Rafiki separates the owner’s commercial account from operational pharmacy records. We collect what is needed to provide the service, protect accounts and verify payments.
1. Information we collect
An owner account may contain name, phone, email, a securely hashed password, a record of signing in, subscription and payment references. A pharmacy may store branch, staff, customer, medicine, sales, supplier and audit information according to the customer’s use.
2. How we use information
We use information to provide the system, verify identity and payments, maintain backups, prevent abuse, provide support and meet legal obligations. We do not sell personal information.
3. Security and access
Role permissions, enrolled devices, expiring sessions, request protection and audit history reduce inappropriate access. Rafiki personnel should not access pharmacy records without an authorised and recorded support reason.
4. Retention, transfers and your rights
We retain information as needed to provide the service, protect business records and meet legal duties. An owner may request a copy, correction or closure of the account, except for records that must be retained. Contact support@rafiki.co.tz.
Each pharmacy remains responsible for having a lawful basis for collecting customer information and meeting its own privacy duties.