PRIVACY POLICY
Power Connect by Br3eze Africa
LAST UPDATED: NOVEMBER 2026
WHO WE ARE & WHICH LAW APPLIES§ 01Br3eze Africa ("we", "us") runs Power Connect and is the data controller for the personal information described here. This policy covers the apps, the website, accounts, payments and Wi-Fi sign-in at Partner sites.
- Zimbabwe: the Cyber and Data Protection Act [Chapter 12:07] and its regulations (including SI 155 of 2024). The Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) is the Data Protection Authority.
- South Africa: the Protection of Personal Information Act 4 of 2013 (POPIA). The Information Regulator is the supervisory authority.
| DATA | EXAMPLES | WHEN |
|---|---|---|
| Account | Name, username, email, phone number, country, sign-in method, age band (18+ or minor with a guardian) | REQUIRED |
| Agreement record | Which Terms and Privacy versions you accepted and when | REQUIRED |
| Purchases and credits | Top-ups, passes, vouchers, credit sent or received, shop orders, payment provider reference and amount | WHEN YOU BUY |
| Saved card | A Stripe reference plus the card brand, last four digits and expiry date. We never see or store full card numbers. | OPTIONAL |
| Wi-Fi sessions | Site, start and end time, device MAC and IP address on the Site's network, data used | WHEN YOU CONNECT |
| Device | Device model and OS, app version, a device label you choose, the Wi-Fi network you are on (app only) | APP |
| Location | Precise location, only after you allow it, to read the Wi-Fi name, show nearby sites or set a Partner site's map position | OPTIONAL |
| Crash reports | Crash and error details from the Android app (Firebase Crashlytics) | APP |
| Messages and support | Chats, support tickets, price requests, community posts | WHEN YOU WRITE |
| Partner details | Business name, contact phone, country, site details, router health from the site agent, earnings and payouts | PARTNERS |
| PURPOSE | LEGAL BASIS |
|---|---|
| Running your account, passes, credits, sign-in and getting you connected | Performing our contract with you |
| Processing payments, refunds and Partner payouts; keeping financial records | Contract and legal obligation (tax and financial record-keeping) |
| Preventing fraud, abuse and account takeover; securing the network | Our legitimate interest, and legal obligation |
| Location features and notifications | Your consent, which you can withdraw in your device settings or in Settings → Permissions |
| Newsletter and marketing email | Your consent (the tick box when you subscribe); every email has an unsubscribe link |
| Answering lawful requests from authorities | Legal obligation (for example a warrant under the Interception of Communications Act [Chapter 11:20]) |
We do not sell or rent your personal information, and we don't use it for third-party advertising.
Our database, sign-in and app backend run on Google Firebase / Google Cloud, whose servers are outside Zimbabwe and South Africa. Using Power Connect therefore means your personal information is transferred outside Zimbabwe.
- The Cyber and Data Protection Act requires us to notify POTRAZ of this transfer and to send data only to providers bound by contract to protect it at least as well as Zimbabwean law requires. Google, Stripe and our other processors are covered by their data processing terms.
- Data is encrypted in transit (HTTPS/TLS) and encrypted at rest by Google.
- We transfer only what is needed to provide the Services you ask for.
| RECIPIENT | WHAT | WHY |
|---|---|---|
| Google (Firebase, Cloud, Crashlytics) | All account and service data | Hosting, database, sign-in, crash reports |
| Paynow (Zimbabwe), PesaPay | Amount, reference, the phone or email you pay with | Mobile money and local payments |
| Stripe (United States) | Amount, email, card details you enter on Stripe's form | Card payments |
| The Partner whose Site you use | Your session at their Site (time, device MAC/IP on their network, data used, pass type). Never your password or payment details | Running and billing the Site |
| Our email provider | Your email address and the message | Receipts, password reset, account notices |
| OpenStreetMap (Nominatim) | The place name you type in the map search | Finding a place on the map |
| Authorities | Only what the law requires | A valid warrant, court order or legal duty in Zimbabwe or South Africa |
If Power Connect is sold or merged, your data moves to the new owner under this same policy, and we'll tell you first.
- Account data: while your account is open. When you ask us to delete your account, we delete or anonymise it within 30 days, except the records below.
- Payments, credits, refunds and payouts: up to 6 years, for tax and financial record-keeping.
- Wi-Fi session records: up to 12 months, for billing disputes, security and legal requests.
- Support tickets and messages: while your account is open, or until you delete them.
- Crash reports: as long as Firebase Crashlytics keeps them (90 days by default).
- HTTPS (TLS) for all traffic between your device and our servers
- Passwords handled by Firebase Authentication, never stored in readable form
- Access rules that let each account read only its own data, and server-only handling of balances and payments
- Rate limits and account lockout after repeated failed sign-ins
- Router passwords stay on each Partner's site agent and are never sent to the app
If a breach puts your information at risk, we will notify POTRAZ (and the Information Regulator for South African users) as the law requires, and tell you without undue delay.
Under the Cyber and Data Protection Act (Zimbabwe) and POPIA (South Africa), you can:
- Access: ask what personal information we hold about you and get a copy
- Correct: have wrong or incomplete information fixed
- Delete: ask us to delete your information, except what the law requires us to keep
- Object: object to processing based on our legitimate interest, and to direct marketing at any time
- Withdraw consent: for location, notifications and marketing, without affecting the rest of the Services
- Not be subject to automated decisions with legal effect without human review. Partner applications and commission reviews are decided by a person.
- Complain: to POTRAZ (Zimbabwe) or the Information Regulator (South Africa)
We answer requests within 30 days and may ask you to prove who you are first.
Power Connect sets no cookies of its own and uses no analytics or advertising trackers. The app stores a few things on your device so it works:
| STORED | WHERE | PURPOSE |
|---|---|---|
| Sign-in session | Browser storage (IndexedDB), by Firebase Authentication | Keeps you signed in; cleared when you sign out |
| Preferences | localStorage (pc_theme, pc_lang, pc_sidebar) | Theme, language and sidebar layout |
| Cart and offline cache | localStorage (shop_cart, cached plans and profile, pending actions) | Your basket and working offline |
| Permission choices | localStorage, synced to your account | So we don't ask again after you say no |
| Translations | localStorage (pc_mt_<language>) | On-device translations; nothing is sent to us |
Some third parties may set their own cookies or see your IP address when their content loads: Stripe on card payment pages (fraud prevention), and the font and icon providers (Google Fonts, cdnjs). Clearing your browser's site data removes everything above.
You must be 18 or older to create an account on your own. A person under 18 may use Power Connect only with a parent or guardian who agrees on their behalf (the app asks for this when the account is created). We collect only what is needed to provide the Services to a minor and never use it for marketing. If you believe a child is using Power Connect without a guardian's agreement, contact us and we'll delete the account.
For privacy questions, requests under § 08, or complaints, contact our Data Protection Officer:
When we change this policy, we update the date at the top. For a material change, the app asks you to accept the new version before you continue, and we'll email you if we have your address.