Privacy

What we keep, and why.

Jusa sends airtime and ZESA tokens. To do that we need a phone number, a meter number and a payment. This page says exactly what we hold, who else sees it, and how to make us delete it.

Effective 6 September 2026 · Applies to jusa.localhost.co.zw and the Jusa app for Android and iOS

Who we are

Jusa and localhost are trading names of Superdarkcode Labs (Private) Limited, a company registered in Zimbabwe and based in Harare (“we”, “us”). We are the data controller for the information described here. You can reach us at jusa@localhost.co.zw or on WhatsApp at +263784442662.

We process personal information under Zimbabwe’s Cyber and Data Protection Act [Chapter 12:07]. If you use Jusa from another country, the protections on this page still apply to you.

What we collect

InformationWhenWhy we need it
Your phone numberWhen you sign inIt is your account. We send a one-time code to it by WhatsApp or SMS.
Your email addressOnly if you give it, at checkout or for receiptsReceipts, ZESA tokens and account notices.
Phone numbers and meter numbers you send toWhen you buy, schedule, or add a personTo deliver the airtime or token, and to show it in your history.
Names and relationships you add (for example “Gogo”)When you add someone in the appSo the app can say who a send is for. They are labels for you; we never contact these people.
The name on a ZESA meterWhen you confirm a meter before payingShown to you so you do not pay towards the wrong meter. It is kept on the order record for that purchase only.
Order and payment recordsEvery purchase and top-upAmount, product, recipient, reference, status and time. These are our financial records.
Wallet balance and ledgerIf you top up a walletMoney you have paid in and what it was spent on.
DiagnosticsWhile you use the site or appWhich screens were opened, errors that occurred, and a session identifier. Used to fix problems. No advertising identifiers, no cross-app tracking.

We do not collect your card number, EcoCash PIN or bank details. Payment is handled by Pesepay on their own pages; we receive only a payment reference and whether it succeeded.

We do not collect your contacts, your location, or anything from your device beyond what you type into Jusa.

What we use it for

We do not sell personal information, and we do not use it for advertising.

Who we share it with

Only the companies that have to touch the information for your purchase to work:

WhoWhat they receiveWhy
Hot Recharge (airtime and ZESA supplier)The recipient phone or meter number, the amount, and an order referenceThey fulfil the recharge with the network or ZETDC.
Pesepay (payment processor)The amount, a payment reference, and what you are paying forThey take the payment. Your payment details are given to them, not to us.
Meta (WhatsApp) and sms.localhost.co.zwYour phone number and the one-time code or token textTo deliver sign-in codes, receipts and ZESA tokens.
Our own monitoring (self-hosted)Diagnostics, session identifier, your account idTo find and fix errors. Hosted by us, not a third party.

We may also disclose information when the law requires it, or to protect Jusa, our customers or the public from fraud.

How long we keep it

Your rights

You can ask us to show you what we hold about you, correct it, or delete it. You can also object to a particular use, or ask us to stop processing while a dispute is settled. Email jusa@localhost.co.zw from the address on your account, or WhatsApp us from the number you sign in with, and we will answer within thirty days. If you are not satisfied you can complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), which is the data protection authority.

Deleting your account

In the app: scroll to Your account on the home screen and tap Delete account. On the web: go to jusa.localhost.co.zw/account/delete. By message: email or WhatsApp us from the account’s own number and say you want it deleted.

Deletion is immediate. Your phone number, email, the people you added and any scheduled sends are removed and cannot be recovered. Money left in a wallet is forfeited unless you ask us to refund it first. Financial records of past purchases are kept, without your name or number attached, for the period above.

Security

All traffic is encrypted in transit. Sign-in is by one-time code, so there is no password to steal. One-time codes are stored hashed and expire in five minutes. Access to customer data inside Jusa is limited to staff who need it to help you, and is logged.

Children

Jusa involves paying for things, so it is for people aged eighteen and over. We do not knowingly keep an account for anyone younger; if you believe we have, tell us and we will delete it.

Changes to this policy

If we change what we collect or who we share it with, we will update this page and change the date at the top. For a material change we will also tell you by WhatsApp or email before it takes effect.

Contact

Superdarkcode Labs (Private) Limited, trading as localhost · Harare, Zimbabwe · jusa@localhost.co.zw · WhatsApp +263784442662