Privacy Policy

1. Introduction

This Privacy Policy explains how ThisCity WiFi ("we", "our", or "us") collects, uses, and protects information when you buy guest internet vouchers, create a WiFi account, sign in on a hotspot captive portal, or use the website at thiscitywifi.web.app.

ThisCity WiFi is operated by ThisCity (Apps & Services). Hotspot locations may display the branding of the venue or organisation providing the WiFi service, but account and payment processing are handled through the ThisCity WiFi platform.

2. Information we collect

Depending on how you use the service, we may collect:

• Account details: first name, last name, phone number, account PIN, and optional Google sign-in information (email address, display name, and Firebase user ID when you choose Google login).
• Voucher and session data: voucher codes, usernames, plan details, activation time, expiry time, data usage, and connection status.
• Usage history: connection and session records linked to your account, phone number, voucher, device MAC address, hotspot location, timestamps, data consumed, session start and end events, login attempts, and related network activity needed to operate the service and investigate misuse.
• Device and network data: device MAC address, local IP address, hotspot code, and captive-portal session identifiers needed to connect you to the WiFi network.
• Payment data: mobile money network, payment status, and transaction references processed through PayChangu. We do not store your mobile money PIN.
• Technical data: browser type, page views, and error logs used to keep the portal secure and reliable.

3. How we use your information

We use this information to:

• sell and deliver WiFi vouchers;
• authenticate your account by phone and PIN or Google sign-in;
• activate, pause, and expire WiFi sessions fairly;
• send mobile money payment prompts and confirm payment;
• show your remaining time and data on the portal and in My account;
• maintain usage history linked to users and vouchers for billing, support, security, and compliance;
• investigate suspected abuse, fraud, or unlawful activity on the network;
• support customers and resolve connection problems.

4. Prohibited use

ThisCity WiFi is provided for lawful personal or business internet access only. You must not use the service to access, download, share, stream, or distribute pornography, child sexual abuse material, or any other illegal content or activity. Use that breaches Malawian law or these rules may result in immediate suspension, voucher termination without refund, and reporting to the relevant authorities.

5. Who we share information with

We do not sell your personal information. We share data only where needed to run the service:

• Hotspot operators: the organisation running the WiFi location may see voucher sales, session activity, and usage history for their hotspot.
• Payment providers: PayChangu and mobile money operators process payments on our behalf.
• Infrastructure providers: Google Firebase, Firebase Authentication, Firebase Hosting, and Cloud Functions host and secure the platform.
• Authorities: we may provide account details, voucher records, device identifiers, timestamps, and usage history to police, regulators, courts, or other competent authorities when we receive a lawful request, valid court order, or where disclosure is required to investigate illegal activity, protect users, or comply with the law.

6. Data retention

Active account and voucher records are kept while your vouchers remain usable or while your account is active. Expired vouchers, ended sessions, and usage history linked to users and vouchers may be retained for a reasonable period for support, accounting, fraud prevention, network security, and legal compliance.

Payment and voucher sale records may be kept for up to seven (7) years where required for tax, accounting, or legal compliance.

7. Security

Account PINs are stored using salted one-way hashing. Google sign-in uses Firebase Authentication. Voucher credentials are shown only after you authenticate. Please keep your PIN private and do not share voucher usernames or passwords with others.

8. Your choices

You can view vouchers and session status in My account. You may request correction or deletion of your personal data as described on our Data Deletion page. You can choose phone and PIN sign-in instead of Google login at any time.

9. Contact us

If you have questions about this Privacy Policy, contact: