Privacy Policy

Who this applies to

This policy covers the eMOSE app on mobile — iOS and Android — and the same app in the browser, at apps.emose.co.mz. It does not cover the public website www.emose.co.mz or what happens at a branch, which follow their own processes.

Data controller: eMOSE — Empresa Moçambicana de Seguros, Maputo, Mozambique.

Signing in takes no password

The app has no password at all. You sign in with a six-digit code sent to your email address or to your phone, and the same code both signs you in and creates the account: proving you read that inbox, or answer that number, is what gets you in — and if you had no account yet, you now have one.

• A code is good for ten minutes, allows five attempts, and can only be requested again after one minute.
• While it is valid it exists only in the server’s memory and is never written to disk. And what is kept is not the code itself but a fingerprint of it (SHA-256) — enough to confirm it, not to reconstruct it.
• Restarting the server discards any unconfirmed codes. Anyone mid-way simply asks for another.

What we collect, and why

The account

Your name, and an email address or a phone number — one of the two, whichever you signed in with. It is what identifies the account and how we reach you. A phone number only identifies an account once it has been confirmed by code.

The profile

Address, locality, country, date of birth, NUIT and nationality. They exist so insurance proposals can be filled in without asking you the same things every time.

The identity document

The type — national ID, passport or DIRE —, the number and the expiry date. A subscription does not proceed without an address, a document and its expiry date.

The driving licence

Number, expiry date and categories, when you take out a policy that asks for them.

Photographs of documents

Images of your identity document and driving licence, when you take them in the app. The document type decides how many: a national ID and a DIRE have a front and a back, a passport has a single page.

Policies, claims and payments

What you took out, what you reported, and what is paid or outstanding.

When you report a claim

The description, the date, the place and any photographs you take. If you allow it, the app reads your phone’s location at that moment to fill in the place — you can decline and type it yourself.

Sessions

For each device you sign in on: the name the device reports, the platform — iOS, Android or web — and the dates it started and was last used. It is what lets you see and end your open sessions, on the “Security” screen.

The assistant

The questions you type into the chat, with your account’s identifier if you are signed in. Signed out, questions go through anonymously.

Preferences

Language, theme, and which notices you want — claims, payments, security, promotions.

On the phone itself

The app stores your session key and your preferences on the device. Signing out erases them.

What the app does not do

• It carries no advertising, no tracking, and no analytics or user-profiling library of any kind. No Google Analytics, no Firebase, no social-network SDK — none at all.
• It collects no bank card details and no mobile-wallet credentials. Recording a premium as paid stores the method — M-Pesa, bank account or transfer — and nothing else.
• It does not access your photo library. The permission iOS shows exists because a system library supports it; no eMOSE feature asks for it.
• It does not read your location in the background. It is requested once, when you press the button, while reporting a claim.
• It does not use the camera outside of reporting a claim and photographing your own documents.
• It does not sell your data to anyone.

Who it is shared with

AutoGPA

The engine where subscriptions, amendments, cancellations and claim reports run. It receives the data each proposal asks for. It is also what sends the codes by email and what answers in the assistant.

The telecommunications operator

Receives your number and the text of the message, when a code goes by SMS.

The system’s maps

The branches screen uses your phone’s own map — Apple Maps on iOS, Google Maps on Android. And when a claim’s location is turned into an address, it is the operating system’s service that answers, not eMOSE.

Authorities and courts

Where the law requires it.

Beyond this, your data does not leave eMOSE.

Where it is held, and for how long

The data is held on eMOSE servers, at api.emose.co.mz. The connection between the app and the server is encrypted.

Sign-in codes

Ten minutes, and in memory only.

Sessions

Thirty days unused and they are deleted. Signing in again opens a new one.

Account, policies, claims and payments

For as long as the account exists, and for as long as the insurance contract and the obligations arising from it require.

What you can do

• See and correct. The “Profile” screen shows and changes what we hold about you.
• Change your email or phone. A code is sent to the new destination, exactly as at sign-in: typing it is not enough, you have to reach it. Once an email exists it does not change — it is what identifies the account.
• End sessions. On the “Security” screen, one at a time or every other one at once.
• Choose your notices. On the “Notifications” screen.
• Delete your account. The app does not have that button yet. Until it does, ask through the contacts below.

Security

• Each session has its own key, held on the server as a fingerprint and never as readable text.
• Photographs of your documents do not live in a public folder: they are reachable only through a door that checks who is asking first.
• No service credential travels inside the app. Keys to outside services stay on the server.

Changes to this policy

When this text changes, it changes at this same address, and the date at the top changes with it.

Contact

For any question about your data, or to ask for your account to be deleted:

Phone: +258 21 351 000

eMOSE has not yet published an email address dedicated to privacy matters. Until it does, please use the phone number above.

Or through the assistant, on the app’s “Chat” tab.