Rockmax International Limited ("Rockmax", "we", "our" or "us") is responsible for the Rockmax mobile application. By using the app, you acknowledge the practices described below. This policy should be read together with any notices shown when a particular feature is used.
What this policy covers
This policy covers information processed through the Rockmax mobile app, its account and loyalty features, and the supporting Rockmax mobile API. The app is used by customers, registered stores and authorised Rockmax management personnel.
It does not govern independent services operated by Google, Apple, mobile network operators or websites that have their own privacy notices.
Information we collect
Depending on your role and the functions you use, we may process the following information:
Account and identity
Name, user or account ID, phone number, account category, role, status, password credentials and access token.
Registration details
Customer names, store or business name, phone number, store category and, for stores, taxpayer identification number where provided.
General location details
Region, district, ward and street selected during customer or store registration. The current app does not collect precise GPS location.
Loyalty and transaction data
Customer or card number, card activation information, number of product bags, claiming mode, points, sales and redemption history, and transaction dates.
Security and recovery data
Phone number, one-time verification code, password-reset request and related security records used to restore access.
Technical and app data
Login session information stored on your device, API request timestamps, IP address, basic device or network information, and server logs needed for security and reliability.
The current app does not use advertising identifiers, third-party advertising SDKs or third-party analytics SDKs. It does not collect contacts, microphone recordings or precise device location.
How we use information
- Authenticate users and keep authorised sessions active.
- Create, administer and support customer, store and management accounts.
- Register stores and customers and maintain directory information.
- Record qualifying sales, calculate and display loyalty points, and support points claims.
- Activate loyalty cards and associate them with the correct customer or store.
- Send and verify password-reset codes and protect accounts against unauthorised access.
- Provide dashboards, transaction history and operational records appropriate to each user role.
- Respond to support, privacy and account-management requests.
- Maintain security, prevent misuse or fraud, troubleshoot errors and improve service reliability.
- Meet applicable legal, accounting, regulatory and record-keeping obligations.
We process information where it is necessary to provide the service you request, administer our relationship with you, protect legitimate business and security interests, comply with law, or where you have given consent when consent is required.
When information may be shared
We do not sell or rent personal information. Information may be disclosed only as reasonably necessary to:
- Authorised Rockmax personnel who need it to operate accounts, stores, sales and the loyalty programme.
- Infrastructure, hosting, communications or technical service providers acting on our instructions, including providers that support password-verification messages.
- Professional advisers, auditors or insurers where access is necessary and appropriately protected.
- Government authorities, regulators, courts or law-enforcement bodies when disclosure is legally required.
- A successor organisation in a merger, restructuring or transfer of the relevant business, subject to appropriate confidentiality and data-protection safeguards.
Service providers are expected to use personal information only for the contracted purpose and to apply protections consistent with this policy and applicable law.
Storage and security
The app communicates with Rockmax systems using HTTPS. A limited login session—including name, phone number, role and access token—is stored in the app's private device storage so that an authorised user can remain signed in. Logging out removes the saved session from the app.
We use reasonable administrative, technical and organisational safeguards designed to protect information from loss, misuse, unauthorised access, alteration or disclosure. These include access controls, authentication, role-based permissions and protected network transmission. No electronic system can be guaranteed completely secure, so users should protect their device, password and verification codes.
How long we keep information
We retain account information while an account is active and for as long as reasonably necessary to provide the app and loyalty services. When information is no longer required, we delete it, anonymise it, or securely restrict its use.
Some transaction, points, security, tax, accounting or dispute records may be retained after account closure where required by law or reasonably necessary for fraud prevention, legal claims and legitimate record keeping. Retained information remains protected and is not used for unrelated purposes.
Your choices and rights
Subject to applicable law and appropriate identity verification, you may ask us to:
- Confirm whether we hold personal information about you and request access to it.
- Correct information that is inaccurate or incomplete.
- Delete your account and associated personal information.
- Restrict or object to particular processing where the law provides that right.
- Withdraw consent for processing based on consent, without affecting earlier lawful processing.
You may log out to remove the saved app session from your device. Uninstalling the app removes local app data but does not by itself delete information held in Rockmax systems; use the deletion process below for that purpose.
Request account and data deletion
You may request deletion of your Rockmax mobile-app account and associated personal information through the Rockmax Help Desk. In your message, write "Mobile App Account Deletion" and include your full name, account phone number and whether you are a customer or store. Never include your password or verification code.
We may contact you to verify ownership before completing the request. We will act within a reasonable period and will explain if limited records must be retained for legal, security, fraud-prevention, accounting or dispute purposes.
Children's privacy
The Rockmax app is intended for customers, stores and authorised business personnel and is not directed to children under 18. We do not knowingly collect personal information from a child through the app. If you believe a child has provided information, contact us so that we can review and take appropriate action.
International processing
Rockmax operates in Tanzania. Some infrastructure or technical providers may process information in other countries. Where information is transferred across borders, we take reasonable steps to use appropriate contractual, organisational and technical safeguards as required by applicable law.
Changes to this policy
We may update this policy when the app, our practices or legal requirements change. The revised version will be posted at this address with an updated effective date. Where a change is material, we may also provide notice in the app or through another appropriate channel.
12 · Contact
Questions or privacy requests?
Contact Rockmax International Limited and identify your request as relating to the Rockmax mobile app. Please do not send passwords or one-time verification codes.