ZANU PF 23rd NPC ZANU PF 23rd NPC
Log In Register

Privacy Policy

National People's Conference 2026 (ZANU-PF) Last updated: 4 October 2026

This policy explains what personal information the National People's Conference 2026 web portal and NPC 2026 mobile app (together, the "Service") collect, why, who we share it with, how long we keep it, and what choices you have. The organisers of the conference are responsible for this information. For questions, use the Help & Support page of the Service.

This policy is written to support compliance with the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe and the data and privacy rules of Apple's App Store and Google Play.

1. Information we collect

Account details

  • Full name, email address and a password (stored only as a secure one-way hash, never as plain text).

Registration details

  • Category (for example, delegate or staff), province, party structure, rank, organisation, and phone number.
  • Your registration number, approval and accreditation status, and any reasons given if a registration is rejected.

Sensitive information you choose to give

  • Dietary requirements and accessibility requirements. These may reveal health information. You do not have to provide them, and we use them only to plan catering and access arrangements.

Conference logistics

  • Your digital pass (status, issue and revocation dates, and a pass code used for scanning).
  • Accommodation facility and room, and bus and seat assignment.
  • Check-in and scan records: the time, the checkpoint, facility or bus, the device used, and the result (for example, allowed or denied).

Communication

  • Notifications sent to you and whether you have read them.
  • Support requests you submit and the replies you receive.
  • Push notification tokens for your device, so the app can send you alerts. These are removed when you log out or delete your account.

Technical and security information

  • IP address, browser or device type, and session data, recorded to keep your account secure.
  • Audit logs of significant actions, such as approvals, check-ins and changes made by staff.

Information about others

  • Vendors and sponsors submit business contact details and documents.
  • Transport operators provide bus driver details (name, phone number and national ID number) so that buses can be operated and tracked safely.

Device permissions

  • Camera: used to scan QR codes at checkpoints, and to take a profile photo if you choose to.
  • Photo library: used only if you choose a profile photo.
  • Location: used only by bus coordinators while they have Trip Mode open in the app. It reports the bus's position so the transport team can track it. We do not collect the personal location of delegates, and we do not keep a history of bus positions; only the most recent position is stored.
  • Notifications: used to send alerts, if you allow them.

We do not collect payment card details through the Service. We do not use the information to track you across other apps or websites, and we do not sell it or use it for advertising.

2. How we use your information

  • To create and manage your account and registration.
  • To approve, accredit and issue your digital pass, and to check you in at entry points, zones, facilities and buses.
  • To allocate accommodation, bus seats and conference programme places, and to plan catering and access support.
  • To send you conference notifications and to answer your support requests.
  • To keep the conference safe and secure, and to investigate misuse or incidents.
  • To meet legal and audit obligations.

3. Who we share it with

  • Conference staff only, according to their roles. For example, a bus coordinator sees only the manifest for their own bus, and a security marshal sees only the check-in result for a scanned pass.
  • Service providers that help run the Service, under agreements that limit their use of the data:
    • Google Firebase, which delivers push notifications to your device.
    • Hosting and email providers used to run the Service and send account emails.
    • OpenStreetMap and Bunny Fonts, which serve map tiles and fonts. When your device loads them, they receive your IP address and device information as part of the request.
  • Authorities, where the law requires it.

We do not sell your personal information.

4. How long we keep it

  • Registration, account, pass and accommodation and transport records are kept for up to 12 months after the conference ends, unless the law requires us to keep them longer.
  • Check-in and scan records and audit logs are kept for up to 24 months after the conference, for security and accountability.
  • Sensitive information (dietary and accessibility requirements) is deleted within 12 months after the conference ends, or sooner if you delete your account.
  • When you delete your account, your login, registration and pass are removed straight away. Audit and check-in records are kept only in a form that no longer identifies you, until the periods above end.

5. How we protect it

  • All connections to the Service use HTTPS.
  • Passwords are stored as secure hashes.
  • Access to information is limited by role, and staff actions are logged.
  • Pass codes are used only to verify passes and are not shown to anyone other than you.

No system is completely secure. If we learn of a breach that affects your information, we will tell you and the relevant authorities as the law requires.

6. Your choices and rights

You have the right to:

  • Access the personal information we hold about you. You can see most of it in the app or web portal.
  • Correct your information. You can update your phone number and profile in the app or on the web, and contact the Registration desk for other changes.
  • Delete your account and personal information (see section 7).
  • Withdraw consent to optional processing, such as notifications or profile photos, by changing your device settings or telling us.
  • Object to or ask us to restrict processing where the law allows.
  • Complain to the Data Protection Authority established under the Cyber and Data Protection Act if you believe your information has been misused.

7. Deleting your account

You can delete your account at any time:

  • In the mobile app: open Profile, choose Delete Account, and confirm with your password.
  • On the web: sign in, open Profile, and use the Delete Account section.

Deleting your account permanently removes your login, registration and digital pass. Information described in section 4 is kept only as long as needed for security, audit and legal reasons, and then deleted.

If you can no longer sign in and need your account deleted, contact us through the Help & Support page.

8. Children

The Service is for adults aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will delete it.

9. Cookies and similar technologies

The web portal uses a session cookie to keep you signed in and a security cookie to protect forms. We do not use advertising or tracking cookies.

10. Changes to this policy

We may update this policy. We will change the date at the top of this page and, for material changes, tell you through the Service before they take effect.

11. Contact

For questions about this policy or your information, use the Help & Support page of the Service.