PRIVACY POLICY

QPID TECHNOLOGIES ("we", "our", "us", or the "Company") operates the Fiesta mobile application (the "Service", "Fiesta", or "App"). This privacy policy informs you of our policies regarding the collection, use, disclosure, retention, and protection of personal and non-personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy and handling your data in an open and transparent manner. Please read this privacy policy carefully to understand our practices regarding your personal data.

QPID TECHNOLOGIES is the data controller responsible for your personal data. We are based in Nairobi, Kenya and operate the Fiesta mobile application.

We collect minimal personal information to provide and improve our Service. The categories of personal data we may collect include:

• Device Information: We collect device-specific information such as your device ID, device model, operating system, and system performance data.
• Usage Data: We collect information about how you use our App, including app interactions, features used, and time spent on the App.
• Crash Logs and Diagnostics: We collect information when the App crashes or experiences technical issues to help us improve stability.

We do not collect the following types of personal information:

• Your name, email address, or contact details
• Your precise location
• Your contacts, messages, or files
• Your photos, videos, or media files
• Health or fitness data
• Sensitive personal information

We do not use cookies or similar tracking technologies within the App.

We process your personal data for the following purposes and legal bases:

• To provide and maintain our Service: Processing is necessary for the performance of our contract with you to provide the App's functionality (legal basis: contractual necessity).
• To improve our Service: We analyze usage patterns and performance metrics to enhance user experience and app functionality (legal basis: legitimate interests).
• To detect and fix technical issues: We process crash reports and diagnostic information to identify and resolve technical problems (legal basis: legitimate interests).
• To comply with legal obligations: We may process your data to comply with applicable laws and regulations (legal basis: legal obligation).

We use Google Analytics for Firebase to help us understand app usage patterns and improve our service. This service collects anonymous usage data and crash reports. The information collected includes:

• App performance data
• Crash reports
• General usage statistics
• Device information

This data is not linked to any personally identifiable information. We use this information solely for the purpose of improving the app's performance and user experience.

We also use Google's Remote Config feature to manage and update certain app settings without requiring an app update. This feature does not collect any personal information but helps us improve your app experience.

We share data with the following third parties:

• Service Providers: We share data with Google (Firebase Analytics) to help us analyze app performance and usage patterns. These providers are contractually bound to protect your data and only use it for specified purposes.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

We do not sell your personal information to third parties. We do not share your personal information with third parties for their marketing purposes.

We retain different types of data for different periods:

• The anonymous analytics data collected through Google Analytics for Firebase is retained for 14 months before being automatically deleted.
• Crash logs and diagnostic information are retained for 90 days to help us identify and fix technical issues.
• Device identifiers are retained for as long as you have the App installed on your device.

After these periods, the data is securely deleted or anonymized in a way that it can no longer be associated with a specific user.

Depending on your location, you have certain rights regarding your personal data:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request that we delete your personal data in certain circumstances.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to request that we transfer your personal data to another service provider in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to our processing of your personal data in certain circumstances.
• Right to Know About Data Sharing/Sales: You have the right to know whether your personal data is shared or sold to third parties.

To exercise any of these rights, please contact us using the contact information provided in the "Contact Us" section. We will respond to your request within the timeframe required by applicable law.

You can opt-out of analytics data collection by adjusting your device settings:

• Android: Go to Settings > Privacy > Ads and enable "Opt out of Ads Personalization" or "Reset advertising ID"
• iOS: Go to Settings > Privacy > Tracking and disable "Allow Apps to Request to Track"

As we do not sell your personal data, there is no need to opt-out of data sales. However, if you wish to limit the data we collect altogether, you can uninstall the App at any time.

Our Service is not intended for use by children under the age of 13 ("Children"). We do not knowingly collect personally identifiable information from children under 13.

We do not collect any personal information from children, including:

• Names or contact information
• Location data
• Photos, videos, or audio
• Any other personally identifiable information

If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary actions.

Rights of Parents and Guardians:

• You have the right to review your child's personal information that we might have collected
• You have the right to request that we delete any personal information we may have collected about your child
• You have the right to refuse further collection or use of your child's personal information

To exercise any of these rights, please contact us at the email address listed in the "Contact Us" section.

Your information, including any anonymous data that might be collected by Google Analytics for Firebase, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside Kenya and choose to provide information to us, please note that we transfer the data to Kenya and process it there. Your consent to this privacy policy followed by your submission of such information represents your agreement to that transfer.

When we transfer personal data to countries outside the European Economic Area or countries without an adequacy decision, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

The security of your data is important to us. We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

General Data Protection Regulation (GDPR)

For users in the European Union, we process your personal data in accordance with the GDPR. You have the right to access, update, or delete your information, as well as the right to restrict or object to certain processing activities. You also have the right to lodge a complaint with your local data protection authority if you believe that we have not complied with applicable data protection laws.

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

For California residents, you have specific rights under California privacy laws, including:

• The right to know what personal information we collect about you
• The right to know whether your personal information is sold or disclosed and to whom
• The right to opt out of the sale of your personal information
• The right to request deletion of your personal information
• The right to access your personal information
• The right to non-discrimination for exercising your privacy rights

Virginia Consumer Data Protection Act (VCDPA)

If you are a resident of Virginia, you have rights under the VCDPA, including:

• The right to confirm whether we are processing your personal data
• The right to access your personal data
• The right to correct inaccuracies in your personal data
• The right to delete your personal data
• The right to obtain a copy of your personal data in a portable format
• The right to opt out of targeted advertising, the sale of personal data, or profiling

Brazilian General Data Protection Law (LGPD)

For users in Brazil, we process your personal data in accordance with the LGPD. You have rights similar to those provided under the GDPR, including the right to access, correct, and delete your personal data.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

When we make substantial changes to this Privacy Policy, we may also notify you by other means, such as through an in-app notification or by email (if applicable).

App updates may affect how data is handled. We encourage users to review this privacy policy after each app update for any changes.