Spiral360 Mobile
Privacy Policy
Last updated: 28 October 2026
Zoey Pharmacy (“we”, “us” or “our”) provides Spiral360 Mobile, an internal pharmacy-operations application for authorised Zoey Pharmacy staff. This policy explains how information is handled when authorised users use the application.
Information we handle
To operate the application and its authorised business functions, we may handle:
- Account and security information: staff names, usernames, work email addresses, phone numbers, roles, permissions, authentication credentials, session tokens and security-PIN status.
- Operational and business information: product, stock, supplier, customer, purchase, sale, return, expense, account, branch and reporting records entered or made available by authorised users.
- Contact information: customer or supplier names, phone numbers, email addresses and addresses where authorised users enter or access them for business operations.
- Payment information: transaction references, amounts, payment status and, when an online mobile-money payment is requested, the customer phone number and optional email needed to initiate and settle that payment. The app does not collect or store card numbers, mobile-money PINs or bank-account passwords.
- Camera data: the app can use the device camera only when an authorised user chooses to scan a barcode. Barcode image data is used for that scan and is not used for advertising.
- Limited technical and local-session information: an authentication token, PIN-enabled status and an in-progress payment-attempt identifier may be stored on the device to keep the authorised session and payment workflow secure. We do not use advertising identifiers, precise location, contacts, call logs or behavioural advertising analytics.
How we use information
We use this information to authenticate authorised users; enforce role-based access; process sales, stock, customer, supplier and accounting operations; provide reporting; secure sessions; support barcode scanning; initiate and settle authorised online payments; maintain audit records; troubleshoot issues; and comply with applicable legal and business-record obligations.
How information is shared
We do not sell personal information and we do not use information for targeted advertising. Information is shared only as necessary to operate the service:
- with the Zoey Pharmacy systems and personnel authorised to administer or use the business operations platform;
- with service providers that host, secure or support the application and its backend; and
- with the configured mobile-money payment processor when an authorised user requests an online payment. Only the information needed to process the payment, such as amount, reference and customer contact details, is provided.
Data security and retention
We use access controls, role-based permissions, authenticated connections and secure on-device storage for session credentials. No system is completely secure, so users should protect their devices and keep their credentials confidential. We retain information for as long as needed for authorised operational, accounting, audit, legal or support purposes, then delete or anonymise it where appropriate.
Your choices and requests
Authorised users can ask their organisation’s administrator to correct business-account information, adjust access, or request assistance. For privacy questions, access, correction or deletion requests, contact us using the details below. To request deletion of a Spiral360 account, follow our account-deletion process. Requests may be limited where data must be retained for legal, accounting, fraud-prevention or audit reasons.
Children
The application is for authorised business staff and is not directed to children.
Changes to this policy
We may update this policy when our services or legal obligations change. The current version will be posted at this address with an updated effective date.
Contact us
For privacy or support questions, email careers.zoeypharmacy@spiral360.co.tz.