Privacy Policy
This policy explains what personal data the Swala Kazi app collects, why, who can see it, how long we keep it, and your rights under Tanzania's Personal Data Protection Act, 2022 (PDPA).
1. Who is responsible for your data
The data controller is [LEGAL ENTITY], [ADDRESS], Tanzania. Registration with the Personal Data Protection Commission (PDPC): [PDPC REGISTRATION NUMBER]. For anything about your data, email support@kemosabeonline.uk.
2. Our rules for your data
- We collect only what a booking, a payment or safety needs.
- We never sell your data, and we don't use it for advertising.
- The other side of a booking never sees your phone number. Calls and chat stay inside the app.
- Your exact address is shared with a helper only for a confirmed booking.
3. What we collect, why, and how long we keep it
| Data | Why | Who can see it | How long |
|---|---|---|---|
| Account: name, phone number, email, role (customer or helper), language, profile photo | To sign you in and run your account | You and KAZI. The other side sees your name and photo only | Until you delete your account |
| Terms acceptance: version and time | Proof of our agreement | KAZI | At least 2 years after your account ends |
| Helper ID check: NIDA number, date of birth, ID photos, video selfie; police clearance certificate if uploaded | To check identity and age (18+), prevent duplicate accounts and, for childcare, check the clearance | KAZI's verification team only. Customers see the "ID checked" label and date, never the documents | ID photos, video and certificate: deleted 90 days after a rejection or after the account is deleted. NIDA number and date of birth of a deleted account: 2 years, to answer police requests and stop banned people re-registering |
| Helper home area and pin | To show rough distance in search | KAZI. Customers see the district and ward and a distance rounded to 0.5 km, never the pin | Until you change it or delete your account |
| Saved customer addresses and map pins | So the helper can find the job | You; the helper of a confirmed booking (district and ward only before that) | Until you delete them or your account |
| Bookings: date, hours, price, instructions, status, timeline of every step with the GPS point of arrival | To run the booking, pay the right person, and settle disputes | Both sides of the booking and KAZI | At least 2 years after the booking (dispute and tax evidence) |
| Live location of the helper during a job | So the customer can see the helper coming | That booking's customer only, from "On my way" until arrival | The latest point only; cleared when the booking ends |
| Before and after photos, dispute reports, statements and evidence, SOS alerts with location | Proof of the work, safety, and fair dispute decisions | Both sides (photos, reports about them) and KAZI | At least 2 years after the booking |
| Chat messages | Talking about the job without sharing phone numbers | Both sides and KAZI when a report is reviewed | At least 2 years after the booking |
| Calls: who called whom, start, end, duration | Evidence that the sides talked | KAZI | At least 2 years after the booking. Call audio is never recorded |
| Payments: the paying phone number, amounts, transaction references, payouts and refunds | To collect, pay out and refund | You, KAZI and our licensed payment partner | At least 2 years, longer when tax law requires |
| Reviews and ratings | To help others choose | Shown in the app | Until removed. If you delete your account, your reviews stay but show "Deleted user" instead of your name |
| Device notification token | To send booking alerts and incoming calls | KAZI and Google's notification service | Until the app removes it, or Google tells us it no longer works (for example, the app was uninstalled). It is also deleted when you delete your account |
| Technical logs: errors, IP address, app version | Security and fixing faults | KAZI | A short time only |
Where a row says "at least", those records are not yet deleted automatically when the period ends. When automatic deletion is in place we will say so here, with a new version date.
Deleted data can remain in our encrypted backups until they are replaced, at most about 100 days.
4. Location
The app uses your phone's location only when you use a feature that needs it: choosing an address, a helper tapping "On my way" or "I've arrived", and SOS. Helpers share live location only from "On my way" until "I've arrived". We don't track anyone in the background outside a job.
5. Why we are allowed to use your data
- To perform our agreement with you: accounts, bookings, payments, chat and calls.
- Legal obligations: tax records and valid requests from the police or courts.
- Legitimate interests: safety, preventing fraud and duplicate accounts, keeping evidence for disputes.
- Your consent: for ID photos, the video selfie and location. You can withdraw consent, but we can't then verify you or run a job that needs it.
6. Who we share data with
- The other side of a booking: only what the job needs, as in the table above.
- Our licensed payment partner: to collect payments, pay helpers and send refunds.
- Service providers that run the app for us: our server host, Cloudflare (network security), Google Firebase (notifications) and our email provider. They act only on our instructions.
- The police or a court: when they make a valid legal request, for example after a theft or safety report. We share a helper's checked identity with the police on such a request.
Our servers are in the European Union, so your data is stored outside Tanzania. We transfer it only to providers that protect it to the standard the PDPA requires.
7. Security
All traffic is encrypted (HTTPS). ID documents are stored privately and opened only by the verification team through short-lived links. Access to the system is limited to the people who need it, and admin tools are behind an extra login.
8. Your rights under the PDPA, 2022
- See the personal data we hold about you and get a copy.
- Correct data that is wrong or out of date.
- Ask us to delete your data. Some records are kept for the time shown above because the law or dispute evidence requires it.
- Object to, or ask us to limit, a use of your data.
- Withdraw consent at any time.
- Complain to the Personal Data Protection Commission.
Email support@kemosabeonline.uk from the email address on your account, or say which phone number the account uses. We may ask you to confirm it is you, and we reply within 30 days. To delete your account, see Delete your account.
9. Children
KAZI is only for people aged 18 and over. We don't knowingly collect data from children. Helpers must be 18 or older, and we check their age.
10. Changes
When this policy changes in a way that matters, we publish a new version here and the app asks you to accept it.