Privacy policy

Weettah, a company registered in Malawi and based in Lilongwe, Malawi, is responsible for the personal information described here. We handle it in line with the Malawi Data Protection Act, 2024. For any privacy question or request, email support@weettah.com.

• Your details: first and last name, email address and mobile number, which you give us at checkout.
• Your order: the plan, destination, price, payment status, order reference and the date you bought it.
• Your eSIM: technical identifiers such as the ICCID and activation code, so we can deliver and support it.
• Payment confirmation: PayChangu tells us whether your payment succeeded, its reference and the payment method used. We never receive your card number or mobile money PIN.
• Messages: anything you send us when you contact support.
• Technical data: our hosting provider keeps standard server logs, such as IP address, browser type and the pages requested, for security and troubleshooting.

Our phone check runs inside your browser. It reads your phone's model or software version to tell you whether it supports eSIM, and it doesn't send that information to us.

• To process your order, take payment, deliver your eSIM and help you install it. We need this to fulfil our contract with you.
• To answer your questions and handle refunds.
• To keep financial records, as required by tax and accounting law.
• To prevent fraud and keep our service secure, which is in our legitimate interest and yours.

We don't sell your personal information or share it for advertising. We only share it with the service providers we need to run Weettah:

• PayChangu processes your payment. It receives your name, email and the amount due.
• eSIM Access, our connectivity partner, issues your eSIM. It receives the plan and our order reference, not your name, email or phone number.
• Supabase hosts our database and sends sign-in codes for your account.
• Vercel hosts our website.

We may also share information if the law requires it, or to protect our rights or someone's safety.

Some of our providers store data on servers outside Malawi. When this happens, we choose established providers that protect data with security measures such as encryption, access controls and contractual safeguards.

We keep order and payment records for as long as tax and accounting law requires. We keep support messages for as long as we need them to help you, and server logs for a short period. When we no longer need information, we delete or anonymise it.

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that's wrong or incomplete;
• delete your information, unless we have to keep it by law;
• stop using your information for a particular purpose.

Email support@weettah.com from the address you ordered with and we'll respond within 30 days. If you're not happy with our answer, you can complain to the Malawi Communications Regulatory Authority (MACRA), which oversees data protection in Malawi.

We don't use advertising or tracking cookies. If you sign in to your account, your browser stores a sign-in session so you stay logged in. You can clear it at any time by signing out or clearing your browser data.

We protect your information with encryption in transit, restricted access to our database and encrypted storage of our supplier credentials. Your install page is private and can only be opened with its unique link.

Weettah isn't intended for anyone under 18. If you're under 18, please ask a parent or guardian to buy for you.

If we change how we use your information, we'll update this page and change the effective date above.