Privacy Policy

1. Who we are

Cosca Films is owned and operated by Tiyani Zambia (tiyanizambia.online), with coscafilms.online as its storefront. We are the data controller for the information described here. Questions, requests and complaints go to coscafilms@gmail.com.

2. Information we collect

Account information: your email address, a password (stored only as a cryptographic hash, never as readable text), and the full name and mobile number you choose to give us.

Purchase information: the film you bought, the amount in Zambian Kwacha, the date and time, the payment status, and the reference returned by Lenco. Your mobile money number or card details are handled by Lenco — card numbers are never typed into our app or stored by us.

Device information: a device identifier and a plain-language device label (for example “iPhone 13 · Safari”) generated in your browser, plus the date your account was first locked to that device. This is what lets us keep a purchased film to one phone.

Watch activity: whether a film finished playing, and the star rating you choose to submit.

Notification information: if you switch on phone notifications, the browser push address your device gives us, so alerts can reach you.

Support messages: anything you write to us, plus the email it came from.

Technical logs: our hosting provider records the request your browser makes, which includes an IP address, for security and abuse prevention.

3. Why we need it

To create and sign you in to your account; to confirm your payment and release the film to you; to keep your films locked to the device you bought them on; to show you your own library and purchase history; to answer support requests; to detect and stop sharing, scraping or account takeover; and to keep records required under Zambian law.

We rely on your agreement when you sign up, on the contract formed when you buy a film, and on our legitimate interest in protecting the service. We do not make automated decisions about you and we do not profile you for advertising.

4. Who we share it with

We never sell or rent your data, and we never share it for advertising. We share only what each provider needs to do its job:

Lenco — processes payments in Kwacha and confirms whether a payment succeeded. They see the amount, your mobile money number or card, and their own transaction reference.

Supabase (Google Cloud) — stores your account, profile, purchases, ratings and notification settings.

Cloudflare — stores and delivers the films and pictures, and keeps the site online.

Vimeo — only for the small number of films we host there. When you play one of those films, Vimeo sees that you watched it.

Google Fonts — the typefaces are downloaded from Google, so Google sees your IP address when a page loads.

We will disclose data to the police, a court or a rights holder where we are legally required to, or to stop fraud or infringement.

5. Where data is stored

Your account and purchase records sit on Supabase infrastructure, and films and pictures sit on Cloudflare R2 storage. Both run outside Zambia, so information may be processed in other countries. We use providers that keep encryption in transit and at rest, and we limit access to staff who need it.

6. How long we keep it

Until you close your account. After deletion, only the payment record held by Lenco remains, because payment providers must keep their own transaction history. Film ownership ends the moment the account is deleted.

7. Your choices

You can see and correct your name and mobile number on the Account page, switch notifications off at any time from your phone's settings or your browser, ask us for a copy of what we hold, or delete everything — permanently — from the Account page or at coscafilms.online/delete-account. We act on a deletion request within 30 days and confirm it by email.

8. Children

Cosca Films is for adults aged 18 and over. We do not knowingly collect information from children. If a young person has signed up without a parent's agreement, tell us and we will close the account and remove the data.

9. Security

Passwords are hashed, every page runs over HTTPS, film files are served through private links that expire, and payment confirmations are re-checked with Lenco before a film unlocks. No system is perfect — if you believe your account is at risk, change your password and contact us straight away.

10. Changes to this policy

If we change this policy in a way that matters to you, we will say so on this page and, for existing users, by email or an in-app notice before the change takes effect. The “last updated” date above shows the current version.

11. Complaints

Write to coscafilms@gmail.com and we will reply within 14 days. If you are not satisfied with our answer, you may complain to the Zambian Information and Communication Technology Authority (ZICTA), which handles data protection in Zambia.