What we collect, and why

• Your phone number, because it is how you sign in. An email only if you give us one.
• What you watch — which titles, how far through, and when. This is what makes “continue watching” work across your devices, and it is what channels are paid on.
• How playback performed — how long it took to start, whether it buffered, roughly what quality. We use this to find out whether delivery is actually working in Kigali at eight in the evening.
• Your purchases — what you bought and when. Payment card and mobile money details are handled by the payment provider and never reach us; we store a masked reference like “•••• 456”.
• Your devices — a random identifier we generate and store in your browser, plus a coarse description like “Chrome on Android”. This enforces stream limits and lets you sign a lost device out.
• Your country and IP address, because some titles are only licensed in some countries and because it is how we detect abuse.

• We do not sell your data. There is no advertising network embedded in Amashusho.
• We do not fingerprint your device. The device id is a random value we generate — clearing your site data resets it.
• We do not track you across other websites.
• We do not read your contacts, your location beyond country, or anything else your phone would ask permission for.

• Payment providers (MTN, Airtel, Flutterwave) see what they need to take a payment. We see the outcome and a masked reference.
• Channels see aggregate numbers about their own titles — watch time, completion rates, which countries. They never see who you are or what else you watched.
• YouTube, for the minority of titles hosted there. When you play one, your browser talks to YouTube directly and their privacy policy applies to that. We use their privacy-preserving player host, which does not set advertising cookies unless you play the video.
• Our SMS gateway sees your number when we send you a sign-in code.

• Watch history and resume positions: until you delete your account.
• Playback quality diagnostics: rolled up into anonymous daily totals and the raw sessions discarded.
• Payment and order records: seven years, because tax law requires it.
• Sign-in codes: five minutes.
• Sessions: sixty days, or until you sign the device out.

You can see and sign out every device from your account. To get a copy of your data or have your account deleted, write to [email protected]. Deletion removes your identity, history and devices; anonymised records of payments are kept where the law requires it.

Amashusho operates in Rwanda and is subject to Law N° 058/2021 on the protection of personal data and privacy. Our formal registration and the appointment of a data protection officer are part of the pre-launch work described at the top of this page.