanza kutumika. Tarehe ya sasisho la mwisho imeandikwa mwanzoni mwa sera hii.

13. Wasiliana Nasi

Kwa maswali yoyote kuhusu Sera hii ya Faragha, matumizi ya taarifa zako, au kutaka kutumia haki zako zilizoainishwa hapo juu (ikiwemo ombi la kufuta akaunti), wasiliana nasi:

GariFix - Arusha, Tanzania
Barua pepe: garifix2026@gmail.com
Tovuti: https://garifix.com

Tutajibu ombi lako haraka iwezekanavyo.

GariFix Privacy Policy

1. Introduction

This Privacy Policy explains how GariFix ("we", "us", "our") of Arusha, Tanzania collects, uses, stores, shares and protects your information when you use the GariFix app and website (garifix.com). By using GariFix, you agree to the practices described here. If you do not agree with any part of this policy, please do not use our services.

Last updated: 4 October 2026.

2. Information We Collect

We collect the following types of information, depending on the features you use:

• Registration and account information: full name, phone number, email, password (stored using irreversible hashing), profile photo (optional), and preferred language.
• Sign in with Google: the name and email you allow through Google Sign-In.
• Sign in with phone number: your phone number and a one-time code (OTP) sent by SMS to verify your number. The code is stored hashed and expires after a few minutes.
• Mechanic information (if you register as a Mechanic): garage name, region, district, ward, street, specialization, years of experience, personal description, a verification ID photo (National ID/NIDA, Driving License, or Voter's Card), and the photos and videos you publish on your Mechanic page.
• Location: the precise GPS location of your phone, ONLY while you are using the app and have granted permission - see section 6.
• Vehicles and expenses: details of the vehicles you list (make, model, year, plate number, color, insurance expiry date) and the costs or fuel records you enter yourself (amount, date, notes).
• Service requests and communications: vehicle details, problem description, service location, request status, chat messages between Customer and Mechanic, and the reviews and ratings you give.
• Payments and subscription: the phone number used to pay by mobile money, the amount, transaction reference and payment status, and your plan (Pro or Premium) and its expiry date. We do NOT collect or store your mobile-money PIN or bank card details.
• Referrals and points: your referral code, who referred you or whom you referred, and "GariFix Points".
• Technical information: device type, operating system version, push notification token (FCM), your last-active time (used to show "Online" status), IP address (for security and abuse prevention), and your notification history within your account.
• Communications with us: messages you send us when asking for support or exercising your rights.

3. How We Use Your Information

We use your information to:

• Create, verify and manage your account (including sending SMS codes and verification or password-reset emails).
• Connect Customers with nearby Mechanics who have the required specialization, including emergency requests.
• Verify mechanic identities before allowing them to receive service requests, protecting the safety of all customers.
• Send you push notifications about requests, chats, payments, approvals, insurance reminders and system updates.
• Enable you to communicate (call and chat) with the Mechanic or Customer you are matched with.
• Show you expense summaries and reports for your vehicles (each vehicle separately), including the PDF report you request.
• Process plan payments (Pro/Premium) and activate their benefits.
• Improve service quality, fix technical issues, and prevent fraud and misuse of the platform.
• Comply with legal obligations where required.

4. Legal Basis for Processing

We process your information based on: (a) performance of a contract - providing the service you signed up for; (b) your consent - for example when you grant location or notification permissions; and (c) our legitimate business interests - such as preventing fraud and improving our services.

5. Sharing Your Information

We DO NOT sell your personal information to anyone. We do not show third-party advertising and we do not use advertising or behavioural-analytics SDKs. We only share your information in the following circumstances:

• Between Customer and Mechanic: when a Customer sends a request, the assigned Mechanic sees the Customer's name, location and request details. The Customer's phone number is visible to the Mechanic when they accept the request (and immediately for emergency requests). The Mechanic's phone number is visible to the Customer after the Mechanic accepts the request, or earlier for Customers on a Pro/Premium plan.
• Public Mechanic profile: name, photo, garage name, area (region/district/ward), specialization, experience, ratings and reviews, and posts are visible to GariFix users. A Mechanic's ID photo is NOT visible to users - only to authorized GariFix administrators.
• Technical service providers (sub-processors) that help us run the platform: Google (Firebase - push notifications, and Google Sign-In), Cloudinary (photo and video storage), KiboNet (sending OTP SMS), PalmPesa (processing mobile-money payments), Brevo (sending system emails), OpenStreetMap/Nominatim (maps and place search), and our server and database hosting providers (Railway, Aiven). They may only use your data as needed to provide their service to us. Some of them are located outside Tanzania, so your data may be processed abroad.
• When legally required: such as a court order or a lawful request from a government authority.
• With your explicit consent: if you agree to share information for any other purpose.

6. Your Phone's Location

GariFix asks for permission to access your phone's precise location. We use your location ONLY while you are using the app (foreground) - we do NOT collect your location while the app is closed or in the background.

• For Customers: to find nearby Mechanics, to attach a location to a service or emergency request, and to choose a location on the map.
• For Mechanics: your location is updated while the app is open so nearby Customers can find you, and it is used to select nearby Mechanics for emergency requests.
• Maps are loaded from OpenStreetMap. When you search for a place, your search words (or location coordinates) are sent to OpenStreetMap's Nominatim service.

You can deny or withdraw location permission at any time in your phone settings; the app will still work if you choose a location yourself on the map.

7. Data Retention and Deletion

We keep your information for as long as your account remains active.

TO DELETE YOUR ACCOUNT AND DATA: send a request to the email address at the bottom of this page, using the email address or phone number of your account, and state "Delete my account". After we confirm the request is yours, we will delete your account and its personal data - profile, photos, vehicles, expenses, service requests, chats, payments, and any ID photos you uploaded - normally within 30 days.

We may keep certain information for longer ONLY where the law requires us to (for example financial records). OTP codes expire within minutes and are not kept.

8. Data Security

We use industry-standard security measures to protect your information, including: encryption of communication between the app and our servers (HTTPS/TLS), secure token-based authentication (JWT), one-way hashing of passwords and OTP codes that cannot be reversed, and storage of Mechanic ID photos in a private location that is not publicly accessible. However, no digital system is 100% secure - we advise you never to share your login credentials with anyone.

9. Your Rights Over Your Data

You have the following rights at any time:

• Right to access: request a copy of the information we hold about you.
• Right to correction: fix inaccurate information (via "Edit Profile" in the app, or by contacting us).
• Right to deletion: request that your account and its data be permanently deleted - see section 7.
• Right to object: object to certain uses of your data, such as receiving notifications (which you can disable via your phone settings) or the use of your location.

To exercise these rights, contact us via the email listed at the bottom of this page.

10. Children's Privacy

GariFix is not intended for use by anyone under the age of 18. We do not knowingly collect information from children. If we discover an account belonging to someone under the required age, we will delete it immediately.

11. Third-Party Services

The app and website use the third-party services listed in section 5. Your use of those services is also governed by their own privacy policies, which we encourage you to review:

• Google (Firebase, Google Sign-In): https://policies.google.com/privacy
• Cloudinary: https://cloudinary.com/privacy
• OpenStreetMap: https://osmfoundation.org/wiki/Privacy_Policy

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. Significant changes will be announced within the app before taking effect. The date of the latest update is shown at the top of this policy.

13. Contact Us

For any questions about this Privacy Policy, how your data is used, or to exercise any of the rights listed above (including account deletion requests), contact us:

GariFix - Arusha, Tanzania
Email: garifix2026@gmail.com
Website: https://garifix.com

We will respond to your request as promptly as possible.